Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e203233343730.roa
File:                     36342e3235332e39332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          r2FWj4PuCjpjlv9BqXcarVyPXlEfoaFRoRglpZw8hGU=
Subject key identifier:   57:A3:CB:CE:25:86:A8:60:84:90:BA:D4:0A:C2:EA:D8:06:91:0C:A9
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       496262A841462F9E182E67E835B16F4E9F816F33
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 22 Nov 2023 13:49:42 +0000
ROA not before:           Wed 22 Nov 2023 13:44:42 +0000
ROA not after:            Wed 20 Nov 2024 13:49:42 +0000
asID:                     23470
IP address blocks:        64.253.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:62:a8:41:46:2f:9e:18:2e:67:e8:35:b1:6f:4e:9f:81:6f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 22 13:44:42 2023 GMT
            Not After : Nov 20 13:49:42 2024 GMT
        Subject: CN=57A3CBCE2586A8608490BAD40AC2EAD806910CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:72:7c:11:ae:92:d4:18:20:25:3c:a7:6d:
                    4a:9a:83:94:8d:43:90:67:6a:a6:94:6f:1c:e2:68:
                    2a:9e:5d:21:fc:b0:95:ac:20:99:d7:55:a1:a5:72:
                    f6:10:9b:50:3a:f0:f9:a5:8d:92:12:0e:e4:02:f9:
                    5f:d6:3f:26:f3:11:66:72:01:b4:a0:69:b8:71:9d:
                    25:00:67:25:17:0d:4d:5a:a3:5f:dd:51:2c:68:52:
                    fa:25:0e:b3:d9:9d:05:be:68:7b:6b:df:4b:16:d3:
                    03:79:83:13:6a:37:bf:75:de:da:ce:69:9a:f9:9d:
                    2d:a4:82:e1:40:3f:1b:df:dc:ab:60:00:a0:74:f3:
                    ad:39:49:0b:df:08:d5:4d:70:25:f2:bc:2c:dd:a0:
                    9b:82:a2:84:d7:ec:35:f2:fb:94:95:13:a3:ea:cc:
                    13:ef:b5:45:4e:5a:57:22:d8:59:83:47:b4:9b:c5:
                    c8:75:0b:bd:51:94:86:99:50:fc:90:41:ee:c5:38:
                    2c:4c:92:e3:95:28:d2:c5:6f:2d:d7:aa:42:fa:a8:
                    00:85:66:7b:08:b8:95:67:52:30:87:0b:66:6f:09:
                    9e:cb:d3:b5:54:87:eb:a7:2c:e5:21:30:1b:e4:1a:
                    e3:48:ec:fa:8b:7d:f7:bd:87:28:a6:48:fb:34:40:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:CB:CE:25:86:A8:60:84:90:BA:D4:0A:C2:EA:D8:06:91:0C:A9
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:f4:89:74:36:5d:01:d4:10:00:f5:cf:cc:cb:e6:bf:c8:
         b8:34:72:81:52:e9:42:d3:4a:04:1c:5a:75:dd:1f:13:fb:63:
         57:73:7a:e3:49:42:fc:89:5c:46:15:db:c1:18:2b:8a:3f:16:
         3f:0c:9b:91:d5:d4:5a:f0:9c:44:d6:3b:13:52:70:b0:83:da:
         78:33:1d:eb:21:4a:f4:a0:23:bd:17:93:5a:ff:90:c4:cd:03:
         43:7b:92:9c:f0:8e:10:6f:6d:6e:28:38:f9:14:9f:f4:ab:3b:
         4a:57:76:73:53:77:07:48:fd:16:f5:37:51:ac:9b:a9:fd:cb:
         e3:60:e1:bc:18:0a:52:d6:76:df:46:99:19:1e:93:f5:10:e7:
         50:94:53:ec:c0:62:39:ee:41:04:75:fb:ef:ae:04:a0:d7:dd:
         7b:74:e7:e7:8a:b0:f1:71:d7:14:b1:0e:40:1f:8a:8c:f5:d4:
         96:ba:eb:0b:0c:bc:78:c3:fa:6f:ba:46:de:d9:71:b8:3a:6f:
         9b:4a:e4:2d:59:34:ca:a7:86:81:42:7c:25:5b:96:e7:be:28:
         24:42:e1:4a:3c:a8:1e:91:33:96:63:c0:d6:f4:a5:21:9e:17:
         a5:ec:e4:30:ea:36:af:57:82:fb:78:61:c3:b4:eb:db:2e:14:
         09:35:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----