Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          l5px2cWBuQ3wsDxUYv/YFOH2HvrDMuUNmM8OhVsROyU=
Subject key identifier:   EF:F6:97:04:67:E3:81:05:6D:90:79:65:AA:FD:59:C2:04:1E:9F:96
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       68CF96DAB20229ACC9F77788CED6FAF7C53A7836
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20383334.roa
Signing time:             Sun 17 Nov 2024 00:01:03 +0000
ROA not before:           Sat 16 Nov 2024 23:56:03 +0000
ROA not after:            Sun 16 Nov 2025 00:01:03 +0000
asID:                     834
IP address blocks:        104.254.192.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 03 Dec 2024 19:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cf:96:da:b2:02:29:ac:c9:f7:77:88:ce:d6:fa:f7:c5:3a:78:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Nov 16 23:56:03 2024 GMT
            Not After : Nov 16 00:01:03 2025 GMT
        Subject: CN=EFF6970467E381056D907965AAFD59C2041E9F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:0d:77:cf:63:d6:f9:45:f6:8f:c7:9a:23:
                    e5:bd:ab:b8:eb:a5:26:63:34:20:e1:20:24:cd:86:
                    ae:0e:63:9b:40:90:64:e2:a0:27:eb:f6:84:6c:c1:
                    d2:5f:04:e5:4c:a2:1a:66:fc:00:0b:a0:93:e8:2a:
                    b6:6f:f5:f7:94:67:58:7a:1c:d3:89:01:cf:56:eb:
                    d6:88:d9:8c:f8:d9:1c:d1:25:44:b6:18:31:b7:70:
                    e0:3d:ba:1a:4f:5b:79:36:08:b3:03:42:e4:8a:57:
                    45:a6:f8:17:1c:79:ba:6b:fe:4d:c0:96:91:71:95:
                    30:fa:4b:9f:c6:19:2e:c6:b5:7c:83:96:b7:1e:18:
                    99:f0:8a:bc:39:3c:5b:fd:48:df:25:fa:89:06:a5:
                    6e:06:ff:84:fc:55:32:09:a6:bc:b4:91:94:53:cf:
                    52:80:80:21:cb:36:2a:37:15:aa:49:15:a4:cc:7d:
                    ec:8f:e8:f4:9b:d3:68:b1:e6:9d:6f:6f:db:ad:b8:
                    fd:ba:20:eb:4e:18:fb:5d:09:d5:b2:38:1d:95:32:
                    47:cc:48:77:60:98:8a:01:9c:20:a5:d4:03:2a:c3:
                    07:b6:29:cd:af:19:95:ec:3e:4e:43:69:9c:71:bc:
                    c8:01:3f:9a:50:04:74:51:c5:03:d3:af:f6:46:c9:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F6:97:04:67:E3:81:05:6D:90:79:65:AA:FD:59:C2:04:1E:9F:96
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:8d:30:5d:c6:57:6d:60:79:85:22:fa:4e:50:03:6b:90:
         05:94:e4:1a:25:81:cd:d1:cb:b1:e7:9d:3a:59:ea:61:48:09:
         30:f0:23:eb:f3:41:8d:0f:12:19:af:78:ad:b4:8a:24:27:58:
         1b:5a:df:ce:70:24:c9:3c:5f:d4:c3:60:b9:96:95:6e:82:0b:
         5a:72:23:24:e1:c1:45:2f:a6:72:6f:c0:6b:40:e7:2e:0d:84:
         19:70:00:66:d5:cb:e4:6e:19:27:52:aa:03:0d:6c:4a:04:e9:
         5a:85:fc:6b:d2:87:a3:c3:47:27:41:e6:02:41:23:95:91:eb:
         71:86:7e:c5:12:b4:da:80:cb:98:ee:48:da:ac:06:4b:70:27:
         d8:0a:f8:13:55:f7:a6:89:7c:06:3a:e1:69:1c:e4:b1:05:5a:
         ec:cd:a4:a2:ab:3b:cb:d0:04:7e:d4:61:3b:f3:89:7a:ca:b9:
         bd:33:83:6b:5c:d9:97:da:ef:65:f8:81:bb:6d:16:eb:d4:ca:
         c7:1b:94:e0:76:c3:3e:13:87:ee:1e:91:98:ee:12:12:55:7f:
         91:29:4e:56:5a:3c:c8:2d:0a:1d:15:ae:ea:2a:b9:ce:0f:a8:
         c7:fc:89:a1:b5:a8:58:0f:57:8f:7e:50:d2:4f:fe:0b:a0:76:
         93:a7:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:07 2025 by rpki-client