Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e2037333933.roa
File:                     3231362e3135312e3136342e302f32332d3233203d3e2037333933.roa (raw, json)
Hash identifier:          6ucouB2x7GSoAYwK5n+90ur+UAHh10Qtylna3T6SEjg=
Subject key identifier:   95:06:FB:3E:AE:EF:71:94:4B:13:54:69:0A:57:CE:06:77:8F:B0:CE
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       16EE79DE6E254C97F480E0E8BECDC77E2D1BEBD9
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e2037333933.roa
Signing time:             Tue 11 Jun 2024 14:13:52 +0000
ROA not before:           Tue 11 Jun 2024 14:08:52 +0000
ROA not after:            Tue 10 Jun 2025 14:13:52 +0000
asID:                     7393
IP address blocks:        216.151.164.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 14 Jun 2024 07:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ee:79:de:6e:25:4c:97:f4:80:e0:e8:be:cd:c7:7e:2d:1b:eb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jun 11 14:08:52 2024 GMT
            Not After : Jun 10 14:13:52 2025 GMT
        Subject: CN=9506FB3EAEEF71944B1354690A57CE06778FB0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:98:46:aa:28:58:74:7c:03:bb:5c:28:2f:
                    38:5e:d8:71:7e:ce:74:7c:2e:18:4e:18:03:da:7a:
                    93:b2:2d:fb:4f:28:69:92:76:a3:97:c0:8b:4e:2d:
                    9c:ae:b7:d8:50:cd:a0:e6:0c:f2:1d:1d:67:ab:33:
                    2d:38:f1:98:ac:74:dd:85:94:40:d7:85:46:1f:96:
                    a2:2d:b1:7e:4a:7c:97:e3:59:9e:79:4c:7f:9e:b9:
                    aa:fc:a3:7c:c4:8f:8d:64:f8:5e:20:87:b2:2f:7a:
                    8b:51:de:c0:07:7f:ba:9f:b6:78:22:4d:84:8c:18:
                    6f:65:9e:eb:1d:b4:76:91:93:40:12:ad:59:4e:0b:
                    3e:bb:59:3f:f0:9a:b6:30:fa:57:83:ab:5d:5c:21:
                    d1:55:e9:c3:ac:42:72:d6:7c:2f:4e:63:12:6a:e7:
                    24:3e:5b:d9:81:69:ad:66:bb:8c:39:55:b6:5a:c3:
                    a9:e4:a6:a7:76:0a:f1:b1:a1:13:3b:d5:c9:fe:a1:
                    fc:59:b3:11:04:b5:6b:cf:50:21:d1:01:fa:7a:26:
                    5d:36:d3:56:7c:de:e2:55:07:e1:5c:2e:3e:e1:79:
                    10:af:ce:6a:42:4b:28:7f:47:8d:65:e9:15:d1:d5:
                    10:79:8c:ca:23:e5:6a:56:e3:8b:de:9e:83:cb:0e:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:06:FB:3E:AE:EF:71:94:4B:13:54:69:0A:57:CE:06:77:8F:B0:CE
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e2037333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:18:6b:b4:86:51:7a:3c:1f:3c:84:e5:3e:bd:cb:37:df:
         f0:98:6f:c8:52:97:df:b8:f9:11:40:40:73:6a:12:05:37:e4:
         ae:ef:69:0d:dc:d8:bf:68:6b:4b:0e:a6:7a:09:8a:37:b2:21:
         3a:83:9c:8b:aa:43:5d:2f:a6:c5:f1:fd:fe:be:6c:64:9b:0c:
         57:b9:dd:9e:d4:64:01:80:95:0f:30:b7:e6:2b:0c:68:ec:69:
         47:f3:56:c3:7a:09:6c:73:10:ec:77:46:d3:50:14:6d:0b:fe:
         a9:6c:47:41:be:84:66:13:36:af:17:c7:e3:32:b4:59:d7:ac:
         63:ee:57:3e:90:7f:13:c0:bb:d6:66:1a:82:ae:85:c5:94:e1:
         5a:20:a3:d5:bd:c3:88:bb:c6:9b:54:8d:e6:55:6a:54:fb:3f:
         42:43:97:a7:19:93:b7:b2:bb:65:8b:6e:23:fe:0a:0a:5e:77:
         02:d1:05:34:b5:57:69:6b:2f:ca:57:f1:26:e7:6d:a4:e0:a3:
         58:3a:65:64:08:b1:d5:11:37:e5:49:03:e4:7b:7a:52:f8:b1:
         e0:fb:73:40:27:f7:22:ec:20:a0:87:4b:1d:6c:a9:97:33:61:
         1d:34:29:a1:82:b6:8f:85:0b:c0:8b:e2:f9:a7:99:9e:5b:4e:
         62:ed:65:03
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUFu553m4lTJf0gODovs3Hfi0b69kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjQwNjExMTQwODUyWhcNMjUwNjEwMTQxMzUy
WjAzMTEwLwYDVQQDEyg5NTA2RkIzRUFFRUY3MTk0NEIxMzU0NjkwQTU3Q0UwNjc3
OEZCMENFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTyYRqooWHR8
A7tcKC84Xthxfs50fC4YThgD2nqTsi37Tyhpknajl8CLTi2crrfYUM2g5gzyHR1n
qzMtOPGYrHTdhZRA14VGH5aiLbF+SnyX41meeUx/nrmq/KN8xI+NZPheIIeyL3qL
Ud7AB3+6n7Z4Ik2EjBhvZZ7rHbR2kZNAEq1ZTgs+u1k/8Jq2MPpXg6tdXCHRVenD
rEJy1nwvTmMSauckPlvZgWmtZruMOVW2WsOp5KandgrxsaETO9XJ/qH8WbMRBLVr
z1Ah0QH6eiZdNtNWfN7iVQfhXC4+4XkQr85qQksof0eNZekV0dUQeYzKI+VqVuOL
3p6Dyw7RGwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJUG+z6u73GUSxNUaQpXzgZ3
j7DOMB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzQyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzNzMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdiXpDANBgkqhkiG9w0BAQsF
AAOCAQEAffEYa7SGUXo8HzyE5T69yzff8JhvyFKX37j5EUBAc2oSBTfkru9pDdzY
v2hrSw6megmKN7IhOoOci6pDXS+mxfH9/r5sZJsMV7ndntRkAYCVDzC35isMaOxp
R/NWw3oJbHMQ7HdG01AUbQv+qWxHQb6EZhM2rxfH4zK0WdesY+5XPpB/E8C71mYa
gq6FxZThWiCj1b3DiLvGm1SN5lVqVPs/QkOXpxmTt7K7ZYtuI/4KCl53AtEFNLVX
aWsvylfxJudtpOCjWDplZAix1RE35UkD5Ht6Uvix4PtzQCf3IuwgoIdLHWyplzNh
HTQpoYK2j4ULwIvi+aeZnltOYu1lAw==
-----END CERTIFICATE-----