Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e20383334.roa
File:                     3231362e3135312e3136372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          yaiNU2mCO3d1TSf7DpHXQKH7VaS0p+tFx8BrUAcmI0Y=
Subject key identifier:   F8:7D:AA:CF:E7:49:C6:AF:01:BB:3D:24:4B:03:BB:B2:90:5F:7C:5B
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       355CC6F075AC1D6A7A19059C0516391920C58954
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e20383334.roa
Signing time:             Sat 27 Jul 2024 00:02:48 +0000
ROA not before:           Fri 26 Jul 2024 23:57:48 +0000
ROA not after:            Sat 26 Jul 2025 00:02:48 +0000
asID:                     834
IP address blocks:        216.151.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 07:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:c6:f0:75:ac:1d:6a:7a:19:05:9c:05:16:39:19:20:c5:89:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jul 26 23:57:48 2024 GMT
            Not After : Jul 26 00:02:48 2025 GMT
        Subject: CN=F87DAACFE749C6AF01BB3D244B03BBB2905F7C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:9e:58:a5:e0:73:7f:1b:24:16:d2:7f:c0:
                    a1:48:75:12:89:6a:14:7b:7a:48:80:ae:dd:86:75:
                    b6:a6:55:65:65:55:92:ab:de:b4:77:c3:f8:32:7e:
                    e7:69:fd:3c:4d:12:bc:6b:63:4a:fd:05:65:f6:4b:
                    a7:1b:b2:32:b4:ae:90:3b:d5:12:5d:e6:d5:db:34:
                    c9:73:02:ad:89:cc:60:06:d0:8f:57:99:b3:70:bb:
                    d5:10:e9:52:2d:ad:66:df:79:c4:f6:f3:1e:33:18:
                    84:45:fe:b3:16:e2:66:e7:6f:97:0d:27:96:4e:aa:
                    38:4f:68:6e:01:ae:f4:8e:0a:d3:ae:f9:40:cc:4e:
                    5f:a4:29:4e:36:c9:f0:6e:c9:cb:5a:af:8c:2e:f0:
                    ce:8b:e6:e3:ab:9f:69:20:be:4e:a5:d6:23:f8:2a:
                    6d:4b:5c:3a:cf:41:18:27:cd:a0:7e:ef:d0:d1:4d:
                    a2:db:b6:a2:fd:f2:00:55:a2:90:7b:c4:20:3a:2b:
                    85:08:72:53:f4:42:83:7c:e4:5c:f7:53:68:9e:63:
                    31:9d:ab:b6:d3:cb:76:58:04:eb:7e:00:c9:22:71:
                    f3:7a:61:26:02:59:af:9a:5e:d6:ec:a0:62:19:44:
                    4a:a3:d0:84:f4:8c:6f:ae:fd:33:c5:63:4b:24:37:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7D:AA:CF:E7:49:C6:AF:01:BB:3D:24:4B:03:BB:B2:90:5F:7C:5B
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:07:40:25:9b:d4:1d:da:e1:a6:08:70:5b:16:3f:4f:8a:54:
         82:38:4c:cf:df:19:a1:3e:1e:70:2f:37:e5:00:88:bc:15:64:
         88:00:85:c7:31:12:d6:e8:c7:c1:2c:86:e1:f9:de:b2:01:5b:
         80:cf:c2:5b:88:1c:75:29:60:5f:e8:68:46:35:b7:7e:85:17:
         ce:a2:4e:37:0f:17:f4:ff:9e:20:e4:24:d1:76:7b:cc:d3:50:
         09:38:18:83:67:1f:7a:4e:cb:d5:8a:db:28:5f:2b:35:da:fa:
         28:0d:ac:dc:53:29:cb:1b:d8:2e:ab:59:ad:f0:21:1c:28:95:
         e0:63:1b:cc:fd:c8:1f:40:86:3b:c9:64:7e:17:68:af:75:33:
         ec:39:75:3d:19:b0:dd:5d:2f:3c:a7:25:55:fe:98:27:82:6c:
         9a:b4:30:e9:d9:27:9c:a5:ca:26:58:72:8b:a9:1c:3a:09:8c:
         03:f2:ba:eb:28:e8:a2:1c:92:e9:f9:f5:3c:7a:43:a6:60:1f:
         31:e9:f5:d0:aa:0a:e5:6b:95:a5:b5:60:4f:9a:2e:c8:b5:0c:
         10:cd:5a:5a:2f:88:e2:63:25:c4:32:65:b1:f1:be:0f:b7:66:
         a4:20:95:7b:6b:c3:1b:88:c2:d5:52:ee:e8:4d:bb:88:65:7b:
         f4:46:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----