Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e20383334.roa
File:                     3231362e3135312e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          4fsa3BrYG0s2i8Drgn4rnsJ9t+QAl2ox/i47LOIRtQs=
Subject key identifier:   6E:D5:22:EA:24:0B:61:71:39:8F:4E:18:A3:10:A9:9E:E6:B8:F7:6F
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       109B1EC79804E67AD4FBF38EE9288D1BCC1C6C8A
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e20383334.roa
Signing time:             Fri 28 Jun 2024 15:55:47 +0000
ROA not before:           Fri 28 Jun 2024 15:50:47 +0000
ROA not after:            Fri 27 Jun 2025 15:55:47 +0000
asID:                     834
IP address blocks:        216.151.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 08:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9b:1e:c7:98:04:e6:7a:d4:fb:f3:8e:e9:28:8d:1b:cc:1c:6c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jun 28 15:50:47 2024 GMT
            Not After : Jun 27 15:55:47 2025 GMT
        Subject: CN=6ED522EA240B6171398F4E18A310A99EE6B8F76F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a0:1d:e5:c6:ad:92:43:fb:81:5a:d7:27:ff:
                    3e:aa:55:60:ff:8d:b0:81:1b:48:a0:cf:40:26:5f:
                    c8:4c:6e:94:65:30:b8:45:8d:52:a3:ba:bc:29:a3:
                    a7:8e:64:9a:3d:b8:c0:c8:f6:e5:a4:86:ae:48:df:
                    88:a3:37:be:da:88:d2:1e:91:8f:b3:92:82:7c:b4:
                    c0:3e:6c:b1:67:77:6b:eb:90:ba:68:e3:62:c5:b1:
                    85:28:98:a8:20:cf:a1:61:13:3c:db:04:60:32:59:
                    07:e5:b8:31:2d:78:f2:94:1f:dd:f0:ac:ba:7b:47:
                    6b:ba:7f:99:1c:a9:b0:b9:57:14:bd:f6:b4:f6:4d:
                    2c:5d:80:c7:b4:2f:03:90:32:5f:f4:85:74:2c:ad:
                    9a:fe:65:c6:38:1f:59:8c:52:e5:7b:e0:00:2b:03:
                    45:ed:27:33:a8:c3:ed:81:19:f9:a5:64:a9:f4:33:
                    ad:bd:3f:99:a3:be:b9:e4:6d:93:9e:e8:d3:23:7a:
                    e2:80:c1:3b:8f:0c:08:ec:d0:cd:cb:8b:9b:13:cc:
                    bf:4a:ee:0a:88:30:99:cf:aa:f6:bc:11:9c:31:71:
                    ef:f2:33:90:b6:c5:d5:b2:11:1d:71:1a:9f:00:3c:
                    35:e7:f5:de:a0:8c:39:86:df:5e:47:fa:61:af:fb:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D5:22:EA:24:0B:61:71:39:8F:4E:18:A3:10:A9:9E:E6:B8:F7:6F
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:79:b4:52:61:88:b5:23:f9:61:d6:5f:7b:2c:0b:9d:6e:1d:
         64:c1:99:89:b7:7c:44:00:3d:07:ce:05:23:b2:11:28:fa:b0:
         4e:d6:41:ac:4e:73:80:3a:23:8a:78:dc:94:52:fd:91:33:93:
         bb:78:fc:0a:41:13:73:35:08:8d:6d:6e:af:2d:32:c2:54:20:
         fe:c5:99:4c:c9:d0:87:12:e5:67:01:92:97:a9:b8:e3:6a:24:
         f4:bb:01:6d:a2:42:29:37:5c:7e:17:20:7a:f3:ea:4e:4b:fc:
         4c:db:ad:43:22:96:f5:b6:28:43:55:ba:33:5c:10:f9:b4:02:
         88:93:45:eb:81:80:df:d7:b1:ba:33:c6:50:c3:99:18:9d:bd:
         2f:e5:92:19:8c:51:a2:d4:c1:1b:60:3a:46:05:58:eb:31:cb:
         78:a3:e3:a9:e7:b1:a7:4c:6d:a4:e1:ea:0e:51:70:d4:25:58:
         c3:ec:09:cd:32:97:d0:57:7c:73:e6:51:79:9e:cf:4f:59:60:
         f4:4e:cc:05:98:da:db:e7:b1:fc:e5:78:78:b1:86:c8:84:5d:
         e5:9a:f2:e3:19:ef:a1:43:4a:bc:64:f3:fb:51:b3:31:eb:46:
         0f:42:80:a7:fc:c4:2f:25:a4:cf:25:3b:1e:84:ec:81:19:63:
         f1:79:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----