Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e322e302f32342d3234203d3e20333935313633.roa
File:                     3134322e3134372e322e302f32342d3234203d3e20333935313633.roa (raw, json)
Hash identifier:          81+vvc3uDcRf/0az7++4AMiEeBu+L4dZd8qmZaT4nwI=
Subject key identifier:   35:18:40:CF:5B:EB:23:10:B6:11:14:AF:E9:8C:D2:50:88:11:B2:90
Certificate issuer:       /CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
Certificate serial:       2B6079D34FAB0F4DD92F80C3A001A3BA666FC085
Authority key identifier: 21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e322e302f32342d3234203d3e20333935313633.roa
Signing time:             Thu 27 Jun 2024 18:27:20 +0000
ROA not before:           Thu 27 Jun 2024 18:22:20 +0000
ROA not after:            Thu 26 Jun 2025 18:27:20 +0000
asID:                     395163
IP address blocks:        142.147.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 18:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:60:79:d3:4f:ab:0f:4d:d9:2f:80:c3:a0:01:a3:ba:66:6f:c0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347
        Validity
            Not Before: Jun 27 18:22:20 2024 GMT
            Not After : Jun 26 18:27:20 2025 GMT
        Subject: CN=351840CF5BEB2310B61114AFE98CD2508811B290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:f8:58:1d:e8:f6:93:64:20:fe:2f:dd:17:
                    77:d3:b8:9b:07:22:31:5b:63:7e:57:d3:b5:c8:1a:
                    26:57:d5:51:5a:2d:4c:2e:82:40:65:c4:7a:c4:fb:
                    c7:62:e7:2c:c8:00:0b:13:78:c8:52:70:f4:e7:bf:
                    d1:e2:3d:8b:e2:5c:45:5c:b9:38:bc:a2:67:ca:34:
                    ad:c4:8b:9c:86:56:a0:e9:16:64:7c:d1:77:22:b9:
                    33:8d:4e:ec:91:bf:5d:e5:98:33:03:02:0c:69:da:
                    0e:fb:a0:31:18:cd:1b:9b:7e:0f:e6:8d:35:e9:79:
                    d6:59:a8:99:d4:89:64:a8:6c:d4:0b:20:7f:f4:2b:
                    e0:43:e2:d4:bd:8c:d9:6b:84:fd:47:27:b1:71:49:
                    1f:e0:29:71:32:6b:d8:d4:01:3f:54:c6:8e:dd:33:
                    d4:d5:f8:67:fb:25:96:ae:e9:e4:6c:d1:e7:40:92:
                    86:b3:45:0f:55:ed:65:45:b2:2b:e0:ff:02:e0:36:
                    2b:31:ce:60:88:12:e1:5f:17:f4:8e:a8:f9:c8:db:
                    d3:b4:bd:c2:73:f5:f0:8f:aa:6f:de:af:0a:65:23:
                    98:d0:85:69:f3:dc:51:0a:40:d2:99:3b:65:52:bd:
                    1f:8b:61:63:2e:0b:cb:82:4d:70:78:ce:e6:d4:c6:
                    e4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:18:40:CF:5B:EB:23:10:B6:11:14:AF:E9:8C:D2:50:88:11:B2:90
            X509v3 Authority Key Identifier:
                keyid:21:EF:AC:AF:1A:16:2D:6A:12:C0:F1:0A:28:BE:95:D0:F3:06:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/21EFACAF1A162D6A12C0F10A28BE95D0F30693B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b7592484-1960-4d36-b7eb-45faebea987d/c571b11ca91ed05e60c3c3b481f3b5cf15cd660662e877b347.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade904a97e901905af1deb91435/0/3134322e3134372e322e302f32342d3234203d3e20333935313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:65:cc:cc:e4:35:8f:fd:a2:d4:df:8e:71:d4:c5:a6:47:
         dc:99:be:3e:e8:e6:40:13:c6:5d:60:99:e1:99:ce:d1:67:14:
         b4:64:2d:c3:86:ae:da:27:20:f7:4d:1d:1a:f6:47:64:eb:7a:
         7b:47:ff:b8:0a:04:36:0e:2b:47:49:ed:64:e3:f4:cc:42:00:
         e4:9b:f3:ef:7c:5b:bb:3b:61:35:c5:62:a3:b8:31:98:a8:98:
         2d:29:70:99:7b:21:a7:fe:65:de:cf:e4:00:8d:73:68:14:05:
         fa:39:1b:52:f8:47:8b:83:2a:b0:5c:fc:01:96:41:10:e5:50:
         36:57:8e:ca:2d:61:19:e2:d4:41:ae:f9:83:bd:cc:d3:5e:29:
         65:25:33:11:2f:23:a9:8a:68:6a:11:c8:3d:3e:b9:5d:25:4f:
         cf:f3:04:6d:bf:38:8a:a1:98:70:b7:b8:8b:89:c4:80:27:25:
         5d:44:84:f6:c2:20:8b:88:ad:f3:f9:52:3b:36:31:d9:ac:3d:
         ab:de:c9:65:18:34:b1:eb:47:2c:66:3e:93:c0:c8:7b:0f:8b:
         89:d5:6b:b5:87:8e:95:e0:36:be:d1:54:58:4b:ad:89:17:e3:
         b7:3a:3e:ef:df:97:58:45:14:f3:c3:ff:d8:04:be:ab:8a:3b:
         43:e2:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----