Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          m4LeV7oCFLjwyu6V5UzpHZsl8ZvTdJyGtq1pb6GusSY=
Subject key identifier:   9A:14:FC:B4:26:18:EA:CF:AE:EB:A6:F9:BD:F4:80:37:1F:BE:B4:1C
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4ED0A6AD42A0C3D9E355EDC082D8C98088F7C625
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 28 Sep 2024 22:48:59 +0000
ROA not before:           Sat 28 Sep 2024 22:43:59 +0000
ROA not after:            Sat 27 Sep 2025 22:48:59 +0000
asID:                     1239
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 00:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d0:a6:ad:42:a0:c3:d9:e3:55:ed:c0:82:d8:c9:80:88:f7:c6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 28 22:43:59 2024 GMT
            Not After : Sep 27 22:48:59 2025 GMT
        Subject: CN=9A14FCB42618EACFAEEBA6F9BDF480371FBEB41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:03:ba:eb:10:a7:5e:fc:72:c4:b0:c7:38:
                    1c:fc:54:d8:91:0d:da:b4:6a:80:6a:33:ee:59:fc:
                    04:c1:1c:f2:25:e1:91:7e:f5:b3:7f:a2:0f:06:e2:
                    f9:52:66:7a:86:2d:f7:a2:88:55:6e:0d:f2:b6:7f:
                    6e:9e:72:f8:e7:8b:7a:92:18:12:20:05:a9:87:ef:
                    db:a0:09:28:04:df:c5:70:f9:14:5a:d8:db:ce:10:
                    8a:24:ee:94:ec:7c:18:1f:4f:2e:fe:74:82:7c:5b:
                    98:e9:44:f1:d6:3a:22:4d:ab:83:2c:a3:d8:14:9d:
                    5a:78:39:d9:b8:16:02:4d:94:c3:e3:e1:55:53:0c:
                    e8:35:ee:b9:1b:b7:2d:71:03:70:73:dd:72:c1:b5:
                    be:9a:f5:43:a3:98:0e:17:67:d2:fe:19:09:ea:82:
                    e6:28:ed:e3:27:84:b9:c0:20:39:67:61:33:08:ac:
                    ac:a6:26:94:88:6b:ee:17:fd:89:9f:20:1c:de:15:
                    77:84:35:e9:b3:d3:ad:a9:32:cf:35:2d:61:b3:ef:
                    92:9a:8b:4f:1b:2e:fa:93:0b:93:ff:89:cb:71:f7:
                    7e:ea:5d:f7:8b:e6:31:34:66:ac:7d:c6:95:dc:59:
                    e8:e1:b4:6b:b0:07:0a:32:fa:b2:df:af:a7:f2:5b:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:14:FC:B4:26:18:EA:CF:AE:EB:A6:F9:BD:F4:80:37:1F:BE:B4:1C
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:ca:ba:b5:dd:0a:03:fd:db:22:25:03:21:31:e7:15:f6:
         52:79:8c:7f:30:31:c3:24:99:86:0c:a1:86:fd:e0:75:e5:ad:
         97:43:a0:70:87:9c:30:37:27:ff:c8:f9:e0:8c:ae:ed:f6:57:
         30:ed:b3:1f:46:a7:8b:f2:cf:52:ad:ca:8d:c2:07:36:74:b5:
         ce:5b:ec:32:f5:af:a9:4e:e8:13:65:09:94:a2:55:2e:02:d1:
         80:3c:20:e8:35:c1:36:7a:67:8d:a8:8a:80:e2:c2:c1:d8:8d:
         c7:34:c3:ce:c1:a6:69:ae:de:15:a4:cc:6c:fa:58:4f:f5:1d:
         99:98:3f:6e:2b:00:b7:32:f4:39:dd:6c:75:a2:ab:28:b5:6e:
         82:14:6e:6c:5b:fa:54:b5:cc:19:94:69:a7:c8:9d:ad:30:79:
         b2:0b:a4:fd:2f:ab:8d:70:30:ae:d6:c8:8e:a3:31:79:71:75:
         5c:58:0c:7a:10:09:2f:8d:ca:05:1f:59:c9:a0:d5:c7:d6:8d:
         67:51:00:c0:08:56:32:70:78:ba:36:b9:22:07:04:e4:ee:9f:
         64:ad:72:cc:a0:90:fe:1d:58:f0:5f:34:13:67:a5:37:56:ba:
         29:5a:fe:fa:5b:91:27:69:dc:8c:6f:18:75:20:13:8a:ea:ed:
         da:7b:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----