Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20313734.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          fABcgfqyeWakZEGE+UhMNN2ZsR/t6HnzX8QaV4HQOXM=
Subject key identifier:   B5:93:CD:EC:0A:F4:04:DB:A5:FB:FA:E5:27:ED:EB:D2:3A:0E:E5:79
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3019BCB951CB04710B6EC73AFEC4E706314604B2
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20313734.roa
Signing time:             Sat 28 Sep 2024 22:48:59 +0000
ROA not before:           Sat 28 Sep 2024 22:43:59 +0000
ROA not after:            Sat 27 Sep 2025 22:48:59 +0000
asID:                     174
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 00:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:19:bc:b9:51:cb:04:71:0b:6e:c7:3a:fe:c4:e7:06:31:46:04:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 28 22:43:59 2024 GMT
            Not After : Sep 27 22:48:59 2025 GMT
        Subject: CN=B593CDEC0AF404DBA5FBFAE527EDEBD23A0EE579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:b2:4d:c0:ff:b3:20:7b:7e:2e:70:c3:cf:
                    b7:dd:3b:b1:78:9f:ef:2b:cd:55:71:cb:3c:46:fe:
                    45:23:24:78:96:3e:a7:7b:b5:a8:ff:6e:f8:7c:38:
                    86:e7:9c:e1:bb:7e:c4:50:73:78:2a:f8:86:f6:57:
                    9e:eb:08:88:1c:8d:70:06:58:de:b8:d1:f1:7d:2d:
                    99:1a:e2:65:12:05:75:82:9a:8c:ea:a4:17:8b:45:
                    92:cb:e6:21:51:83:c1:2f:a3:74:b6:93:e4:49:db:
                    29:66:db:2a:e6:9e:59:6d:00:9c:28:94:05:d1:22:
                    c1:8c:c9:56:39:8e:b2:aa:ad:ee:95:32:5d:17:fc:
                    80:a8:d9:3a:64:7f:9d:ee:c9:47:69:ca:9f:f8:ee:
                    99:17:95:73:f9:d9:b8:ba:55:9a:eb:38:63:29:af:
                    c0:99:5c:ca:fa:5d:e9:d4:e9:ec:ba:c9:7d:fe:24:
                    0a:54:a8:80:04:ef:e4:d2:9a:2b:32:02:7b:a3:d1:
                    17:b6:51:e2:ec:8b:e1:e7:20:4f:1e:6c:d9:dc:e3:
                    a4:a7:b5:5d:ed:8a:5c:eb:11:6b:4f:e4:a4:10:04:
                    a6:8b:04:44:6b:59:e1:46:f3:61:36:e0:cb:35:7d:
                    6e:f2:7e:c7:b2:98:2d:74:f7:19:7a:67:76:7c:2b:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:CD:EC:0A:F4:04:DB:A5:FB:FA:E5:27:ED:EB:D2:3A:0E:E5:79
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:69:df:b5:f1:5d:38:95:4f:a3:19:aa:04:42:cd:f2:65:
         14:2b:31:05:14:31:62:29:39:53:5f:e6:60:ad:10:b9:db:84:
         aa:8b:7b:2d:d7:f2:a3:90:1e:cb:69:02:1f:f1:f2:0c:6c:06:
         ec:6d:65:a8:88:7b:98:cd:a4:67:54:e9:7d:40:b8:41:1a:47:
         4a:2e:30:2b:d9:41:99:8c:e1:ff:b4:0e:33:3b:ae:9c:fa:a0:
         14:e5:45:86:4e:70:25:d1:b8:72:a0:20:4b:3a:2e:c8:87:02:
         c7:c2:6a:db:15:fa:41:34:9f:91:ff:71:ea:1e:a1:c1:b5:e1:
         9a:17:fd:b4:be:b8:4c:72:4b:ed:b2:88:82:9a:55:17:9f:4f:
         57:cc:58:92:6c:d7:ad:9b:a6:7e:5c:23:eb:e7:0e:3e:6c:9f:
         cb:52:61:a5:87:66:2e:71:8c:22:02:de:25:eb:2b:7e:4e:09:
         d5:66:f3:c5:db:a0:20:0b:7f:0d:0b:7d:1b:f8:a6:d3:6c:c8:
         1d:97:45:fa:c0:86:ab:86:75:c3:1e:e0:0b:29:a5:44:f7:50:
         c3:6f:3e:c7:4f:4d:44:ce:e8:75:c1:88:81:ed:18:21:f3:2b:
         de:8d:74:28:99:1c:33:cc:5a:9a:b3:b6:2f:73:d4:00:2a:7d:
         24:51:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----