Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20383334.roa
File:                     3139352e37382e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          FSTiknylJc+rajqMMV+1ileY7y4PmQyGVaNpSIqL3Y8=
Subject key identifier:   5A:0D:35:90:67:B9:DA:A6:D2:C2:79:B0:75:5C:88:AA:BB:A9:4C:7B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0BEFB37FC75C9DDD842E7B7E6E89671E410F689E
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 Apr 2024 15:16:39 +0000
ROA not before:           Mon 15 Apr 2024 15:11:39 +0000
ROA not after:            Mon 14 Apr 2025 15:16:39 +0000
asID:                     834
IP address blocks:        195.78.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Apr 2024 10:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ef:b3:7f:c7:5c:9d:dd:84:2e:7b:7e:6e:89:67:1e:41:0f:68:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 15 15:11:39 2024 GMT
            Not After : Apr 14 15:16:39 2025 GMT
        Subject: CN=5A0D359067B9DAA6D2C279B0755C88AABBA94C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:10:89:18:d7:c0:7a:15:91:d1:50:4a:67:
                    de:dc:b0:5a:ec:6f:d1:87:cf:6e:30:e8:a7:b7:67:
                    eb:79:d9:ff:74:c8:30:e8:f3:b2:9f:10:5b:d1:af:
                    74:8b:6e:9b:6b:d3:82:c0:13:a8:ed:a4:c8:1f:64:
                    ea:22:13:03:e6:92:69:f6:e4:59:f5:c3:f6:15:a5:
                    e1:e3:a4:ea:94:dc:aa:65:42:8b:89:8a:47:42:49:
                    c5:ac:74:0e:7f:9f:fe:1d:7b:50:0a:31:e5:6b:dc:
                    b9:53:7f:28:9c:f4:96:17:c1:fb:3b:18:a9:ed:f5:
                    e6:41:99:d6:4c:40:2d:0f:e9:d9:24:54:01:7e:cc:
                    13:17:13:43:e5:c3:3f:6c:a4:48:53:40:7c:44:14:
                    28:2b:73:9e:58:a7:d4:70:5e:04:d0:39:6d:57:9b:
                    ef:38:f7:79:96:1f:99:b4:9d:65:5a:75:06:29:e9:
                    01:cb:cf:e9:da:be:b5:e0:04:be:7b:de:04:4f:56:
                    48:32:f5:78:5f:b6:64:c1:5f:c6:54:17:02:0b:1b:
                    b8:7f:97:99:dc:96:fc:f0:46:79:98:73:e6:a4:b9:
                    d4:50:6b:d3:81:43:a7:38:f4:ae:8f:ba:67:70:33:
                    b2:a8:6b:72:83:27:53:93:98:7c:58:08:95:b3:6b:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0D:35:90:67:B9:DA:A6:D2:C2:79:B0:75:5C:88:AA:BB:A9:4C:7B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:8c:37:26:3f:28:0e:c3:ce:88:6e:9b:bb:9e:49:36:50:
         87:e2:3a:30:03:33:ad:64:7e:83:f7:81:b4:0f:7c:24:aa:2a:
         76:ec:ed:66:e7:e3:31:0b:92:0c:05:c4:8b:ba:25:90:f6:e7:
         17:86:f5:73:24:7a:75:5c:d8:72:47:9f:f0:58:2d:ca:61:93:
         2b:74:c3:e5:21:94:1c:08:1c:32:7b:30:7b:0c:8f:eb:78:b6:
         e2:06:8f:18:ee:a2:e4:2a:91:37:88:3d:76:5d:63:bd:7b:6c:
         e9:23:45:f6:41:4c:2a:87:87:76:ac:cc:43:f5:a8:1f:54:48:
         d4:bb:9b:6e:84:28:38:8f:57:a8:9e:27:ef:1e:fc:b9:8a:c3:
         a8:20:59:75:2a:84:d0:eb:aa:7d:5b:25:7c:9f:1a:fd:da:9e:
         61:f1:7e:dc:5a:c3:91:5e:c6:fc:82:2e:60:32:cc:39:89:91:
         8a:20:be:ef:68:59:10:48:05:18:5f:32:4c:be:eb:fd:d7:94:
         79:06:50:16:81:f1:8d:22:49:40:0d:79:90:aa:19:f2:11:45:
         cd:7e:78:10:54:fa:0e:be:87:f2:83:94:18:bf:1b:59:9d:84:
         07:05:62:53:30:7a:8c:20:aa:8a:6c:03:d4:49:79:b7:ca:b4:
         32:bf:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----