Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          FI/xE3nTvE9gMhIdaGyDSDrS/8M49n7/N7z8QFrgsUA=
Subject key identifier:   E7:06:6E:19:A9:3D:24:9D:36:3E:D8:D8:3A:D5:88:0D:16:D8:5E:39
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       12776A6597C818E6B0EB7621347AB6070936CF10
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19437.roa
Signing time:             Fri 15 Mar 2024 16:01:15 +0000
ROA not before:           Fri 15 Mar 2024 15:56:15 +0000
ROA not after:            Fri 14 Mar 2025 16:01:15 +0000
asID:                     19437
IP address blocks:        67.210.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:6a:65:97:c8:18:e6:b0:eb:76:21:34:7a:b6:07:09:36:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 15 15:56:15 2024 GMT
            Not After : Mar 14 16:01:15 2025 GMT
        Subject: CN=E7066E19A93D249D363ED8D83AD5880D16D85E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:f3:b3:f3:72:8e:93:f2:db:a5:12:e4:33:
                    b5:3c:0a:60:fa:c9:8b:b3:6a:e8:a5:4e:4e:49:c3:
                    4d:63:a4:8e:ec:08:2d:da:e9:59:43:73:80:b6:8f:
                    41:a5:50:5a:b1:83:04:6f:3a:6b:7c:7f:4a:75:63:
                    71:12:07:0c:29:68:79:8b:2b:67:b9:61:28:4d:30:
                    2d:6e:ff:e6:ec:30:f0:d2:e7:f4:52:fe:83:ee:ca:
                    50:93:d8:07:2c:6c:b7:a5:9d:a6:81:56:80:b4:4f:
                    54:06:b0:af:bd:04:24:17:bf:c2:c1:2d:8d:3f:0c:
                    07:81:b7:c6:1e:f7:3c:9c:af:8c:71:79:b6:25:95:
                    52:c0:2d:93:31:d8:6a:98:ea:9d:b6:76:da:85:bf:
                    cc:3b:b2:13:b6:0d:fe:95:5d:67:71:13:ca:eb:58:
                    8b:52:da:5e:f9:f4:57:50:b9:ce:2c:1c:45:8c:5a:
                    ff:88:10:ad:25:64:cb:9a:f6:cb:0b:66:26:7f:a9:
                    03:c3:a4:a5:e9:49:18:29:fe:29:70:71:61:85:87:
                    86:7b:73:c9:0d:eb:ff:9c:7b:c7:2e:1e:32:e3:3c:
                    48:46:f0:1d:f7:f4:7c:b3:87:f4:b4:ab:36:29:7b:
                    c6:b9:7e:39:cc:61:5e:4e:10:ca:85:dc:4a:88:42:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:06:6E:19:A9:3D:24:9D:36:3E:D8:D8:3A:D5:88:0D:16:D8:5E:39
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:4f:38:05:a2:83:14:1e:89:77:b5:b2:dd:3d:3f:d5:2d:
         ae:ff:e0:d2:4b:ad:04:12:e1:6e:43:21:47:3c:e0:2c:e5:18:
         b5:4a:93:fa:da:75:3c:4e:b8:4c:17:75:95:e4:b8:81:75:3a:
         32:12:37:f1:2d:c4:90:91:b4:ca:d0:48:b9:d9:00:44:c5:04:
         e5:48:9a:07:f6:15:12:89:d5:42:4c:d4:52:cd:0e:11:65:7c:
         1a:79:3b:62:36:e4:30:a6:7b:8c:f6:2b:ce:33:b7:1a:8f:22:
         53:3f:0f:8f:a5:4d:6d:41:7b:3b:4a:df:0c:83:17:e3:27:2c:
         5e:37:05:a9:8f:44:b8:b1:ff:e3:eb:2c:d5:fa:f1:e0:fe:45:
         33:c0:29:91:14:b8:9f:a5:ff:6d:2e:ef:41:6d:0d:e8:46:5c:
         59:d5:e1:02:30:09:d5:3a:59:46:f8:2e:88:30:d7:cd:91:ae:
         0c:08:24:a1:c5:e5:54:bc:98:e2:85:08:4e:d2:84:66:2c:5c:
         56:f9:9f:b8:73:43:5a:cf:20:46:22:dc:cc:3d:95:65:c2:28:
         ab:30:76:bd:ca:ab:d4:86:cc:97:a8:1f:ba:67:a9:7e:53:82:
         ad:9c:1a:8d:fe:00:0f:06:e1:cd:b2:7d:4e:9e:55:3b:ef:4f:
         22:d7:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----