Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa
File:                     AS215287.roa (raw, json)
Hash identifier:          PVRW7gnzvFvAnaxHG3sf3mrA0ROB1jD/PBMnRdN1GgU=
Subject key identifier:   8A:83:5C:83:B1:BB:64:93:B1:57:1B:AC:63:4B:FE:85:28:AE:E3:F3
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2B5FAB97BF58887FADD58E808B64CA7FD4FBC5F5
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa
Signing time:             Wed 14 Aug 2024 19:53:54 +0000
ROA not before:           Wed 14 Aug 2024 19:48:54 +0000
ROA not after:            Wed 13 Aug 2025 19:53:54 +0000
asID:                     215287
IP address blocks:        67.210.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 14 Sep 2024 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5f:ab:97:bf:58:88:7f:ad:d5:8e:80:8b:64:ca:7f:d4:fb:c5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 14 19:48:54 2024 GMT
            Not After : Aug 13 19:53:54 2025 GMT
        Subject: CN=8A835C83B1BB6493B1571BAC634BFE8528AEE3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:b6:25:05:66:46:c3:77:28:b8:dd:e5:62:
                    44:79:52:e7:ba:86:da:11:17:44:72:ee:b6:f1:fa:
                    37:87:d3:bd:a3:c7:d1:0d:1b:e6:35:86:89:9c:8b:
                    f9:68:89:ef:3b:aa:d2:64:3e:c3:5b:53:20:9b:b7:
                    9f:7e:10:22:81:48:a9:55:e6:f8:60:13:3f:f9:f0:
                    6b:01:31:43:78:99:8f:af:e4:b9:c4:7b:d1:c6:15:
                    27:b2:ee:1c:f1:cf:8a:c6:3e:20:bc:b8:e0:9c:f4:
                    7f:13:19:61:07:b5:67:e7:d3:78:ab:ee:57:95:4e:
                    d7:87:61:9b:5b:04:40:e1:ae:a6:7b:8e:86:30:b1:
                    0d:6b:35:c6:ea:40:3d:61:4b:fc:d4:59:29:f1:19:
                    2a:50:2e:38:b2:01:86:1a:69:bf:10:b7:aa:2f:ab:
                    50:8e:cf:39:9a:fb:a4:6d:bc:21:62:da:3b:8b:07:
                    2b:00:d7:39:14:af:53:4e:94:74:dd:c1:93:00:32:
                    15:8b:26:cb:23:21:d6:89:1c:7e:a5:3d:d4:ae:64:
                    5b:fd:bc:e6:a3:08:24:20:b2:6e:de:f0:59:3a:ee:
                    a3:65:44:6e:eb:1f:a3:a7:c8:01:f4:37:11:06:3e:
                    f1:13:d9:c8:ea:e3:d6:c9:c0:0c:e4:9f:8a:71:fc:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:83:5C:83:B1:BB:64:93:B1:57:1B:AC:63:4B:FE:85:28:AE:E3:F3
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:19:b6:a0:f7:00:47:dd:86:4c:73:e7:68:1a:7d:24:ad:1f:
         60:02:9a:df:37:88:39:b7:da:df:62:d4:90:da:8d:0f:14:80:
         b4:95:ed:fc:48:15:56:3b:cd:b2:e0:5a:bd:fc:0b:cd:88:33:
         c0:d2:a4:48:0a:46:fc:cb:99:ba:81:e6:f4:ef:0f:d2:3e:43:
         93:dc:6d:67:a1:4d:11:30:9d:94:ff:e3:e8:d3:fe:66:64:b3:
         00:a9:b1:5b:f9:ec:19:be:45:28:87:97:f5:52:30:2f:e8:64:
         5e:ed:19:f1:f1:df:c9:01:9d:cc:27:15:a8:d4:d0:9d:e1:96:
         3f:ba:0d:1b:66:f8:38:71:43:fa:23:c7:f3:8d:a4:ac:10:a3:
         b8:17:7e:ad:15:92:54:50:56:7d:b5:14:87:ad:4b:38:3e:ae:
         55:0f:85:c9:2e:f6:f3:70:fc:20:11:42:54:25:b0:c2:ce:8f:
         ba:7a:77:9a:10:3d:9c:d0:7d:55:c7:e8:52:30:48:a4:ad:3a:
         a3:ea:7e:f2:4b:65:18:88:80:13:78:6e:5f:f6:59:41:86:54:
         8c:2d:74:31:38:c9:71:6a:e6:fb:11:24:a1:d8:bf:d1:ec:4b:
         fa:23:98:f2:f8:42:6c:28:2d:0a:17:c3:c9:d2:90:24:86:68:
         ed:ad:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----