Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa
File:                     AS55154.roa (raw, json)
Hash identifier:          LKgkLq89zr/iQkM1JGBGreqwa3EdPGsZ1NDHtXQW2AI=
Subject key identifier:   34:D6:6D:4A:0A:CE:86:20:30:59:22:18:45:A5:ED:C3:59:B1:E2:80
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       17C8C58AC5F27EE035346F040001DCF09464DB2D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa
Signing time:             Mon 26 Jun 2023 12:02:25 +0000
ROA not before:           Mon 26 Jun 2023 11:57:25 +0000
ROA not after:            Mon 24 Jun 2024 12:02:25 +0000
asID:                     55154
IP address blocks:        216.97.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Aug 2023 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c8:c5:8a:c5:f2:7e:e0:35:34:6f:04:00:01:dc:f0:94:64:db:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 26 11:57:25 2023 GMT
            Not After : Jun 24 12:02:25 2024 GMT
        Subject: CN=34D66D4A0ACE86203059221845A5EDC359B1E280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:89:8f:7d:84:b9:2a:4c:ca:95:da:a7:18:
                    47:78:e2:a7:74:0c:c7:19:29:f2:ae:64:92:48:c1:
                    00:7f:8a:8a:e7:7b:b4:b9:a8:26:49:a3:df:9e:29:
                    a1:a2:d1:2a:25:a8:13:8b:d1:27:d4:5e:65:44:00:
                    0b:c9:35:71:38:e4:a3:77:47:12:87:04:66:f0:ae:
                    6f:86:e4:e9:1c:73:e1:9a:a1:ea:e0:d0:ea:a3:58:
                    f8:95:c9:fc:df:81:0b:30:26:2c:8a:a7:c1:d7:fb:
                    e7:f4:00:2e:d3:e9:69:2e:ce:ba:3a:0a:b6:28:a9:
                    f3:4f:11:42:ac:d2:2b:35:b3:52:26:aa:53:d6:00:
                    da:b2:e2:21:22:e2:86:64:0e:64:39:16:8b:c0:ad:
                    c8:50:6e:3f:ff:01:de:09:29:29:55:66:e4:49:66:
                    59:45:d4:0f:c7:3a:35:97:d8:64:9f:1d:02:d8:f9:
                    9f:dd:b5:e2:00:e6:2e:7a:fc:2f:31:03:d3:a4:76:
                    ac:cb:58:4d:93:2d:9d:c4:7a:f6:4a:e7:53:13:b6:
                    e6:78:69:9c:f4:12:79:d9:cb:86:e7:4a:a0:62:7e:
                    10:3b:5e:c1:e4:4d:71:9a:5a:ec:ba:bb:28:ce:71:
                    a8:6a:c0:80:04:c6:e3:0b:57:62:40:92:55:f8:e9:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:6D:4A:0A:CE:86:20:30:59:22:18:45:A5:ED:C3:59:B1:E2:80
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d1:48:62:29:da:6c:b0:ef:53:30:c4:fe:1d:0a:db:cd:4f:
         87:ba:2a:fc:a7:00:77:36:87:a9:f2:ef:39:bf:41:34:fa:a0:
         d7:7c:e4:33:c2:35:c4:64:89:14:9f:31:74:aa:56:b3:16:de:
         b3:6d:0d:1f:75:38:0c:6d:ee:f2:9d:9b:e4:5e:a1:6a:f3:77:
         92:fe:1f:04:0c:a4:ab:84:55:61:ca:1c:b8:cf:f5:ac:03:23:
         ba:86:e0:e1:96:34:a6:b9:b9:2d:e7:ee:97:a3:e5:29:a9:f7:
         d6:e3:dd:4e:39:5d:fb:09:00:ad:48:ce:d5:c5:6f:62:cd:cf:
         07:98:c4:54:0c:01:36:3d:67:6b:e3:72:13:5e:24:93:0b:af:
         56:19:70:1c:4c:94:46:74:de:78:ae:55:ae:37:12:3b:c8:42:
         e4:1d:3b:d1:54:5e:e7:09:04:ef:ea:1e:4e:e7:f5:b9:76:cd:
         aa:59:3f:0d:0b:5d:f9:5c:9c:ec:2a:31:c5:b6:ee:f1:4a:ea:
         e6:b4:3f:e0:ba:93:a6:d2:95:b9:6e:07:39:4f:b0:f9:cc:28:
         0f:67:f2:48:49:20:2a:8a:e3:27:a9:3a:6b:78:f4:45:3f:5f:
         c7:79:03:9d:0b:69:22:bc:99:7a:df:a7:76:bf:cb:8d:6e:1b:
         7c:eb:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----