Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          9/yBSE1KPNJRNzf2Ixb6ZoLr+xeKaDtleXiYYIxfZGA=
Subject key identifier:   36:8F:FF:92:64:95:68:0B:16:F1:7B:A3:4B:67:F7:7B:E1:A3:FD:38
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4D6990566F30CC290643773442D042390AB1DA9F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS61138.roa
Signing time:             Sat 16 Sep 2023 00:00:06 +0000
ROA not before:           Fri 15 Sep 2023 23:55:06 +0000
ROA not after:            Sat 14 Sep 2024 00:00:06 +0000
asID:                     61138
IP address blocks:        67.210.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Oct 2023 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:90:56:6f:30:cc:29:06:43:77:34:42:d0:42:39:0a:b1:da:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 15 23:55:06 2023 GMT
            Not After : Sep 14 00:00:06 2024 GMT
        Subject: CN=368FFF926495680B16F17BA34B67F77BE1A3FD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:c3:04:03:dc:e2:d3:e0:37:80:21:75:01:
                    7a:7c:c8:d7:05:e4:7d:4d:1b:2b:4d:58:6b:bf:50:
                    4e:36:e6:2e:c0:c8:4c:39:ad:e8:4e:5b:f3:6e:66:
                    ae:b6:08:84:95:ab:e6:33:65:ed:34:57:a4:ab:ae:
                    00:22:85:97:8e:43:c2:e9:ba:aa:0b:ba:63:4a:7f:
                    74:47:81:78:51:5d:2b:c6:3e:26:2d:d8:af:85:03:
                    9a:82:47:c7:26:07:02:b1:ed:9f:cb:fb:19:30:f5:
                    d6:99:bf:08:fa:7b:4b:ed:8d:47:89:89:09:eb:7c:
                    07:3c:72:40:55:82:4b:bb:6c:87:75:e9:1d:d6:8f:
                    c5:d9:5e:69:cf:37:4a:fa:31:bb:65:99:d3:c0:83:
                    49:a6:ef:90:77:3e:4e:1c:a2:9b:18:17:e3:79:f7:
                    02:c7:b6:15:50:fb:d1:99:91:35:1b:f7:fc:fd:a6:
                    45:12:a7:5c:39:38:c0:94:15:6f:7a:ae:e5:e0:e1:
                    a3:42:6f:d7:f6:7f:44:9a:2b:50:85:66:b7:c9:12:
                    b7:ba:23:35:f7:ad:84:4e:44:e6:f1:3c:0c:78:47:
                    bd:8f:c3:9b:ec:5d:29:36:8a:bd:19:68:21:dc:8f:
                    ea:9c:fd:a2:c2:a6:15:a4:68:45:b4:44:ba:5d:f6:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8F:FF:92:64:95:68:0B:16:F1:7B:A3:4B:67:F7:7B:E1:A3:FD:38
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b6:1b:7c:24:2b:11:7f:00:f4:44:da:2d:09:aa:f5:07:91:
         05:40:da:d0:ef:f8:a4:d5:82:7c:78:fc:cf:e3:24:01:2c:5e:
         c7:97:44:7a:af:52:4c:93:3a:b0:6a:97:9b:77:8a:79:48:96:
         54:fe:88:50:94:3f:e0:4e:e8:1d:ab:bb:db:86:1a:63:b9:82:
         85:5d:10:ef:1e:4f:8f:65:94:85:97:31:b0:d2:72:d8:e7:f3:
         5f:31:51:53:4c:4e:a7:15:0d:1d:9f:cf:f5:75:37:f5:3d:c5:
         b1:ca:af:75:37:f0:7e:53:e0:f7:e2:7d:d6:f1:75:50:d8:d3:
         e1:de:e4:e3:55:b8:73:1b:41:f9:1d:f9:39:52:3f:c9:f5:05:
         8b:97:6b:ca:fd:97:f5:20:f5:bb:86:48:d8:38:09:94:51:43:
         7a:6a:b4:fb:fa:bb:2e:13:e5:9a:b8:03:03:d3:89:36:76:f8:
         e9:24:22:8c:3b:e8:f1:ce:bb:9f:7d:8f:5d:bb:eb:21:0e:77:
         08:00:ee:02:d9:b5:39:a4:0f:c7:fe:1c:7e:a5:d5:2b:bf:28:
         d6:f4:43:48:05:af:87:cd:80:fe:c9:27:15:29:b6:df:94:3f:
         35:2e:a7:66:c9:bb:cd:92:fb:ca:9a:5c:52:e3:13:e9:53:31:
         f3:71:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----