Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33601.roa
File:                     AS33601.roa (raw, json)
Hash identifier:          aP2EzSV8LIeBYtwNEODgf0PfZjwVi+YjY3rhO/EJOXo=
Subject key identifier:   B9:AA:59:B6:57:59:CA:39:DC:00:53:94:87:FF:D1:8C:9D:16:F4:E8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4D96CC673E712FB57805D6A3C514179C14F11C07
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33601.roa
Signing time:             Wed 27 Mar 2024 11:40:04 +0000
ROA not before:           Wed 27 Mar 2024 11:35:04 +0000
ROA not after:            Wed 26 Mar 2025 11:40:04 +0000
asID:                     33601
IP address blocks:        157.254.24.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 28 May 2024 10:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:96:cc:67:3e:71:2f:b5:78:05:d6:a3:c5:14:17:9c:14:f1:1c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 27 11:35:04 2024 GMT
            Not After : Mar 26 11:40:04 2025 GMT
        Subject: CN=B9AA59B65759CA39DC00539487FFD18C9D16F4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:e6:eb:af:d7:57:e8:0b:3a:48:c2:66:2d:
                    c5:f2:34:49:f2:69:3a:55:d6:de:06:48:2c:25:a3:
                    f8:06:f2:5f:62:39:c5:4b:71:e9:53:44:c5:15:d0:
                    bf:93:4d:79:ac:29:a9:de:c5:6a:a3:a5:0d:85:cd:
                    0e:ce:be:5f:73:a5:36:a7:ac:87:62:04:d6:1d:15:
                    45:a4:08:89:17:c3:37:c0:e7:83:ef:7c:2b:b9:7a:
                    c7:b5:54:8f:77:b3:fe:64:fb:98:77:9d:55:94:3a:
                    5b:dd:99:1e:fe:a6:2a:79:ca:bc:70:a0:59:05:54:
                    59:0d:38:b8:ab:38:8e:2a:ae:a8:73:e5:cf:b6:ef:
                    61:f6:65:15:92:ff:e5:d7:89:5e:47:fa:09:06:f3:
                    e8:eb:5d:4e:b2:5f:a7:60:e6:24:62:37:6e:0b:9f:
                    a7:60:6c:23:bf:05:8d:b5:d5:12:ce:19:bb:f0:a4:
                    31:2c:72:de:eb:ea:6d:60:94:43:85:1f:4e:2e:3f:
                    c2:f3:a6:3e:8c:7a:d3:b5:d2:97:6f:84:77:41:e5:
                    a1:d9:84:a7:c7:af:b9:40:07:d4:20:31:b1:fd:9c:
                    2a:77:2e:66:40:da:40:aa:f7:6b:7a:d5:04:21:98:
                    93:7b:2c:9b:10:d5:f6:b6:3f:52:ed:0f:62:c3:72:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:59:B6:57:59:CA:39:DC:00:53:94:87:FF:D1:8C:9D:16:F4:E8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33601.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:2c:7e:4b:10:c5:ac:78:a0:d7:a3:24:88:14:22:67:86:
         68:c4:ef:c2:77:e6:cb:71:cd:3d:fa:71:db:1f:0f:a8:27:9b:
         10:4e:d2:f3:1f:2a:a9:00:b5:84:fd:c5:dd:03:62:f0:ca:f6:
         12:ff:e2:d0:4b:8e:83:35:37:6e:33:98:16:cc:13:69:9a:09:
         a2:2d:6a:4c:9d:49:a4:b1:fc:d8:3b:12:07:73:bd:3b:a0:ca:
         de:3a:2b:99:1d:12:ea:bf:ae:7c:08:b5:c8:d7:0b:d3:d9:8b:
         bb:9a:f8:e3:0b:4b:17:a1:30:1f:00:d7:e4:73:3a:3d:c0:43:
         0e:2e:a5:e5:38:2e:41:cb:dd:00:3f:74:64:d8:b3:43:5d:04:
         15:94:26:76:6d:84:5c:95:82:68:0e:ad:24:58:02:d6:5e:42:
         66:83:6c:ba:25:36:df:62:0c:4b:5c:15:d9:6f:42:27:4d:5b:
         36:cd:93:15:97:a3:84:85:cd:f0:1a:8f:f1:02:8b:82:b2:43:
         07:bc:4a:00:90:9a:96:21:de:85:0c:f1:8f:6a:e2:ed:a1:fa:
         65:0c:04:6a:2f:1b:ff:c7:87:f1:01:dc:e6:a2:04:61:88:45:
         f4:b8:48:b7:12:82:f3:91:99:dc:91:84:95:49:e3:0f:10:e8:
         19:88:21:80
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUTZbMZz5xL7V4BdajxRQXnBTxHAcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwMzI3MTEzNTA0WhcNMjUwMzI2MTE0MDA0
WjAzMTEwLwYDVQQDEyhCOUFBNTlCNjU3NTlDQTM5REMwMDUzOTQ4N0ZGRDE4QzlE
MTZGNEU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI3m66/XV+gL
OkjCZi3F8jRJ8mk6VdbeBkgsJaP4BvJfYjnFS3HpU0TFFdC/k015rCmp3sVqo6UN
hc0Ozr5fc6U2p6yHYgTWHRVFpAiJF8M3wOeD73wruXrHtVSPd7P+ZPuYd51VlDpb
3Zke/qYqecq8cKBZBVRZDTi4qziOKq6oc+XPtu9h9mUVkv/l14leR/oJBvPo611O
sl+nYOYkYjduC5+nYGwjvwWNtdUSzhm78KQxLHLe6+ptYJRDhR9OLj/C86Y+jHrT
tdKXb4R3QeWh2YSnx6+5QAfUIDGx/Zwqdy5mQNpAqvdretUEIZiTeyybENX2tj9S
7Q9iw3JcywIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLmqWbZXWco53ABTlIf/0Yyd
FvToMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzMzNjAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnf4YMA0GCSqGSIb3DQEBCwUAA4IB
AQAh7Sx+SxDFrHig16MkiBQiZ4ZoxO/Cd+bLcc09+nHbHw+oJ5sQTtLzHyqpALWE
/cXdA2LwyvYS/+LQS46DNTduM5gWzBNpmgmiLWpMnUmksfzYOxIHc707oMreOiuZ
HRLqv658CLXI1wvT2Yu7mvjjC0sXoTAfANfkczo9wEMOLqXlOC5By90AP3Rk2LND
XQQVlCZ2bYRclYJoDq0kWALWXkJmg2y6JTbfYgxLXBXZb0InTVs2zZMVl6OEhc3w
Go/xAouCskMHvEoAkJqWId6FDPGPauLtofplDARqLxv/x4fxAdzmogRhiEX0uEi3
EoLzkZnckYSVSeMPEOgZiCGA
-----END CERTIFICATE-----