Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e2030.roa
File:                     32332e3134322e32352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          ijWiJBoqOCz6gzZp1psP/SyTgaG1RLSq/QfX+uE8pBo=
Subject key identifier:   92:4A:50:D1:6A:4E:31:CB:14:6F:FF:E0:06:DC:66:13:9A:36:0E:60
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       2661A2FF3B73D1B6D7B354F7BCA24C09282DC7AF
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e2030.roa
Signing time:             Tue 19 Nov 2024 21:16:53 +0000
ROA not before:           Tue 19 Nov 2024 21:11:53 +0000
ROA not after:            Tue 18 Nov 2025 21:16:53 +0000
asID:                     0
IP address blocks:        23.142.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 19:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:61:a2:ff:3b:73:d1:b6:d7:b3:54:f7:bc:a2:4c:09:28:2d:c7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Nov 19 21:11:53 2024 GMT
            Not After : Nov 18 21:16:53 2025 GMT
        Subject: CN=924A50D16A4E31CB146FFFE006DC66139A360E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:89:3d:e6:58:8d:74:69:3c:65:26:a5:46:ed:
                    b5:86:b1:39:86:cf:95:a8:29:28:3c:68:02:16:f3:
                    e0:ea:09:91:81:c1:2e:44:13:f9:20:b2:36:92:71:
                    dd:f3:a7:4a:73:a1:bf:78:7a:1b:8b:80:40:eb:20:
                    cd:fc:9e:1d:73:18:7d:a9:d1:ae:6d:1f:0f:92:4b:
                    72:04:a9:87:de:05:28:dc:d9:3a:ec:8d:40:ad:b4:
                    47:a7:c7:98:90:51:8b:67:50:6d:6b:38:8c:62:ff:
                    8d:dc:a1:7f:f3:3c:f7:07:78:14:6f:f5:33:36:b7:
                    89:c2:96:75:a6:4a:f4:41:59:fe:73:dc:3d:46:00:
                    14:f2:69:8e:e4:99:65:c1:aa:33:02:df:1f:36:65:
                    b7:f8:f0:85:c2:1e:f9:9b:03:5a:f2:60:a3:ac:12:
                    02:ed:4f:f7:fa:c1:45:c4:cf:34:dd:15:e7:6d:7d:
                    5c:b3:fb:a8:2c:76:55:87:2b:27:de:be:17:70:5c:
                    e9:2e:ac:48:3c:31:33:8c:81:23:2c:ba:74:9e:f2:
                    9d:d1:32:7a:ff:5d:f4:5b:33:ac:7b:51:22:fc:a4:
                    ad:f4:0b:cf:42:8b:4e:35:63:e0:55:62:3b:db:b5:
                    5e:eb:8a:af:ba:73:1f:02:a5:de:7f:0b:a7:60:35:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4A:50:D1:6A:4E:31:CB:14:6F:FF:E0:06:DC:66:13:9A:36:0E:60
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:19:7b:0f:db:ab:c0:2d:60:22:5f:32:b6:d0:cb:5f:df:89:
         53:f6:47:95:01:5d:cc:11:cf:b9:61:ab:6e:90:63:9c:5f:c0:
         04:79:83:41:ed:85:be:23:27:f4:39:93:4c:91:b9:bc:15:d4:
         3b:d1:6e:06:59:6f:17:d9:fd:49:1c:b5:e5:48:05:13:63:57:
         fd:38:f2:d2:ca:81:cb:9b:4c:1f:4f:1c:8e:8c:f5:30:d1:0a:
         75:52:8b:2c:98:d2:76:b9:7c:72:44:f8:85:13:20:30:f0:9e:
         a0:45:94:d6:ca:9f:1a:e4:b6:f7:bf:7c:f7:f4:79:92:14:58:
         e1:4a:e7:a8:64:22:f4:65:45:12:19:40:15:83:4c:8a:fb:88:
         46:15:94:24:89:6e:66:5b:c6:3d:6e:2f:00:61:d5:1d:bc:d1:
         d7:6b:f1:ba:d6:fa:56:96:5c:ed:e8:d8:51:f9:76:ea:e8:9b:
         f1:f9:65:b0:1e:a9:e1:b7:55:3d:06:55:dc:ed:d7:96:c4:45:
         4b:f2:cc:09:0c:63:e2:f9:1a:56:fa:e1:7b:db:75:4c:8a:52:
         17:8c:5f:cf:c5:28:ac:8c:d4:85:f4:fa:75:b1:a9:aa:5d:b1:
         e1:18:3a:77:4b:d5:0b:36:31:50:49:54:51:de:34:c6:24:90:
         93:e4:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----