Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20313531373034.roa
File:                     32332e3134322e32352e302f32342d3234203d3e20313531373034.roa (raw, json)
Hash identifier:          1jBFDIRiTI859XpMQ/t5wdhdcPQxeIWgEfRiIkkJ9Ww=
Subject key identifier:   AF:65:A9:38:07:D7:6B:E5:58:DE:04:0C:0B:BA:F3:40:29:3A:E5:86
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       72882FC6ADC236FF007ECCBA5E1306ACC09D1042
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20313531373034.roa
Signing time:             Tue 12 Nov 2024 07:01:51 +0000
ROA not before:           Tue 12 Nov 2024 06:56:51 +0000
ROA not after:            Tue 11 Nov 2025 07:01:51 +0000
asID:                     151704
IP address blocks:        23.142.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 21:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:88:2f:c6:ad:c2:36:ff:00:7e:cc:ba:5e:13:06:ac:c0:9d:10:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Nov 12 06:56:51 2024 GMT
            Not After : Nov 11 07:01:51 2025 GMT
        Subject: CN=AF65A93807D76BE558DE040C0BBAF340293AE586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:f1:50:9c:a4:ff:59:d1:45:1d:bb:6a:85:
                    b0:02:7a:a4:d8:eb:29:2e:20:43:9b:03:8c:ba:40:
                    87:4e:eb:c4:ab:53:1f:c3:41:00:36:0a:be:a0:4a:
                    d9:1c:09:54:fa:85:8b:cc:66:17:4c:a3:c7:54:ad:
                    2d:f1:ab:3b:f7:e7:2f:e7:c2:5d:3e:c8:c6:32:6f:
                    fd:20:b2:e7:ee:7b:a6:b1:6c:30:ce:90:85:cf:18:
                    df:03:27:98:da:3e:1f:26:aa:2f:5d:ae:df:ca:7f:
                    05:24:99:c6:95:be:c8:75:7b:cd:5e:72:7d:02:3f:
                    1a:b6:dc:70:92:c8:b9:2e:ee:68:35:ba:a4:bc:af:
                    0f:2a:1d:13:bf:c5:70:f8:f5:8b:86:cf:b6:3f:a8:
                    aa:5e:46:04:fe:73:07:ac:35:bd:a2:ef:37:a5:16:
                    dc:07:19:96:62:dd:c5:b8:f2:e1:c1:fa:dc:c7:36:
                    0d:d5:0d:3f:7f:4e:d2:d8:d5:59:b1:7a:b4:1b:bf:
                    6b:04:2a:ae:a5:43:8b:d6:c4:76:61:52:b1:35:e3:
                    63:84:43:c2:d2:f1:6c:bf:ac:3e:4f:4e:6f:10:7f:
                    df:a2:b7:3a:6f:9b:cc:38:4a:32:93:c3:bc:6d:cf:
                    d5:92:1b:1a:dd:eb:2c:61:77:a8:73:7b:eb:15:ab:
                    4f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:65:A9:38:07:D7:6B:E5:58:DE:04:0C:0B:BA:F3:40:29:3A:E5:86
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20313531373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:0f:20:54:38:f1:3e:4a:98:f9:37:49:90:15:4d:41:fd:
         7a:e8:a4:12:cf:c5:04:87:c7:4f:1b:21:fb:fe:5b:18:4a:6f:
         af:a9:f3:5d:d6:02:f6:ed:8a:92:09:28:57:e2:79:fe:aa:88:
         db:8d:30:de:fa:92:3c:53:fa:c9:a6:58:3c:21:81:f6:22:7f:
         01:b3:bc:25:e6:51:14:49:61:08:87:bd:cb:33:55:ff:1a:e1:
         d1:cc:30:b8:d1:63:c9:d4:7d:38:80:d2:70:4c:30:cc:d2:af:
         ed:dc:19:85:d3:ca:31:cb:32:f2:d0:91:41:61:f8:07:09:41:
         34:4f:c0:fb:61:08:82:4b:f4:b9:c5:80:7e:60:18:2c:db:aa:
         bf:de:b9:a3:dd:19:eb:e5:34:50:ba:66:61:c0:7b:72:48:b0:
         be:51:42:5b:0f:64:6d:24:46:d4:1f:2f:6d:aa:02:7b:6d:6f:
         9a:5c:d2:b9:d9:fb:ad:8c:ab:c0:b8:be:d2:0a:4c:69:4a:48:
         a8:10:83:4a:87:64:18:5b:60:ee:ec:04:2e:4c:9e:e4:c0:75:
         92:fd:8c:eb:e4:a4:cb:8b:80:ac:0e:71:95:6d:3c:01:49:ad:
         79:ba:59:c2:79:c2:e0:0b:36:b5:c0:c2:93:67:55:9b:a4:c7:
         85:cd:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----