Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e20313939313830.roa
File:                     32332e3134322e32372e302f32342d3234203d3e20313939313830.roa (raw, json)
Hash identifier:          qfkSw9A5TB6ANiI8+0i0aMARhuJ27RYgCxKje1jE6qM=
Subject key identifier:   40:8C:6D:1F:4E:90:7D:57:35:FA:CF:2A:A3:FB:72:3C:83:E9:31:D4
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       6B1468190B72A67958EB5A6301EA6E8333582AF1
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e20313939313830.roa
Signing time:             Thu 31 Aug 2023 22:01:18 +0000
ROA not before:           Thu 31 Aug 2023 21:56:18 +0000
ROA not after:            Thu 29 Aug 2024 22:01:18 +0000
asID:                     199180
IP address blocks:        23.142.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Oct 2023 19:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:14:68:19:0b:72:a6:79:58:eb:5a:63:01:ea:6e:83:33:58:2a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Aug 31 21:56:18 2023 GMT
            Not After : Aug 29 22:01:18 2024 GMT
        Subject: CN=408C6D1F4E907D5735FACF2AA3FB723C83E931D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:c3:66:bc:e3:5e:1b:5f:20:1c:7e:d5:30:
                    17:c7:84:fa:56:06:bf:97:bc:9b:37:9c:4b:76:fc:
                    12:0c:9e:3f:c5:8c:8e:76:6e:5f:4e:4f:cb:50:a2:
                    ee:15:0e:9f:40:8c:30:47:83:54:0d:4b:64:43:5b:
                    a2:61:90:64:be:bc:3e:6b:ad:ce:e2:50:c6:62:29:
                    2e:86:40:34:4a:6b:9e:35:b4:bf:24:7f:64:a6:de:
                    0a:bb:f9:59:4d:af:ca:24:25:53:4c:6e:75:59:56:
                    7b:53:4d:0c:5b:56:2a:06:44:32:31:e8:f9:a1:c1:
                    ce:2c:4e:57:fb:ff:6c:85:91:74:75:9e:eb:30:1a:
                    85:89:d5:5e:48:d1:c0:10:0d:1d:5d:e8:d7:28:92:
                    16:61:3f:fa:c3:fc:02:ad:1f:56:f9:95:ef:ba:cd:
                    1d:c9:a7:3c:da:08:a3:96:bb:e1:7c:05:46:97:19:
                    b6:91:39:89:bb:bd:cd:8e:63:cf:56:74:98:4f:ce:
                    dc:76:69:5b:44:d9:48:c4:1e:5a:a4:20:50:42:20:
                    56:c3:4e:c7:5f:da:98:c1:49:16:6b:ac:02:53:c3:
                    dd:e3:94:0c:6a:af:2e:d3:33:e4:da:e5:40:ad:20:
                    99:f6:60:53:f2:f2:db:78:44:1e:d8:3f:01:4d:d0:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8C:6D:1F:4E:90:7D:57:35:FA:CF:2A:A3:FB:72:3C:83:E9:31:D4
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e20313939313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:2e:f3:8f:60:3d:49:16:ab:00:54:fd:fa:7f:90:6f:b6:
         6f:e2:2f:88:f0:61:f4:4a:18:6c:02:8b:31:86:aa:84:58:a7:
         c6:36:d9:c1:c7:e2:ef:d2:ff:5f:54:c0:29:78:3b:8a:20:f6:
         3a:bf:b0:d8:cb:7d:67:a9:4e:fd:f5:7d:6e:9d:d3:ae:73:96:
         f7:aa:66:08:b6:bf:39:99:58:35:2f:cc:30:fb:88:5f:54:25:
         1c:12:90:70:58:04:66:7b:80:3d:cb:15:e4:64:79:9b:e3:a2:
         92:91:d1:2e:aa:10:71:95:41:a8:9d:0f:0f:13:e6:c2:33:e9:
         dc:61:47:31:9a:ae:98:c6:9a:2d:81:b5:19:2a:9d:19:39:28:
         40:99:3e:61:75:16:85:a7:3e:22:eb:cb:d8:79:26:1f:d9:8b:
         fa:57:a2:be:79:dc:d7:08:24:6c:3b:dd:34:55:bc:13:22:8e:
         c7:de:a9:da:3b:34:dc:5d:a7:87:7f:24:62:1a:fa:53:77:c4:
         fb:92:79:18:80:cb:0c:a9:66:c1:c2:72:07:26:91:f9:52:a1:
         5e:87:a1:76:b7:63:90:ed:71:b3:30:a4:e2:b4:1e:2e:ae:c5:
         2b:1e:6e:74:6d:79:99:6e:6b:37:4d:d4:fd:97:0a:73:ab:63:
         af:34:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----