Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32322d3234203d3e203631333137.roa
File:                     37342e3132302e3132302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          U4hUTN+4huktQULbrqCxKkxH9dbb6ixLlvbqourrXCE=
Subject key identifier:   D8:84:31:DD:50:1F:2B:30:AF:B4:83:ED:C7:4D:12:3D:BE:D7:DF:A9
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       21C985E4B7465DD2ECC7F824EE9B96DC7CF066EF
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32322d3234203d3e203631333137.roa
Signing time:             Fri 22 Dec 2023 20:01:12 +0000
ROA not before:           Fri 22 Dec 2023 19:56:12 +0000
ROA not after:            Fri 20 Dec 2024 20:01:12 +0000
asID:                     61317
IP address blocks:        74.120.120.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 May 2024 10:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c9:85:e4:b7:46:5d:d2:ec:c7:f8:24:ee:9b:96:dc:7c:f0:66:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Dec 22 19:56:12 2023 GMT
            Not After : Dec 20 20:01:12 2024 GMT
        Subject: CN=D88431DD501F2B30AFB483EDC74D123DBED7DFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:49:2c:71:0a:e3:c1:40:9f:dd:4d:45:a8:
                    ef:da:d8:f4:bb:ca:8f:aa:13:a2:0e:96:ec:f4:71:
                    01:9e:cb:73:2f:b7:75:76:33:2e:30:2e:53:d3:10:
                    33:64:6e:8a:28:65:ee:9d:ae:03:44:4d:85:e6:19:
                    b2:86:16:1a:a7:9c:37:6e:92:66:1e:2d:0c:8a:1f:
                    60:ba:d6:9b:14:7a:ba:43:7c:1f:b1:be:da:82:6a:
                    f3:0b:80:9c:ac:3c:ca:16:b3:83:e4:41:09:72:b6:
                    48:06:2f:5b:43:51:ef:ef:58:a1:4a:75:73:7b:68:
                    5c:18:d1:ae:75:b8:aa:a2:1b:55:45:ef:0c:c9:f1:
                    1d:47:73:a9:3b:c9:cf:fc:9a:3f:22:f4:e0:73:57:
                    22:c5:e6:ba:82:b8:85:82:78:eb:d4:3b:50:79:4d:
                    d0:c4:b8:b5:16:ca:e7:f2:29:53:50:67:e7:c9:05:
                    1f:ee:fd:a4:62:f9:54:28:94:c6:ef:00:7d:b9:68:
                    ae:8e:d3:97:5a:3f:98:b8:c1:93:46:f3:a7:0d:f2:
                    0c:ae:37:f4:ab:91:70:6f:aa:b8:2c:da:6f:13:12:
                    20:af:3c:dc:47:52:9e:e7:2b:06:70:b7:70:38:fc:
                    ab:47:77:13:2e:88:a8:92:be:0f:9e:71:e8:a1:6c:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:31:DD:50:1F:2B:30:AF:B4:83:ED:C7:4D:12:3D:BE:D7:DF:A9
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:60:76:c8:e6:a6:73:c7:08:e3:16:a0:9a:ba:41:9e:38:07:
         0d:79:c7:94:f8:9a:a2:91:b5:43:63:ed:c3:0d:9c:9d:4b:e0:
         44:27:bd:76:65:99:d0:49:18:e2:e4:33:10:9a:65:b9:f0:0e:
         7e:8e:8c:45:60:1b:70:7b:69:78:b0:f5:6f:1e:e2:a3:ce:ac:
         3e:d6:4a:4a:3a:72:b3:66:ef:3a:95:7f:5f:11:e8:47:53:15:
         b8:ff:87:f7:83:49:e6:c4:16:18:4b:38:59:e1:52:1d:da:23:
         29:5a:9d:5e:39:92:3d:89:e9:31:af:1f:c3:8b:96:68:63:2d:
         9d:67:29:44:e1:5a:b5:8e:c5:d3:36:b3:01:00:88:49:1e:13:
         4a:dc:33:6b:9e:aa:0c:e7:a3:42:72:6b:b4:f7:be:2a:0a:ea:
         9b:cc:56:a9:61:cb:71:fa:6b:fd:55:52:b1:b7:75:73:4f:e0:
         79:16:d8:94:7b:d1:dd:d5:ac:1c:87:2d:42:0d:8e:5f:ed:e8:
         fa:44:43:d6:88:3b:2c:e7:3d:40:3b:a4:ca:65:85:45:7e:37:
         14:45:d4:7c:ab:b6:23:d4:db:ba:27:67:0c:d2:0e:7f:f7:68:
         aa:90:88:5b:32:76:b2:04:b7:9f:63:8c:7d:c5:fc:62:02:73:
         68:cc:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----