Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e2037303138.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          oMk7KIa2zuQB9Ya9KyQnjXBb7FxYE4Bilt9pstgOtb0=
Subject key identifier:   71:12:A4:95:05:EA:BC:53:93:B2:11:B8:71:63:21:58:1C:76:30:2B
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       2EB9B1E1B78043A8E7AAF2CCCB55A5E841D32320
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 28 May 2024 14:50:21 +0000
ROA not before:           Tue 28 May 2024 14:45:21 +0000
ROA not after:            Tue 27 May 2025 14:50:21 +0000
asID:                     7018
IP address blocks:        74.120.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 00:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b9:b1:e1:b7:80:43:a8:e7:aa:f2:cc:cb:55:a5:e8:41:d3:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: May 28 14:45:21 2024 GMT
            Not After : May 27 14:50:21 2025 GMT
        Subject: CN=7112A49505EABC5393B211B8716321581C76302B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:b1:4f:bc:00:17:e3:b5:a5:e0:b6:57:4b:
                    71:bb:9c:48:50:d4:ff:3d:b2:82:7d:ff:16:e1:d9:
                    bc:1b:ea:db:d7:ec:6b:52:99:22:e3:4d:7e:c8:d7:
                    bc:34:51:a8:66:82:16:f7:46:32:dc:b8:2f:0b:3a:
                    76:c0:41:a8:45:39:c9:dd:bc:c7:60:5b:cd:51:00:
                    76:5d:26:77:3b:34:ad:77:28:96:aa:d5:b1:b6:3e:
                    70:17:0f:5d:ea:55:4d:76:3c:82:35:5d:f4:b5:cd:
                    e0:e6:9e:d3:4a:cc:47:2b:64:8e:32:92:c1:07:5b:
                    18:03:a6:2d:ed:2a:ae:a4:24:4e:90:0e:30:06:39:
                    35:53:66:e8:67:32:28:6c:9b:0a:4e:35:96:b0:75:
                    dc:05:2c:48:4a:0c:a1:61:11:61:04:22:8b:05:34:
                    b5:78:44:e7:41:36:4e:50:46:d0:fe:f9:16:30:23:
                    71:dc:45:b5:0e:92:d9:18:b6:12:8c:76:14:9b:55:
                    4d:53:97:b7:22:fa:9c:1d:17:48:d1:70:60:b3:ab:
                    94:ca:90:87:58:27:f9:30:3e:62:9e:85:29:40:97:
                    5f:b5:7a:62:4f:cd:b4:18:7b:3d:20:7e:65:10:0c:
                    5a:68:55:7c:6e:68:dc:d6:2f:df:8e:54:c2:c7:e0:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:A4:95:05:EA:BC:53:93:B2:11:B8:71:63:21:58:1C:76:30:2B
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:4e:ee:90:48:74:c2:37:5a:aa:4b:91:9f:fb:96:84:91:
         a7:d4:ad:76:88:9f:28:b9:dc:6e:bd:47:07:0f:ff:40:13:21:
         6c:b4:25:57:94:ac:48:b2:42:6e:0b:87:d2:96:90:a5:53:fc:
         26:f0:47:62:f5:7f:ca:ee:a7:70:bc:bf:61:55:6a:30:b6:bd:
         cf:f6:92:bd:56:e4:39:67:55:b5:eb:15:ab:ee:a2:ae:8e:5a:
         ab:af:23:94:ba:a8:e4:ba:83:4d:02:37:56:ad:70:43:f0:8b:
         ce:35:3c:6f:7b:02:0f:85:dc:94:e2:16:0e:0a:25:5f:38:1d:
         ef:3e:64:c3:6e:bf:72:8c:2d:74:9e:01:fc:d8:77:5b:56:ad:
         e2:92:aa:65:b4:60:73:bc:10:80:03:f7:59:e8:5c:70:0b:d8:
         cd:98:24:04:37:76:97:fe:21:f9:a3:6d:14:7b:2b:08:4b:f3:
         b7:53:b8:df:85:b6:18:65:d7:62:78:cd:fb:85:07:3e:c3:f9:
         48:33:ee:7b:ac:3d:ff:3a:1b:01:1a:49:10:67:e4:4d:80:f4:
         98:89:97:d1:8f:d8:2b:ac:93:89:3f:9d:5e:38:54:01:67:98:
         36:8f:c7:09:e3:01:c8:4d:4c:af:e0:0f:67:1d:83:8f:db:3c:
         15:85:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 02:12:40 2024 by rpki-client on console-fra.rpki-client.org