Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e203631333137.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          vE8IxBFHsSULscGC5CuOcVTgON1A5toEmsSlfIFZHwc=
Subject key identifier:   2C:C5:4D:8C:79:0F:1C:6D:B0:FD:20:43:F6:23:81:8F:2A:D6:FE:91
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       176CB3C2B1458676766C3370B6AF716FC5C8FC06
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 22 Dec 2023 20:01:12 +0000
ROA not before:           Fri 22 Dec 2023 19:56:12 +0000
ROA not after:            Fri 20 Dec 2024 20:01:12 +0000
asID:                     61317
IP address blocks:        74.120.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 00:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6c:b3:c2:b1:45:86:76:76:6c:33:70:b6:af:71:6f:c5:c8:fc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Dec 22 19:56:12 2023 GMT
            Not After : Dec 20 20:01:12 2024 GMT
        Subject: CN=2CC54D8C790F1C6DB0FD2043F623818F2AD6FE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:8e:a9:41:31:37:0b:15:09:5b:3c:b4:b1:
                    9e:fe:3c:b4:cc:51:10:9b:3b:00:90:76:67:6c:74:
                    16:ca:e8:68:3c:2b:33:40:40:1e:e4:e9:65:f9:8f:
                    bd:e8:90:4e:44:d7:80:b9:b5:ce:c9:80:8d:0a:2c:
                    cd:91:d4:aa:4b:c6:be:c8:3b:84:83:d3:e0:54:9c:
                    60:74:e3:a3:3f:79:b2:19:26:85:81:75:30:ec:be:
                    40:40:9f:63:25:ca:e4:e6:bb:f3:c3:a5:6a:d6:bc:
                    29:cb:fe:9a:9e:83:c1:ba:60:ca:a4:97:ed:1d:43:
                    c2:56:a4:91:63:03:02:fe:53:a3:37:96:fc:81:29:
                    80:5c:e2:e0:ff:2d:e8:4b:8e:6d:3f:7d:a7:1f:73:
                    e3:de:2b:05:bb:1f:fa:1e:69:f6:53:19:bf:bb:9d:
                    7e:7a:64:31:27:1a:4f:72:e3:e2:83:72:63:2a:c8:
                    45:40:4e:ec:cb:a0:26:07:0a:58:b7:53:f3:03:01:
                    b4:da:78:a9:7e:b0:ec:68:52:75:7f:67:3f:65:65:
                    cd:d9:51:99:01:05:4e:91:0a:7c:d8:51:d5:d9:3f:
                    d0:76:76:40:2e:1e:9a:7e:09:93:69:0b:d5:8d:64:
                    b2:f4:e7:dc:49:a7:00:e1:8d:45:e4:1b:ca:7b:04:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:4D:8C:79:0F:1C:6D:B0:FD:20:43:F6:23:81:8F:2A:D6:FE:91
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:56:62:84:33:c4:65:43:44:24:99:d2:e7:c4:4e:18:f3:04:
         bc:d4:8a:57:bb:e7:50:2e:fb:6b:9d:61:6d:11:15:e6:fa:cb:
         63:d0:37:b5:97:11:6f:6e:6a:44:8d:91:2e:26:dd:01:43:f1:
         f3:a5:01:5b:79:aa:d0:52:b5:5b:c1:5c:9e:d3:59:ea:3a:43:
         e9:32:47:43:77:68:45:bd:9a:51:e8:fc:1b:c5:f3:e3:3e:fe:
         26:46:09:e2:43:7a:70:28:62:05:5f:87:4c:f0:87:0f:77:25:
         a6:9e:6f:b9:5f:30:fb:40:a7:2e:56:88:34:32:03:fe:42:e9:
         1b:6f:7a:ec:11:d1:77:fb:5f:f7:ab:dd:35:06:b2:06:7c:31:
         bb:06:2d:83:c2:63:76:08:2f:6b:d8:83:5e:88:79:39:38:dc:
         9e:24:ad:66:b2:37:f4:66:56:c7:72:a6:cd:46:43:d0:e3:55:
         ca:6a:81:57:b7:36:00:17:9e:a8:03:46:8d:9f:8d:e7:14:0a:
         01:5e:43:11:1f:35:e3:fb:fb:d3:da:b9:b9:73:45:ad:0e:0d:
         c1:6e:cd:7c:35:52:b0:6b:1a:e4:e6:33:26:a9:ae:b5:0f:da:
         b4:1b:0a:8a:de:b1:97:86:91:96:ab:fb:26:67:49:b3:04:9d:
         e9:e9:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----