Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3233203d3e20323732373836.roa
File:                     3130342e3235342e3230382e302f32332d3233203d3e20323732373836.roa (raw, json)
Hash identifier:          /tS0m9YvwnYPsup3U8AIGFqBUSdSyyT+0k/Zk+pIEvY=
Subject key identifier:   72:53:56:15:DF:49:22:D9:FB:21:F9:4C:E6:B5:FE:B0:74:A4:EC:50
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       7840D0D6E72239F7941399200B47E7B83020AD81
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3233203d3e20323732373836.roa
Signing time:             Thu 30 Nov 2023 18:06:54 +0000
ROA not before:           Thu 30 Nov 2023 18:01:54 +0000
ROA not after:            Thu 28 Nov 2024 18:06:54 +0000
asID:                     272786
IP address blocks:        104.254.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 01 Sep 2024 10:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:d0:d6:e7:22:39:f7:94:13:99:20:0b:47:e7:b8:30:20:ad:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Nov 30 18:01:54 2023 GMT
            Not After : Nov 28 18:06:54 2024 GMT
        Subject: CN=72535615DF4922D9FB21F94CE6B5FEB074A4EC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:dd:d5:3d:a7:55:71:c5:7d:ae:df:ce:88:
                    b0:23:9c:24:b8:35:c4:9c:4c:73:ed:a8:5c:46:01:
                    f9:16:49:1b:35:26:34:d0:08:3a:cc:3c:60:06:44:
                    3f:b0:8f:e8:8f:91:47:1f:2c:2a:b3:72:f6:80:be:
                    83:ff:3b:83:bc:4f:f1:e2:67:ff:1c:63:3c:da:4c:
                    54:5a:4e:d3:5b:14:85:c1:cf:bf:89:b6:e9:b4:7e:
                    7b:8d:13:5c:83:fc:e3:4b:b5:2b:1a:26:b9:c2:71:
                    a9:4e:5a:dc:5e:3f:62:8e:ec:a6:51:d0:03:29:c6:
                    00:55:86:0d:d4:31:ee:5d:89:0d:b5:35:34:ba:52:
                    2a:b5:40:4c:67:ff:c1:25:54:8a:5d:78:60:dc:7f:
                    91:5c:8a:a5:30:05:1d:17:80:da:4c:06:a5:16:c6:
                    4a:e6:b2:0c:ed:87:7d:3a:39:f0:ac:47:cc:5c:63:
                    cf:2a:e1:e3:55:fc:01:51:a0:d9:18:44:42:7c:44:
                    4f:b8:3f:65:44:e1:0d:e1:93:ff:92:56:d2:b1:10:
                    89:49:37:6e:b9:6c:5e:4f:1f:d7:bc:fd:a8:e8:7b:
                    c1:d2:43:bb:dd:d0:bd:33:e3:f9:36:21:87:92:96:
                    a0:60:3d:22:ba:3d:19:f2:71:90:87:cc:81:d5:fe:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:53:56:15:DF:49:22:D9:FB:21:F9:4C:E6:B5:FE:B0:74:A4:EC:50
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3233203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:18:17:88:6b:f8:dd:8c:99:73:e8:9c:8e:99:96:48:51:
         74:d1:e1:a2:b1:ba:0a:a3:c6:fd:ca:de:72:e8:bf:72:3a:4b:
         aa:64:6f:42:fa:23:3c:56:af:92:1b:af:66:92:8b:d1:29:d4:
         1c:7c:74:38:21:f5:36:a6:af:89:b5:d4:7c:79:6d:25:44:52:
         2c:5c:64:e4:47:56:d5:7b:4d:be:13:28:89:ce:20:86:30:78:
         76:08:40:63:07:bf:64:09:46:6a:7b:c8:26:bc:8f:90:03:41:
         95:62:66:ef:27:0b:72:47:3d:da:54:26:c7:86:0e:92:53:7b:
         a0:5e:b4:20:2a:de:1c:e6:d4:1d:ba:8b:1d:e1:16:85:7f:f1:
         31:b3:4f:c7:e1:45:b3:53:47:4f:1a:e9:a1:cf:e9:81:51:56:
         43:a2:a6:e9:15:7e:0c:90:6b:db:e4:00:e0:57:83:c4:c0:e1:
         eb:a9:9f:8a:3b:2c:dd:45:8c:4f:fe:79:b8:c6:d8:30:c1:9e:
         24:b2:06:a3:73:29:42:55:dc:09:16:9c:39:44:18:b5:ff:82:
         8b:57:cb:0e:82:8a:1c:f2:ba:54:40:7e:15:82:11:43:51:0c:
         b4:04:83:7c:18:98:9e:10:ea:fb:d0:e4:14:90:3b:6d:07:a8:
         97:cd:17:36
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUeEDQ1uciOfeUE5kgC0fnuDAgrYEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWFjZTI4MGNlZmFjOWY1ZmFmNzRmMGUxMTQ3YTRhZjUy
OTkwNjJmNzRjZTA1MjFiNjIwHhcNMjMxMTMwMTgwMTU0WhcNMjQxMTI4MTgwNjU0
WjAzMTEwLwYDVQQDEyg3MjUzNTYxNURGNDkyMkQ5RkIyMUY5NENFNkI1RkVCMDc0
QTRFQzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXzd1T2nVXHF
fa7fzoiwI5wkuDXEnExz7ahcRgH5FkkbNSY00Ag6zDxgBkQ/sI/oj5FHHywqs3L2
gL6D/zuDvE/x4mf/HGM82kxUWk7TWxSFwc+/ibbptH57jRNcg/zjS7UrGia5wnGp
TlrcXj9ijuymUdADKcYAVYYN1DHuXYkNtTU0ulIqtUBMZ//BJVSKXXhg3H+RXIql
MAUdF4DaTAalFsZK5rIM7Yd9OjnwrEfMXGPPKuHjVfwBUaDZGERCfERPuD9lROEN
4ZP/klbSsRCJSTduuWxeTx/XvP2o6HvB0kO73dC9M+P5NiGHkpagYD0iuj0Z8nGQ
h8yB1f5BPwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHJTVhXfSSLZ+yH5TOa1/rB0
pOxQMB8GA1UdIwQYMBaAFKVf+gNccwyHmh7yY3TjYAJNbR8YMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5Njg5NzJlMjE2ZGU3LzAv
QTU1RkZBMDM1QzczMEM4NzlBMUVGMjYzNzRFMzYwMDI0RDZEMUYxOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzlhNjliOGNlLTI0ZGEtNDFiMy1hMDhlLTQ4ZDY0Yzk2NzM2MC9lYWNl
MjgwY2VmYWM5ZjVmYWY3NGYwZTExNDdhNGFmNTI5OTA2MmY3NGNlMDUyMWI2Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4ZThiOTA3MDE4OTY4
OTcyZTIxNmRlNy8wLzMxMzAzNDJlMzIzNTM0MmUzMjMwMzgyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMjM3MzIzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFo/tAwDQYJKoZIhvcN
AQELBQADggEBAKxEGBeIa/jdjJlz6JyOmZZIUXTR4aKxugqjxv3K3nLov3I6S6pk
b0L6IzxWr5Ibr2aSi9Ep1Bx8dDgh9Tamr4m11Hx5bSVEUixcZORHVtV7Tb4TKInO
IIYweHYIQGMHv2QJRmp7yCa8j5ADQZViZu8nC3JHPdpUJseGDpJTe6BetCAq3hzm
1B26ix3hFoV/8TGzT8fhRbNTR08a6aHP6YFRVkOipukVfgyQa9vkAOBXg8TA4eup
n4o7LN1FjE/+ebjG2DDBniSyBqNzKUJV3AkWnDlEGLX/gotXyw6CihzyulRAfhWC
EUNRDLQEg3wYmJ4Q6vvQ5BSQO20HqJfNFzY=
-----END CERTIFICATE-----