Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3234203d3e20323732373836.roa
File:                     3130342e3235342e3230382e302f32332d3234203d3e20323732373836.roa (raw, json)
Hash identifier:          k7B3F1RgSntw8Bdgp2jLGYfLuWom7/fezOwvI39/10Q=
Subject key identifier:   C6:2F:C1:CD:BA:E9:19:02:F9:F7:B5:C4:D7:74:F7:C4:4D:AD:F0:AC
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       09E47C1F3B8AE2407E873AC36E74577C53C33378
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3234203d3e20323732373836.roa
Signing time:             Fri 01 Dec 2023 01:03:34 +0000
ROA not before:           Fri 01 Dec 2023 00:58:34 +0000
ROA not after:            Fri 29 Nov 2024 01:03:34 +0000
asID:                     272786
IP address blocks:        104.254.208.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 01 Sep 2024 10:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e4:7c:1f:3b:8a:e2:40:7e:87:3a:c3:6e:74:57:7c:53:c3:33:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Dec  1 00:58:34 2023 GMT
            Not After : Nov 29 01:03:34 2024 GMT
        Subject: CN=C62FC1CDBAE91902F9F7B5C4D774F7C44DADF0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:51:99:a6:44:4c:7f:9a:32:e4:68:54:d3:
                    cc:de:6c:4e:87:98:1d:86:cd:38:a7:93:70:a6:1c:
                    3c:17:fc:af:8d:b3:6a:91:e3:89:0b:91:2d:47:c5:
                    34:7e:4f:b3:cb:09:33:bd:24:be:e4:79:4e:30:12:
                    ef:1c:4c:b3:63:22:d0:c4:5d:36:fb:91:7a:16:90:
                    7e:a4:e0:e0:1d:d2:cb:e7:de:e5:77:45:ed:d6:56:
                    cd:df:56:ad:47:c2:94:10:ae:49:85:71:93:ee:51:
                    c0:ad:8c:a4:c4:29:48:4a:03:ef:a9:47:11:31:38:
                    c9:29:36:ac:6b:4e:06:6b:da:db:04:46:c3:8e:a8:
                    a9:75:5e:50:2f:44:65:cc:a4:3f:73:a5:cf:de:5d:
                    31:d0:49:5a:13:f6:70:af:eb:12:a5:74:01:04:af:
                    de:0b:70:34:3c:51:b9:d7:83:3c:d7:b0:60:3b:f6:
                    74:07:0e:22:04:ff:6e:5d:fe:88:e3:82:3c:45:c9:
                    a3:2c:fd:cc:f8:63:2a:e0:d1:f0:08:8b:0e:76:55:
                    87:2b:34:38:d3:d6:88:98:d4:80:16:a5:e9:5b:72:
                    44:00:f6:b4:a4:2b:06:09:14:33:29:28:92:52:ca:
                    9c:e8:cd:e7:37:6f:9f:97:90:bd:f1:e7:f4:73:11:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:C1:CD:BA:E9:19:02:F9:F7:B5:C4:D7:74:F7:C4:4D:AD:F0:AC
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32332d3234203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:44:dd:7b:bc:1f:25:ae:ca:78:27:a4:71:43:66:e8:fd:
         9b:23:6d:75:c9:d8:cc:39:cc:88:9f:e7:5b:25:d6:81:f3:f3:
         d7:93:39:68:4d:f3:52:00:45:e9:16:4b:28:7a:de:01:52:f8:
         25:c6:2c:d5:40:24:23:44:60:8c:ba:5b:5f:d6:b7:8e:3f:d1:
         59:61:7d:3f:d9:71:d1:53:ef:94:8d:6e:3a:2c:7a:3a:54:03:
         56:53:ba:b7:4d:f5:a6:02:22:f9:15:27:c9:04:a3:38:ca:0f:
         3e:bf:38:81:cf:08:29:b6:14:73:ec:2d:1a:e0:9a:c3:2e:b8:
         f6:8e:61:6b:a2:26:e4:de:9a:db:21:77:a3:b8:8e:74:42:59:
         e3:f0:9c:81:93:23:7b:6f:d5:5d:d2:ab:42:06:2e:7e:2a:51:
         79:44:d2:03:ba:1f:74:1e:0b:78:e5:04:76:1d:c4:67:de:2c:
         e7:46:11:62:d0:38:7d:54:f9:7f:94:95:88:aa:81:34:d4:72:
         2b:5c:b4:c7:db:16:cf:d0:9d:b5:ab:0f:26:29:28:7b:e6:11:
         de:5a:e8:27:6e:09:ae:72:43:1d:d5:e5:dc:37:3a:a1:ca:7d:
         02:cd:35:dd:84:e4:ac:3d:39:1f:75:d7:a4:d8:d7:d4:b3:f9:
         e5:1e:f1:6e
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUCeR8HzuK4kB+hzrDbnRXfFPDM3gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWFjZTI4MGNlZmFjOWY1ZmFmNzRmMGUxMTQ3YTRhZjUy
OTkwNjJmNzRjZTA1MjFiNjIwHhcNMjMxMjAxMDA1ODM0WhcNMjQxMTI5MDEwMzM0
WjAzMTEwLwYDVQQDEyhDNjJGQzFDREJBRTkxOTAyRjlGN0I1QzRENzc0RjdDNDRE
QURGMEFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFtRmaZETH+a
MuRoVNPM3mxOh5gdhs04p5Nwphw8F/yvjbNqkeOJC5EtR8U0fk+zywkzvSS+5HlO
MBLvHEyzYyLQxF02+5F6FpB+pODgHdLL597ld0Xt1lbN31atR8KUEK5JhXGT7lHA
rYykxClISgPvqUcRMTjJKTasa04Ga9rbBEbDjqipdV5QL0RlzKQ/c6XP3l0x0Ela
E/Zwr+sSpXQBBK/eC3A0PFG514M817BgO/Z0Bw4iBP9uXf6I44I8RcmjLP3M+GMq
4NHwCIsOdlWHKzQ409aImNSAFqXpW3JEAPa0pCsGCRQzKSiSUsqc6M3nN2+fl5C9
8ef0cxF1sQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMYvwc266RkC+fe1xNd098RN
rfCsMB8GA1UdIwQYMBaAFKVf+gNccwyHmh7yY3TjYAJNbR8YMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5Njg5NzJlMjE2ZGU3LzAv
QTU1RkZBMDM1QzczMEM4NzlBMUVGMjYzNzRFMzYwMDI0RDZEMUYxOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzlhNjliOGNlLTI0ZGEtNDFiMy1hMDhlLTQ4ZDY0Yzk2NzM2MC9lYWNl
MjgwY2VmYWM5ZjVmYWY3NGYwZTExNDdhNGFmNTI5OTA2MmY3NGNlMDUyMWI2Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4ZThiOTA3MDE4OTY4
OTcyZTIxNmRlNy8wLzMxMzAzNDJlMzIzNTM0MmUzMjMwMzgyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzMjM3MzIzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFo/tAwDQYJKoZIhvcN
AQELBQADggEBAIi2RN17vB8lrsp4J6RxQ2bo/ZsjbXXJ2Mw5zIif51sl1oHz89eT
OWhN81IARekWSyh63gFS+CXGLNVAJCNEYIy6W1/Wt44/0VlhfT/ZcdFT75SNbjos
ejpUA1ZTurdN9aYCIvkVJ8kEozjKDz6/OIHPCCm2FHPsLRrgmsMuuPaOYWuiJuTe
mtshd6O4jnRCWePwnIGTI3tv1V3Sq0IGLn4qUXlE0gO6H3QeC3jlBHYdxGfeLOdG
EWLQOH1U+X+UlYiqgTTUcitctMfbFs/QnbWrDyYpKHvmEd5a6CduCa5yQx3V5dw3
OqHKfQLNNd2E5Kw9OR9116TY19Sz+eUe8W4=
-----END CERTIFICATE-----