Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233352e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233352e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          Ooi9MNHvVbqPIiIg10zWsmE5bYVUNftBSy+4l6LfI0A=
Subject key identifier:   A3:52:86:B9:49:79:EF:C1:C6:C7:2F:72:F1:FF:2F:17:1F:51:C6:4C
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       7356ED394D6F13C5266D1C059A102F46C91E90DC
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233352e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 22:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:ed:39:4d:6f:13:c5:26:6d:1c:05:9a:10:2f:46:c9:1e:90:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=A35286B94979EFC1C6C72F72F1FF2F171F51C64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:27:8a:02:fb:3d:d5:4f:f5:7c:91:03:1a:
                    1d:55:ab:1f:4e:ee:c8:9f:d9:84:88:23:88:22:19:
                    a8:03:4a:d3:52:57:39:be:88:68:63:61:66:7b:b3:
                    55:35:b4:0c:76:bb:97:d3:bd:51:10:40:1f:bd:07:
                    93:9a:17:3f:3d:29:09:2b:db:30:c9:c9:70:6c:d4:
                    de:b2:15:c1:92:b3:cd:99:ab:23:c4:a0:53:8d:d7:
                    a4:a1:9c:54:ba:f4:92:9e:25:dd:97:49:9e:9d:f5:
                    0f:84:ca:89:70:8a:67:bf:b0:26:d1:e8:f5:a3:92:
                    67:1c:68:32:a9:f2:ff:0f:63:b7:57:d6:08:e1:ca:
                    31:f9:16:d5:72:ad:97:c3:ff:3e:24:d8:19:ba:6c:
                    88:cb:43:f7:0b:ad:d7:1c:fa:83:c1:56:d2:be:67:
                    46:fa:5f:44:b8:05:be:9e:65:60:e2:e8:70:cc:bf:
                    cc:87:a2:2f:ca:93:e8:7c:d0:65:eb:07:08:45:55:
                    80:25:18:e5:44:6c:bc:50:23:5e:88:63:1b:d9:12:
                    27:41:06:d1:41:b8:66:21:14:43:69:db:b5:7c:1e:
                    ac:6d:b2:cf:16:66:d1:14:d3:1f:ea:83:7b:34:65:
                    76:8d:c2:74:a2:6f:4c:dc:90:89:d6:bb:0f:fa:10:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:86:B9:49:79:EF:C1:C6:C7:2F:72:F1:FF:2F:17:1F:51:C6:4C
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233352e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:82:21:5b:2f:a5:dd:c5:ae:ce:75:1a:02:01:bc:d0:46:
         68:5d:07:4e:1b:64:87:b1:e9:c2:6b:a0:a1:73:d2:dd:19:cb:
         71:86:bb:7b:2a:e0:e4:bf:af:c5:3f:ab:24:0a:a5:bd:c4:c8:
         94:91:e6:e3:ba:c7:86:d5:05:23:b0:58:0d:8e:0c:61:86:d6:
         71:66:7e:e1:ab:6b:f9:3e:9b:8b:e8:4f:87:ba:3f:5f:8a:5e:
         e7:3c:8a:85:14:9f:66:b1:2a:27:1b:a8:08:2e:78:e2:6b:ef:
         55:0d:c4:f4:a5:9a:4b:ce:7a:6c:01:3b:eb:b0:b9:14:2d:e5:
         c1:6e:46:7b:05:37:a0:02:1c:b9:b6:16:f2:06:e1:13:c2:b0:
         f2:2b:97:76:8f:aa:82:8d:cc:48:bf:ab:fa:8c:a4:2d:57:af:
         14:0e:8f:2b:41:db:f6:e0:dc:14:96:8b:86:4f:f9:5c:1e:3c:
         b0:e3:a9:99:de:fa:50:cc:bd:af:54:fc:94:ff:f3:f4:59:c0:
         29:f9:4d:d4:d0:1a:2a:65:63:86:0f:ff:eb:f5:fa:2a:96:0a:
         a1:7b:7c:11:1c:91:d1:0c:2e:28:92:e2:41:a6:31:27:c3:c0:
         f1:d4:90:01:74:0b:91:c6:db:4a:2c:0d:ea:0f:4a:1f:94:77:
         7a:23:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----