Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233392e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233392e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          28QKrsOJadzEaDcDq7ZEMDklGsDjM8t/Tx4pzPzDvdM=
Subject key identifier:   D8:DB:97:67:B4:5A:43:BE:CE:D5:4C:62:B8:0F:D0:E7:FE:AB:41:9A
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       360E09DFDB8B7334C70B13AE605E0606166D71B3
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233392e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 22:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0e:09:df:db:8b:73:34:c7:0b:13:ae:60:5e:06:06:16:6d:71:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=D8DB9767B45A43BECED54C62B80FD0E7FEAB419A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:50:25:65:50:70:e9:c8:7a:09:19:f0:02:
                    b6:50:c1:f2:82:4a:83:6a:3f:ef:b1:a4:3c:e0:db:
                    d2:5a:19:7b:e2:96:18:35:4a:8f:29:15:8f:35:32:
                    d7:a8:7a:9a:d0:f8:a0:cc:6b:c0:06:45:ac:e0:d9:
                    f0:fa:7d:e8:a6:a3:2a:e9:80:c2:43:60:08:62:d6:
                    b6:88:39:e9:1d:1e:e4:12:5f:78:18:3a:fd:57:1f:
                    35:44:9c:52:ae:e1:1c:39:af:be:9a:18:08:ec:69:
                    1c:0e:96:56:bc:6e:90:9f:84:55:57:41:a5:18:2f:
                    b8:62:b9:04:b3:40:7e:b5:a9:c6:ed:c9:79:8b:86:
                    2c:16:f1:eb:e0:8d:a4:a4:76:46:6f:35:83:cd:7c:
                    f2:69:fb:6a:02:9a:2e:bc:1f:d8:61:4d:fd:2b:71:
                    0f:94:74:38:bb:e7:da:04:79:a0:9e:3e:a7:b1:fa:
                    3e:e6:9d:01:ca:9c:ea:03:79:a2:55:32:94:bf:a0:
                    af:c3:9d:45:38:59:44:e8:95:50:7f:80:2c:50:4a:
                    55:5a:41:42:7b:23:2d:61:9d:bf:ff:88:a5:eb:21:
                    b6:9f:ed:04:65:1f:a0:2b:4c:11:c9:44:0c:e6:a1:
                    65:9a:9e:38:c6:fc:cf:4e:dc:e3:30:2c:6d:cb:90:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DB:97:67:B4:5A:43:BE:CE:D5:4C:62:B8:0F:D0:E7:FE:AB:41:9A
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233392e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8f:78:f3:df:55:6e:83:0b:29:42:22:c3:de:d7:25:7a:c4:
         62:1c:c1:7f:be:64:74:a8:30:b5:83:78:c7:41:18:1b:ef:a8:
         9d:3d:82:7a:36:b0:11:7a:3d:37:f6:48:b9:20:b3:0f:0c:4a:
         90:62:3b:f6:94:fe:5d:2e:c9:02:ec:44:ce:94:35:5d:e3:83:
         49:4a:09:ad:ef:e3:cb:4a:0e:ae:b3:4e:7a:a9:e7:d2:52:43:
         cc:80:1b:89:a0:80:be:9a:bc:39:4b:b8:9b:11:a3:ff:7e:18:
         81:bc:71:43:a3:11:1c:5a:b1:a0:70:8f:1d:76:90:bd:e5:3c:
         8e:2b:05:92:ca:cb:ed:5f:2d:4e:e9:42:94:bd:61:0b:d2:14:
         63:a5:49:52:90:a1:f0:2d:59:70:8f:55:d3:73:16:d1:65:e2:
         9a:ed:99:ff:62:34:75:d0:b7:48:74:d5:94:17:fa:e3:22:f3:
         95:4b:67:59:7f:14:4e:11:f6:6b:6f:44:ad:95:6a:10:b3:d4:
         ae:c5:a7:26:5b:a6:54:50:37:ef:4c:eb:d8:3e:bb:14:a7:9d:
         ad:5d:01:d8:69:28:4e:5b:39:3d:7d:27:3d:a6:59:f7:62:06:
         97:a0:db:07:3f:f7:eb:b7:05:e2:8b:e2:06:52:52:92:d3:50:
         f7:14:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----