Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233302e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3233302e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          8aSSQhMGyqtWR3CXRIOtZEoN2jx4kAPpIrwAqeQoprY=
Subject key identifier:   15:38:72:98:38:A7:98:9A:A3:91:00:B0:13:DE:FB:98:72:84:2A:FC
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       067EE77CA8DDA781A08793551B2DECFFE41ABCCA
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233302e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 10:59:11 +0000
ROA not before:           Thu 23 May 2024 10:54:11 +0000
ROA not after:            Thu 22 May 2025 10:59:11 +0000
asID:                     17139
IP address blocks:        205.134.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 11:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:e7:7c:a8:dd:a7:81:a0:87:93:55:1b:2d:ec:ff:e4:1a:bc:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:54:11 2024 GMT
            Not After : May 22 10:59:11 2025 GMT
        Subject: CN=1538729838A7989AA39100B013DEFB9872842AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:c3:d6:b6:9b:65:2f:5b:68:6d:7a:86:d5:
                    6b:71:c4:9c:3b:19:5b:6b:68:d2:48:26:3c:58:04:
                    1a:fd:4f:59:9f:f5:8a:ab:e8:42:27:77:75:ec:65:
                    a6:55:0c:e9:0c:4f:5d:0d:7f:3c:7d:76:50:9c:c0:
                    27:e2:0c:0d:af:54:9a:aa:ed:fe:01:91:83:cb:82:
                    45:c0:90:c9:ae:e6:c6:b6:42:9e:ed:68:79:15:31:
                    f8:9f:46:7f:89:55:97:f4:76:a8:a1:64:8e:11:a6:
                    ea:23:e2:b0:e8:75:a7:b5:8e:01:77:84:45:93:48:
                    53:1c:db:f1:2e:a0:5a:16:f7:7b:74:c0:ac:91:d0:
                    97:99:51:d1:6a:cc:b8:2b:54:7f:f7:b0:e3:cd:b7:
                    19:27:f3:01:9b:46:c6:dc:f0:49:ef:3f:f4:12:c6:
                    f6:77:5d:4b:d5:49:3d:03:7f:6a:1b:23:38:5a:c9:
                    60:d6:46:42:0b:fa:d0:4e:24:d8:e6:f6:50:a4:75:
                    ab:2d:73:89:c6:da:1f:68:47:56:8f:4a:bc:35:1a:
                    0a:49:ea:55:25:ca:b4:4b:75:b7:d6:ce:4b:ac:5d:
                    19:0b:d2:ca:a0:83:e8:c7:08:13:a5:0b:91:4c:2b:
                    00:bf:d8:a5:af:71:fd:70:9a:14:70:9c:f9:40:33:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:38:72:98:38:A7:98:9A:A3:91:00:B0:13:DE:FB:98:72:84:2A:FC
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233302e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:c8:d0:bf:c8:fa:51:2c:37:c2:ce:94:a0:72:99:49:a2:
         82:aa:36:ac:d0:1d:01:85:35:4e:e4:9d:44:6f:c4:10:56:64:
         d6:b1:45:93:2f:ec:ed:13:72:19:52:e2:8d:9a:76:46:7f:e1:
         79:88:39:61:47:50:fb:19:8b:46:a2:82:54:1d:b6:0f:7c:e2:
         bc:65:20:8c:8b:01:b3:13:8e:8d:65:c4:c6:35:e6:d4:47:a0:
         27:be:f8:b0:69:37:f7:4e:eb:01:92:ac:f9:57:18:f6:da:1f:
         58:24:d0:24:31:40:bb:a4:6b:e3:9c:85:a3:86:c3:4d:4f:42:
         05:a3:fd:a8:f6:b3:09:37:96:0a:16:89:07:f4:b2:59:4b:4e:
         c5:f2:9e:63:72:8a:b1:b8:64:ee:f3:3f:4e:ee:33:9e:ea:3e:
         17:94:e4:2f:44:d2:d6:51:48:12:18:ab:67:df:a9:c4:6a:f3:
         05:e9:c8:be:55:46:7c:41:2f:78:00:1c:2d:5a:6b:a9:4e:7d:
         6e:d1:08:8d:e1:7b:03:df:6f:5b:c8:e9:31:da:2c:40:ec:aa:
         b2:11:55:92:a5:8a:75:71:aa:ff:7e:a5:cb:b4:83:f0:da:99:
         4e:20:05:c8:52:cb:85:73:db:de:e5:87:2b:d6:a0:71:a7:3a:
         6f:df:81:81
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUBn7nfKjdp4Ggh5NVGy3s/+QavMowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNTIzMTA1NDExWhcNMjUwNTIyMTA1OTEx
WjAzMTEwLwYDVQQDEygxNTM4NzI5ODM4QTc5ODlBQTM5MTAwQjAxM0RFRkI5ODcy
ODQyQUZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XHD1rabZS9b
aG16htVrccScOxlba2jSSCY8WAQa/U9Zn/WKq+hCJ3d17GWmVQzpDE9dDX88fXZQ
nMAn4gwNr1Saqu3+AZGDy4JFwJDJrubGtkKe7Wh5FTH4n0Z/iVWX9HaooWSOEabq
I+Kw6HWntY4Bd4RFk0hTHNvxLqBaFvd7dMCskdCXmVHRasy4K1R/97DjzbcZJ/MB
m0bG3PBJ7z/0Esb2d11L1Uk9A39qGyM4Wslg1kZCC/rQTiTY5vZQpHWrLXOJxtof
aEdWj0q8NRoKSepVJcq0S3W31s5LrF0ZC9LKoIPoxwgTpQuRTCsAv9ilr3H9cJoU
cJz5QDO7dwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBU4cpg4p5iao5EAsBPe+5hy
hCr8MB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzAzNTJlMzEzMzM0MmUzMjMzMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYbmMA0GCSqGSIb3DQEB
CwUAA4IBAQCMhsjQv8j6USw3ws6UoHKZSaKCqjas0B0BhTVO5J1Eb8QQVmTWsUWT
L+ztE3IZUuKNmnZGf+F5iDlhR1D7GYtGooJUHbYPfOK8ZSCMiwGzE46NZcTGNebU
R6AnvviwaTf3TusBkqz5Vxj22h9YJNAkMUC7pGvjnIWjhsNNT0IFo/2o9rMJN5YK
FokH9LJZS07F8p5jcoqxuGTu8z9O7jOe6j4XlOQvRNLWUUgSGKtn36nEavMF6ci+
VUZ8QS94ABwtWmupTn1u0QiN4XsD329byOkx2ixA7KqyEVWSpYp1car/fqXLtIPw
2plOIAXIUsuFc9ve5Ycr1qBxpzpv34GB
-----END CERTIFICATE-----