Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20333939323735.roa
File:                     37342e3132342e3139322e302f32342d3234203d3e20333939323735.roa (raw, json)
Hash identifier:          XV/tL/3t/Jg7mGJ8/OKrzrQOYooyHyMigGQKmDhWqF4=
Subject key identifier:   FB:9F:B9:01:A1:11:EB:36:50:DE:88:F0:26:54:31:77:84:1A:F5:3D
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       509CBC8FFDB5CAD6F971BBD09B33F50B70AF7F20
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20333939323735.roa
Signing time:             Tue 02 Jul 2024 18:37:37 +0000
ROA not before:           Tue 02 Jul 2024 18:32:37 +0000
ROA not after:            Tue 01 Jul 2025 18:37:37 +0000
asID:                     399275
IP address blocks:        74.124.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 20:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:bc:8f:fd:b5:ca:d6:f9:71:bb:d0:9b:33:f5:0b:70:af:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jul  2 18:32:37 2024 GMT
            Not After : Jul  1 18:37:37 2025 GMT
        Subject: CN=FB9FB901A111EB3650DE88F026543177841AF53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:ea:c9:b6:d7:22:ab:65:ce:fb:52:ee:24:
                    17:23:bb:51:23:13:c9:8a:6d:24:94:94:4d:7d:fd:
                    73:4b:de:1e:d7:4f:8b:06:0e:f7:e5:6e:4b:48:22:
                    ae:63:81:ab:c2:6d:8e:3d:1a:39:c0:fc:a8:51:33:
                    93:4d:5f:b4:50:59:36:8b:c2:9e:f8:21:c4:9d:92:
                    16:29:03:05:55:38:39:4a:d8:94:2c:c5:cd:12:14:
                    65:c4:18:2f:b7:c6:14:a4:eb:51:15:0f:37:37:d8:
                    e6:c1:11:59:dd:84:4d:db:1f:53:54:92:d0:ff:69:
                    1b:76:e2:01:c9:55:a4:0b:f3:39:c2:9e:08:5b:5e:
                    6b:fd:d4:c1:92:c8:c5:72:78:0c:45:00:65:5f:b6:
                    bf:ca:13:2a:ec:c5:3f:09:c4:20:7a:f8:3a:6e:40:
                    e8:00:01:62:fe:28:42:18:68:99:29:ff:3b:87:46:
                    e4:2d:58:96:ac:f3:d4:90:01:d4:d8:a0:8d:5b:91:
                    15:69:56:bb:dd:4d:6c:8b:6f:12:0b:93:da:45:0b:
                    db:1f:ae:9c:f7:ab:4f:69:21:fe:10:f6:bd:1a:6d:
                    72:2b:58:d1:21:fa:28:e9:af:d7:5a:77:6e:98:74:
                    f7:98:ae:1f:5d:e9:e8:de:33:fb:f4:30:9a:64:15:
                    9b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:B9:01:A1:11:EB:36:50:DE:88:F0:26:54:31:77:84:1A:F5:3D
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20333939323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:26:60:60:ea:a0:bd:3c:a2:51:52:d6:02:56:a3:88:ad:01:
         be:34:c0:79:3e:ab:4f:41:fd:b8:a9:67:41:c4:a2:ee:c2:29:
         dc:5d:4c:fa:ec:67:e9:e2:44:12:4f:80:df:92:58:45:f8:ba:
         85:30:0f:59:18:f1:72:80:51:a5:d6:4a:4f:92:db:65:a4:5a:
         99:47:80:34:99:38:26:4f:8e:29:de:ba:45:07:f2:1c:58:98:
         71:87:12:d3:c9:41:cf:64:e3:5e:0a:9d:39:44:73:b8:a0:d7:
         a3:58:2e:ce:e1:7e:59:b9:a3:bf:45:0b:e4:97:16:a6:33:bd:
         0a:fa:ad:1c:38:dc:d0:37:47:96:2f:c2:f9:54:b3:6a:df:88:
         34:b1:d1:e1:3d:0d:ec:aa:ce:3e:25:1c:de:ad:ec:87:be:29:
         67:ec:b8:52:0e:5f:66:fe:a0:98:2f:ea:1a:10:26:49:f0:ff:
         1d:4f:6f:52:00:69:3e:ab:50:62:89:ef:51:5f:fb:96:b8:40:
         bf:50:65:cd:81:9a:ab:68:e3:0c:80:99:72:ad:3b:01:a6:95:
         cd:1c:1e:df:11:0c:53:15:d6:28:da:14:e3:0d:a1:c2:14:df:
         45:b3:3a:a2:89:62:b9:df:f8:9b:84:f3:84:7a:31:74:d2:e5:
         26:de:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----