Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
File:                     3139322e3230382e322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          gg8C6DnGD9vwJily8PsUgz5MUsWBzgwEw3HzbzyYAH8=
Subject key identifier:   91:20:78:B7:0C:D6:CA:B4:C5:8A:0E:FA:D0:F7:50:1C:54:FD:D4:9C
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       0630EBBAD07C56370448C8491D53B5423542B6E4
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 Jul 2024 10:08:32 +0000
ROA not before:           Mon 15 Jul 2024 10:03:32 +0000
ROA not after:            Mon 14 Jul 2025 10:08:32 +0000
asID:                     834
IP address blocks:        192.208.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 14:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:30:eb:ba:d0:7c:56:37:04:48:c8:49:1d:53:b5:42:35:42:b6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul 15 10:03:32 2024 GMT
            Not After : Jul 14 10:08:32 2025 GMT
        Subject: CN=912078B70CD6CAB4C58A0EFAD0F7501C54FDD49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a8:ea:d6:d8:41:58:41:03:f5:eb:3c:20:7c:
                    ae:c2:28:cf:f4:cd:31:43:06:f4:91:e6:82:13:c0:
                    e4:22:a2:8e:4e:55:e4:27:c0:b0:22:64:f2:0e:18:
                    28:8a:ab:a3:6a:3f:19:c6:d0:ce:c7:67:9a:67:36:
                    8f:98:2e:55:af:5f:1f:55:0f:b0:0b:c7:c4:af:8e:
                    bf:4e:6f:0d:f2:d8:ed:6f:40:c6:82:f0:7b:03:5e:
                    ae:3e:72:49:19:15:06:a7:44:f0:98:a6:31:cf:15:
                    92:79:1e:29:97:93:02:1d:78:37:c6:fe:97:a7:85:
                    82:85:b2:c3:ac:64:34:68:32:a9:1b:16:48:16:ea:
                    a3:2b:e8:21:3a:8f:ae:0e:78:87:4b:1f:aa:4a:3a:
                    b0:5f:b8:02:8e:1e:92:24:88:f9:7f:64:a3:14:04:
                    9d:78:c3:58:bc:b6:22:bb:99:dc:97:d3:2b:57:ab:
                    31:33:3b:32:89:b0:0d:47:b7:d5:86:af:dd:fb:68:
                    66:fd:7c:c9:14:af:2c:1f:a7:6e:b7:37:88:7a:e7:
                    bb:70:54:25:d0:ad:ec:14:e1:54:b1:eb:9f:9e:d8:
                    da:e7:ae:48:cf:0b:ae:14:b7:7f:cb:d6:5f:09:b3:
                    b9:60:e5:1d:14:25:b9:b7:00:61:f2:18:b7:45:b9:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:20:78:B7:0C:D6:CA:B4:C5:8A:0E:FA:D0:F7:50:1C:54:FD:D4:9C
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:22:83:2b:8f:7a:c6:5e:dc:47:95:4a:81:56:07:b6:a4:ee:
         64:84:3b:91:8c:f3:10:16:e5:9f:3d:e6:ab:13:5a:7c:74:4d:
         3c:06:fa:8b:09:5d:25:e0:fe:3d:1d:e2:d8:19:2d:34:36:c7:
         d4:18:c0:9d:28:b6:6c:76:a2:2e:9d:01:0a:05:1c:aa:42:09:
         24:37:33:7a:4b:e4:89:a6:2e:50:f5:b1:45:b0:31:17:8d:55:
         86:84:af:22:5a:ba:14:c9:a2:bd:a1:18:d3:80:60:df:30:d8:
         69:44:fc:a0:7e:a2:ce:61:51:a2:ea:71:67:4f:a9:b7:9a:95:
         0a:71:a2:5d:79:cf:cc:d8:0f:f2:f6:40:08:47:ac:cd:1d:d0:
         c5:a7:52:cb:4e:c1:99:e3:c6:b1:d2:1b:fc:7b:e8:b7:d8:62:
         f4:1c:64:3a:98:1f:20:b7:af:dc:33:a0:8f:6b:3c:9c:f6:33:
         50:8b:e3:a9:11:76:9f:15:66:39:2b:91:0e:a2:ec:8d:8f:2e:
         e6:c5:77:b1:ee:8e:c1:3d:94:cc:05:cb:86:44:20:6c:61:0c:
         13:45:2a:79:b7:10:a6:aa:8e:81:c8:40:3f:96:1b:ea:ef:3e:
         0a:72:2f:32:1a:85:9c:c7:65:d2:12:9e:b9:b0:c4:30:71:8b:
         26:6a:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----