Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e20383334.roa
File:                     3139322e3230382e342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          DJLmmh5Rsscr1gMnKKvkUapnjKz3EkZnSYN9a6SI9wc=
Subject key identifier:   7A:7D:18:6C:52:03:1D:13:61:22:E3:00:A1:2B:42:9B:5B:14:2F:6B
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       7C1FD3439BC5045330689318DDD93A992D4A4571
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e20383334.roa
Signing time:             Fri 16 Aug 2024 10:11:41 +0000
ROA not before:           Fri 16 Aug 2024 10:06:41 +0000
ROA not after:            Fri 15 Aug 2025 10:11:41 +0000
asID:                     834
IP address blocks:        192.208.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 17 Aug 2024 10:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1f:d3:43:9b:c5:04:53:30:68:93:18:dd:d9:3a:99:2d:4a:45:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 16 10:06:41 2024 GMT
            Not After : Aug 15 10:11:41 2025 GMT
        Subject: CN=7A7D186C52031D136122E300A12B429B5B142F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:86:40:a6:d9:50:f9:b8:e5:30:b5:87:0e:
                    e1:ac:f9:8e:79:f6:04:95:09:0c:71:78:2c:2b:46:
                    26:6f:4f:b2:e0:97:06:8d:b6:df:ac:90:93:55:13:
                    3f:bb:30:de:7d:08:0d:f1:ec:7d:25:d5:d5:b4:a0:
                    30:4d:5a:24:ce:aa:47:2a:87:cf:b0:8e:4c:9a:98:
                    9d:00:d5:ee:d6:5b:b6:a7:33:c3:9e:ab:53:3c:8d:
                    00:39:e5:93:75:b3:84:47:20:78:13:28:79:4e:3f:
                    26:f5:14:16:ef:03:96:bc:25:4e:13:c0:01:e2:e1:
                    43:83:d7:cd:80:36:c7:07:75:d1:a8:b4:32:76:7a:
                    92:28:05:4b:36:e6:6b:e7:6b:bc:ca:a5:e9:4a:a3:
                    5f:95:08:1b:9c:aa:dc:0f:88:12:16:35:e5:85:c6:
                    bb:c8:74:32:80:dd:15:b0:5a:d0:df:4b:df:b5:c1:
                    87:a1:5f:16:56:18:2d:2e:22:5e:f8:e4:8b:79:76:
                    ad:77:8b:82:0e:65:35:c1:39:6b:35:38:f8:16:74:
                    53:e4:b2:ab:fd:32:83:6c:1b:5d:05:a0:f3:18:e0:
                    21:9c:6d:c3:da:1a:4b:95:49:3c:cf:17:02:d4:70:
                    27:5e:d8:c6:71:53:a4:74:b9:45:8b:d9:12:6a:26:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7D:18:6C:52:03:1D:13:61:22:E3:00:A1:2B:42:9B:5B:14:2F:6B
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:23:b9:fe:74:2f:fe:44:7b:0c:49:ff:79:94:4d:10:58:48:
         62:1d:06:38:d4:88:a7:93:1a:e7:48:9d:36:15:6d:e6:c7:ca:
         b2:50:ad:39:11:b9:a2:cf:61:a0:db:ab:1c:f2:ed:04:b6:e1:
         71:ca:dd:55:d2:d2:59:08:04:45:ac:aa:d7:8d:a4:6b:45:92:
         f0:f2:f6:a8:0d:8a:cb:15:59:97:59:4b:c2:bd:ac:3a:0a:d5:
         07:9e:a3:7e:b5:e3:69:4c:26:84:1b:ee:66:70:0c:43:8c:82:
         06:33:74:0e:97:80:a4:3f:b2:a3:68:9d:0f:b7:5d:86:b4:48:
         7e:cb:d6:67:da:d3:d0:90:82:34:9c:3b:09:ec:de:78:ff:b2:
         98:af:9e:66:bb:1e:db:07:51:54:d6:a2:12:c7:53:5d:55:2c:
         b1:47:fc:8f:14:b6:84:76:30:b7:ab:7a:20:e0:15:a3:1e:24:
         7e:ec:f9:25:20:6a:43:46:51:16:8b:a0:16:21:33:c7:95:eb:
         d9:e5:e9:81:02:ed:94:1b:5e:0b:f6:89:a7:ac:b9:02:3b:4a:
         fd:53:5c:ed:bf:89:e0:f7:f6:a7:8e:70:a5:94:0c:b6:b0:59:
         12:4d:6d:5f:e4:5f:37:10:9a:84:cb:4e:69:f6:37:01:c7:5a:
         7f:d8:9f:fc
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUfB/TQ5vFBFMwaJMY3dk6mS1KRXEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQwODE2MTAwNjQxWhcNMjUwODE1MTAxMTQx
WjAzMTEwLwYDVQQDEyg3QTdEMTg2QzUyMDMxRDEzNjEyMkUzMDBBMTJCNDI5QjVC
MTQyRjZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKGQKbZUPm4
5TC1hw7hrPmOefYElQkMcXgsK0Ymb0+y4JcGjbbfrJCTVRM/uzDefQgN8ex9JdXV
tKAwTVokzqpHKofPsI5MmpidANXu1lu2pzPDnqtTPI0AOeWTdbOERyB4Eyh5Tj8m
9RQW7wOWvCVOE8AB4uFDg9fNgDbHB3XRqLQydnqSKAVLNuZr52u8yqXpSqNflQgb
nKrcD4gSFjXlhca7yHQygN0VsFrQ30vftcGHoV8WVhgtLiJe+OSLeXatd4uCDmU1
wTlrNTj4FnRT5LKr/TKDbBtdBaDzGOAhnG3D2hpLlUk8zxcC1HAnXtjGcVOkdLlF
i9kSaibJtQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHp9GGxSAx0TYSLjAKErQptb
FC9rMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4
MzYxMTczOGZmLzAvMzEzOTMyMmUzMjMwMzgyZTM0MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNAEMA0GCSqGSIb3DQEBCwUAA4IBAQCI
I7n+dC/+RHsMSf95lE0QWEhiHQY41IinkxrnSJ02FW3mx8qyUK05Ebmiz2Gg26sc
8u0EtuFxyt1V0tJZCARFrKrXjaRrRZLw8vaoDYrLFVmXWUvCvaw6CtUHnqN+teNp
TCaEG+5mcAxDjIIGM3QOl4CkP7KjaJ0Pt12GtEh+y9Zn2tPQkII0nDsJ7N54/7KY
r55mux7bB1FU1qISx1NdVSyxR/yPFLaEdjC3q3og4BWjHiR+7PklIGpDRlEWi6AW
ITPHlevZ5emBAu2UG14L9omnrLkCO0r9U1ztv4ng9/anjnCllAy2sFkSTW1f5F83
EJqEy05p9jcBx1p/2J/8
-----END CERTIFICATE-----