Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20313939323033.roa
File:                     36342e34392e32382e302f32342d3234203d3e20313939323033.roa (raw, json)
Hash identifier:          Oh+mB/qqzeLHJZWsxaySAUI5Uc5DlGU3G9rT8GXuL1g=
Subject key identifier:   92:88:1A:6B:3A:01:6D:30:D3:93:3F:EA:1A:15:96:47:03:73:68:D2
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       54FC1407C14D2570A11F881945D3EA8DFB5A67C6
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20313939323033.roa
Signing time:             Sat 17 Aug 2024 13:28:01 +0000
ROA not before:           Sat 17 Aug 2024 13:23:01 +0000
ROA not after:            Sat 16 Aug 2025 13:28:01 +0000
asID:                     199203
IP address blocks:        64.49.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fc:14:07:c1:4d:25:70:a1:1f:88:19:45:d3:ea:8d:fb:5a:67:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Aug 17 13:23:01 2024 GMT
            Not After : Aug 16 13:28:01 2025 GMT
        Subject: CN=92881A6B3A016D30D3933FEA1A159647037368D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:5b:fa:3b:c4:91:9d:c5:53:ff:73:75:14:
                    a0:dd:3a:5c:8f:cb:17:81:a6:64:b7:21:97:3c:3a:
                    a2:a2:1d:a1:a2:77:cd:d3:3d:66:f0:82:b5:bd:00:
                    05:e1:22:f5:7e:03:31:0e:67:71:bd:71:1f:41:03:
                    0a:ec:0d:8a:c5:e4:e3:38:fe:e4:08:94:dc:e7:61:
                    11:02:f0:4e:10:39:42:d4:73:ee:6c:73:41:22:f1:
                    48:09:a1:d7:a8:9b:1d:dc:35:b5:d2:3e:29:dc:96:
                    d2:49:48:6f:39:f2:bc:ab:5f:99:ac:b8:48:7d:81:
                    ca:42:2b:af:28:5d:26:75:ae:d4:ec:95:ae:8e:d5:
                    53:15:26:9a:6f:b1:36:d3:9f:a2:94:5e:0f:35:18:
                    49:0b:6b:78:9d:21:a5:3d:88:94:7d:62:3f:a4:ef:
                    57:22:91:73:ad:70:0f:b9:c6:dc:fc:78:3b:c0:ae:
                    15:a6:ae:d0:ae:64:92:e6:98:1b:b1:7d:bf:b0:a7:
                    42:ea:82:d4:05:78:b6:f0:a8:15:c3:07:4b:8e:97:
                    42:f9:da:88:18:d8:57:20:2b:12:db:5e:10:00:d3:
                    2f:2e:12:24:55:b8:6c:e1:25:ac:10:f0:98:34:25:
                    65:53:a0:8c:56:45:80:0c:08:08:ac:70:0c:c1:ce:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:88:1A:6B:3A:01:6D:30:D3:93:3F:EA:1A:15:96:47:03:73:68:D2
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/36342e34392e32382e302f32342d3234203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:58:92:15:4b:fe:64:35:a4:41:18:83:2d:ee:a4:2b:27:22:
         e9:5c:df:db:00:d9:b0:c4:d8:79:29:a0:90:58:36:fc:5d:d2:
         ef:76:0f:9b:3d:93:e9:b2:8c:bf:87:f1:b8:78:0f:cc:f6:aa:
         a4:9f:30:51:e8:a3:61:d6:9f:a0:f5:4b:48:0b:ec:91:4c:6e:
         92:0b:3e:b3:9a:ee:58:a3:be:0a:43:ea:46:28:2f:68:cb:6f:
         66:74:39:8e:2f:ce:67:ab:12:1d:1b:49:3b:69:1d:24:76:be:
         fc:2c:42:69:76:3c:b2:10:f6:f6:bb:98:5c:46:d8:75:63:36:
         f4:c1:6d:57:e1:3f:77:0c:6d:f1:f5:22:1e:0c:75:87:8e:f8:
         9c:f7:87:8c:ae:97:0c:d4:d5:84:b1:d4:b9:d6:06:85:82:cd:
         19:1f:6b:d5:75:e4:91:26:11:09:bf:e2:89:37:5b:90:fc:88:
         f9:70:1f:2f:f8:6d:7a:0e:0f:c6:71:49:63:0f:06:66:5b:7f:
         5a:cd:c8:7c:d4:4c:9d:ca:e5:57:37:93:d1:f5:6b:6b:a3:91:
         3f:da:6f:85:43:e9:22:e5:a0:f2:64:68:af:1e:70:70:4f:63:
         57:bc:c7:ee:d9:bd:80:08:3c:d8:01:ea:16:35:48:11:57:88:
         f3:77:92:f8
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUVPwUB8FNJXChH4gZRdPqjftaZ8YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2Fh
MTFiMTc5ODMxOTYyM2YyMWYwHhcNMjQwODE3MTMyMzAxWhcNMjUwODE2MTMyODAx
WjAzMTEwLwYDVQQDEyg5Mjg4MUE2QjNBMDE2RDMwRDM5MzNGRUExQTE1OTY0NzAz
NzM2OEQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWhb+jvEkZ3F
U/9zdRSg3Tpcj8sXgaZktyGXPDqioh2honfN0z1m8IK1vQAF4SL1fgMxDmdxvXEf
QQMK7A2KxeTjOP7kCJTc52ERAvBOEDlC1HPubHNBIvFICaHXqJsd3DW10j4p3JbS
SUhvOfK8q1+ZrLhIfYHKQiuvKF0mda7U7JWujtVTFSaab7E205+ilF4PNRhJC2t4
nSGlPYiUfWI/pO9XIpFzrXAPucbc/Hg7wK4Vpq7QrmSS5pgbsX2/sKdC6oLUBXi2
8KgVwwdLjpdC+dqIGNhXICsS214QANMvLhIkVbhs4SWsEPCYNCVlU6CMVkWADAgI
rHAMwc5qEQIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFJKIGms6AW0w05M/6hoVlkcD
c2jSMB8GA1UdIwQYMBaAFLC+er2+s+AUfQgSK2mcR4yZobD/MA4GA1UdDwEB/wQE
AwIHgDBdBgNVHR8EVjBUMFKgUKBOhkxyc3luYzovL3Jwa2kuY28vcmVwby9BUzIw
MjQwMC8wL0IwQkU3QUJEQkVCM0UwMTQ3RDA4MTIyQjY5OUM0NzhDOTlBMUIwRkYu
Y3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jw
a2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgw
YS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3
LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRi
MGEvMmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2FhMTFiMTc5ODMxOTYy
M2YyMWYuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9y
cGtpLmNvL3JlcG8vQVMyMDI0MDAvMC8zNjM0MmUzNDM5MmUzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzOTM5MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDEcMA0GCSqG
SIb3DQEBCwUAA4IBAQCJWJIVS/5kNaRBGIMt7qQrJyLpXN/bANmwxNh5KaCQWDb8
XdLvdg+bPZPpsoy/h/G4eA/M9qqknzBR6KNh1p+g9UtIC+yRTG6SCz6zmu5Yo74K
Q+pGKC9oy29mdDmOL85nqxIdG0k7aR0kdr78LEJpdjyyEPb2u5hcRth1Yzb0wW1X
4T93DG3x9SIeDHWHjvic94eMrpcM1NWEsdS51gaFgs0ZH2vVdeSRJhEJv+KJN1uQ
/Ij5cB8v+G16Dg/GcUljDwZmW39azch81EydyuVXN5PR9Wtro5E/2m+FQ+ki5aDy
ZGivHnBwT2NXvMfu2b2ACDzYAeoWNUgRV4jzd5L4
-----END CERTIFICATE-----