Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e20383334.roa
File:                     3139332e32392e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tgYznVAQ12Ig2dlm00iQhe9hsUCBXeXk8kzgs8l1d64=
Subject key identifier:   D5:59:47:3E:5E:8C:D5:91:EF:74:A2:FB:E6:D0:32:B7:69:6D:3D:75
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3C34C03FCCA2F771616E6085C4BF32353124E0F4
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e20383334.roa
Signing time:             Tue 21 May 2024 08:12:27 +0000
ROA not before:           Tue 21 May 2024 08:07:27 +0000
ROA not after:            Tue 20 May 2025 08:12:27 +0000
asID:                     834
IP address blocks:        193.29.177.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 21 May 2024 08:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:34:c0:3f:cc:a2:f7:71:61:6e:60:85:c4:bf:32:35:31:24:e0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 21 08:07:27 2024 GMT
            Not After : May 20 08:12:27 2025 GMT
        Subject: CN=D559473E5E8CD591EF74A2FBE6D032B7696D3D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:32:94:04:9d:2d:82:dc:a9:4f:ae:a1:f4:1b:
                    1f:f1:b2:d5:cf:d8:14:71:27:65:55:18:a5:2e:b6:
                    54:45:f2:46:5a:24:3d:cc:39:46:38:99:4c:c1:43:
                    9a:df:93:59:8c:45:9a:6f:9b:74:83:ca:86:de:17:
                    20:c7:4a:6d:7d:25:46:80:8a:42:db:00:08:82:94:
                    b3:d4:7b:91:33:13:b6:67:7e:45:85:e9:53:98:c9:
                    ee:fa:e3:0c:a4:1b:5e:3a:cd:b6:0a:87:f7:e3:ab:
                    94:ea:31:91:ed:8c:b9:9b:9d:00:11:c5:95:cb:6b:
                    31:95:a7:27:96:1f:e7:d1:83:dc:20:d3:a0:23:6b:
                    af:3c:8c:62:da:a6:b6:ce:53:95:1f:42:ef:4f:39:
                    9c:9c:87:6f:00:e4:3d:42:75:34:47:8a:bc:b5:72:
                    52:7d:6d:f9:53:18:35:71:a2:85:7a:a7:9d:ba:6f:
                    8b:a7:c7:cf:85:c9:94:70:d3:92:d1:5a:4f:74:f2:
                    e7:58:3d:8d:62:4b:aa:3d:80:2e:fa:70:5d:a0:b0:
                    8f:e2:ee:41:9a:89:0c:57:73:86:3f:e4:3e:ce:a8:
                    f7:38:df:9b:30:4d:42:92:26:16:d1:a7:8d:a1:5c:
                    7e:41:1e:63:5b:2e:95:7e:e7:90:d3:23:b5:f4:4a:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:47:3E:5E:8C:D5:91:EF:74:A2:FB:E6:D0:32:B7:69:6D:3D:75
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:97:f4:c4:ed:ae:f1:0a:b0:71:6c:91:dc:c1:3a:12:6c:97:
         00:8c:9a:a0:0f:77:52:74:ac:32:15:01:4a:cb:54:e0:21:aa:
         d4:f4:df:56:fb:b3:46:ae:ea:2b:1b:e3:be:de:3c:b0:e8:ae:
         8a:c2:cb:80:04:26:2b:62:a3:cc:35:b8:cb:ce:86:c4:0f:d4:
         cc:d6:82:43:3d:89:0a:2d:ab:0e:14:6f:f0:fe:d2:1c:97:36:
         67:51:55:5c:46:58:2e:04:64:87:79:ac:25:bc:e9:de:a7:67:
         ad:88:65:d2:b9:84:77:e8:31:b0:7d:b2:ae:04:95:d0:f1:97:
         6f:52:b4:eb:75:a3:fc:ad:86:98:73:c3:99:d6:3e:cd:47:24:
         3e:a6:98:6d:32:91:0e:bf:84:51:f3:f2:b0:ce:62:ba:18:79:
         29:7e:bd:6f:c2:b8:25:7c:77:ed:64:43:e3:79:ea:dc:4b:59:
         e3:df:29:d4:04:95:de:b7:5f:60:62:67:96:4b:e1:aa:47:e3:
         9b:7e:9d:ff:75:79:aa:56:65:eb:f0:b9:bb:1a:15:c4:62:96:
         1e:a5:6a:0a:b8:52:1d:16:b7:a4:75:60:c8:f8:7f:b5:f5:65:
         eb:a6:ef:9c:e5:a3:7f:f1:8d:9d:36:e7:3b:37:a0:fb:b4:98:
         d7:94:f1:70
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUPDTAP8yi93FhbmCFxL8yNTEk4PQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwNTIxMDgwNzI3WhcNMjUwNTIwMDgxMjI3
WjAzMTEwLwYDVQQDEyhENTU5NDczRTVFOENENTkxRUY3NEEyRkJFNkQwMzJCNzY5
NkQzRDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TKUBJ0tgtyp
T66h9Bsf8bLVz9gUcSdlVRilLrZURfJGWiQ9zDlGOJlMwUOa35NZjEWab5t0g8qG
3hcgx0ptfSVGgIpC2wAIgpSz1HuRMxO2Z35FhelTmMnu+uMMpBteOs22Cof346uU
6jGR7Yy5m50AEcWVy2sxlacnlh/n0YPcINOgI2uvPIxi2qa2zlOVH0LvTzmcnIdv
AOQ9QnU0R4q8tXJSfW35Uxg1caKFeqedum+Lp8fPhcmUcNOS0VpPdPLnWD2NYkuq
PYAu+nBdoLCP4u5BmokMV3OGP+Q+zqj3ON+bME1CkiYW0aeNoVx+QR5jWy6VfueQ
0yO19Eql6QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNVZRz5ejNWR73Si++bQMrdp
bT11MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzEzOTMzMmUzMjM5MmUzMTM3MzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBHbEwDQYJKoZIhvcNAQELBQADggEB
AHKX9MTtrvEKsHFskdzBOhJslwCMmqAPd1J0rDIVAUrLVOAhqtT031b7s0au6isb
477ePLDororCy4AEJitio8w1uMvOhsQP1MzWgkM9iQotqw4Ub/D+0hyXNmdRVVxG
WC4EZId5rCW86d6nZ62IZdK5hHfoMbB9sq4EldDxl29StOt1o/ythphzw5nWPs1H
JD6mmG0ykQ6/hFHz8rDOYroYeSl+vW/CuCV8d+1kQ+N56txLWePfKdQEld63X2Bi
Z5ZL4apH45t+nf91eapWZevwubsaFcRilh6lagq4Uh0Wt6R1YMj4f7X1Zeum75zl
o3/xjZ025zs3oPu0mNeU8XA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:09:42 2025 by rpki-client