Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa
File:                     3137332e3234372e3233302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          J2YdnwLQ/FpmzjWolbwkXmxD/+pwiAH+/UwA4rjOfEQ=
Subject key identifier:   42:46:D8:CB:73:72:E5:9A:0B:5D:A4:4B:35:DA:01:28:92:8B:FF:24
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       29061868DBB89EA4DB57BBCC567DEC7EA18E27EE
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 14 Feb 2025 00:47:13 +0000
ROA not before:           Fri 14 Feb 2025 00:42:13 +0000
ROA not after:            Fri 13 Feb 2026 00:47:13 +0000
asID:                     834
IP address blocks:        173.247.230.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 27 Feb 2025 17:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:06:18:68:db:b8:9e:a4:db:57:bb:cc:56:7d:ec:7e:a1:8e:27:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Feb 14 00:42:13 2025 GMT
            Not After : Feb 13 00:47:13 2026 GMT
        Subject: CN=4246D8CB7372E59A0B5DA44B35DA0128928BFF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:33:0a:32:1d:8a:4e:38:a9:5e:1f:3d:ea:
                    bf:8d:2d:d8:c8:56:ec:cb:f1:9f:52:e5:40:85:de:
                    59:bd:95:06:1b:68:c5:80:ec:95:1d:8d:63:b0:e6:
                    77:3a:50:bc:f0:28:dc:38:b8:93:9b:11:2f:77:e8:
                    71:df:81:ee:18:a9:fc:2c:ef:85:77:20:d3:cb:9f:
                    a8:a1:20:ac:83:31:e2:2f:7e:07:63:5f:74:8b:bd:
                    20:ca:ff:49:ec:6c:ea:71:46:be:c0:81:93:c5:40:
                    7d:fe:ea:a6:a3:e3:0a:f0:64:97:4d:c8:2e:f1:86:
                    8b:5d:96:19:2e:3c:db:b8:88:a7:d0:6c:96:f6:27:
                    fc:be:90:43:d8:5c:89:1a:f8:39:78:0d:f6:99:08:
                    05:d9:4b:ec:9d:3f:e7:e0:93:2e:c1:58:d5:92:94:
                    7a:49:83:51:13:59:9a:a3:09:2e:9c:c5:a8:c4:4a:
                    3c:24:ff:03:b5:3e:32:95:f9:f9:99:9a:99:9a:b2:
                    b4:37:a1:5e:00:61:2a:29:43:8e:af:0e:11:fd:bf:
                    85:ab:80:d4:52:d0:c7:89:a4:6c:d4:8a:1a:e4:c7:
                    d5:6b:6a:19:91:32:20:83:28:06:8f:91:55:f9:09:
                    d6:e4:6a:b6:54:9e:92:1a:e1:c2:5a:1a:d4:8c:68:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:46:D8:CB:73:72:E5:9A:0B:5D:A4:4B:35:DA:01:28:92:8B:FF:24
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:92:7c:ee:6e:f4:42:83:31:79:9e:41:1e:f9:5b:eb:21:
         24:d7:65:77:6d:10:86:d0:4d:14:1e:ee:38:e3:3c:5b:de:fb:
         09:ad:b8:9b:ea:b7:2d:90:a8:b6:4f:a6:5c:a3:99:aa:64:9d:
         c0:b2:49:b9:91:71:1e:7d:59:6d:7d:e3:06:e5:c2:ae:e1:0b:
         96:59:07:a7:1a:9a:00:43:a9:28:55:6c:df:9e:82:62:b2:2d:
         66:61:80:d9:cb:b2:53:8d:c0:21:dc:4c:06:90:63:9e:b2:5e:
         c9:d2:f4:4d:74:a4:47:ec:60:93:40:5c:ed:e9:69:08:23:97:
         73:92:a2:ee:52:9d:80:fe:cd:9a:5c:ed:4b:9d:56:dd:0e:0e:
         cd:46:2b:52:af:c4:c6:d5:18:d7:8b:0a:c7:cf:f7:35:70:1d:
         ad:64:ea:04:be:3e:f3:65:3b:bd:f6:29:b5:3f:4f:32:d8:a1:
         58:77:3e:fa:ad:00:80:6c:0b:21:61:72:f5:c7:ec:0d:ce:eb:
         76:44:1a:0a:21:bb:59:0a:6e:a6:91:08:7e:e4:e1:db:ea:14:
         10:3b:9a:e9:8c:84:87:45:92:26:32:70:87:ed:a6:57:6a:70:
         19:16:81:90:19:08:c2:06:7b:b4:b0:77:20:61:fe:85:05:b3:
         ae:d3:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:41 2025 by rpki-client