Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          y2Wi3vMt/uNtZPu/xixSnZ6TTosW0OPBtJAbhGXlh9Y=
Subject key identifier:   22:9A:2E:BF:9C:0E:31:25:CD:95:15:4F:F8:25:1C:58:64:97:5F:E2
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       247879B94A67C231CDAAC73306EA1FEBCCAC9B42
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20383334.roa
Signing time:             Fri 26 Apr 2024 00:02:08 +0000
ROA not before:           Thu 25 Apr 2024 23:57:08 +0000
ROA not after:            Fri 25 Apr 2025 00:02:08 +0000
asID:                     834
IP address blocks:        74.120.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 May 2024 13:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:78:79:b9:4a:67:c2:31:cd:aa:c7:33:06:ea:1f:eb:cc:ac:9b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Apr 25 23:57:08 2024 GMT
            Not After : Apr 25 00:02:08 2025 GMT
        Subject: CN=229A2EBF9C0E3125CD95154FF8251C5864975FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:3f:89:a0:2a:7d:c3:b3:51:21:17:f8:f2:
                    93:e5:11:e8:a9:46:d7:bb:92:f3:50:a1:f4:2a:f5:
                    15:28:99:bc:b1:97:c6:5d:ca:b2:c0:8e:d1:c0:7c:
                    70:06:71:67:8a:b6:7c:eb:d0:e4:7e:40:74:97:ec:
                    24:a3:7a:15:d5:6f:cd:d3:43:1a:c9:fa:d8:f5:c1:
                    64:2b:16:05:5e:71:33:72:97:94:cf:15:d1:a0:b5:
                    18:94:28:d3:11:a7:31:55:ed:94:0a:0f:1c:53:d4:
                    70:68:7a:73:b9:65:ae:19:41:1b:b3:b1:95:12:72:
                    c7:fc:ce:cf:7b:d1:8b:de:9d:9e:21:f4:45:4e:74:
                    7c:a6:56:55:01:2c:df:ca:4d:2c:fc:33:59:e5:25:
                    c3:02:62:67:32:33:76:e2:bc:85:ce:b2:31:ff:b7:
                    ce:87:66:7f:a1:a0:11:e8:4a:00:ff:29:5e:83:6e:
                    98:28:22:f6:15:95:82:ac:ad:af:cb:d7:98:a7:83:
                    b9:28:d0:1d:cf:d4:14:59:d3:73:8b:9d:d9:47:69:
                    81:43:b3:38:6d:10:64:c0:94:0e:50:cd:6e:4b:24:
                    88:b4:23:a2:c2:da:12:0e:b2:96:1c:4e:01:f0:f6:
                    da:43:77:b3:7c:94:d2:92:1e:57:ef:0b:02:e0:03:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:2E:BF:9C:0E:31:25:CD:95:15:4F:F8:25:1C:58:64:97:5F:E2
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4d:46:44:ae:b6:c8:cb:8b:d8:7e:80:23:c3:26:30:98:66:
         0f:12:b9:12:f0:ff:15:2a:31:95:6e:cd:c7:f0:b2:5f:48:02:
         6e:85:29:5e:40:77:17:78:6e:8b:6c:3c:e3:a9:1f:41:12:22:
         17:7e:9c:1c:7d:2f:1f:de:d6:c6:63:f3:88:b8:31:90:79:46:
         7b:31:5a:84:77:95:74:81:98:0d:0e:ad:9c:89:a8:86:20:6a:
         77:18:b2:96:e8:f3:b0:df:2f:bb:53:64:0d:7c:e6:2f:99:fb:
         20:bf:e2:7f:3b:3b:88:c4:31:f8:06:4f:7a:fa:27:37:b8:18:
         8e:26:7e:29:88:ec:2b:e6:0e:d9:52:d7:ca:02:e7:1b:94:70:
         2f:19:cd:34:91:81:40:7f:eb:17:5a:4d:52:f1:10:5c:e0:ca:
         a4:2e:91:40:17:85:f6:14:e7:09:39:cb:d1:b2:8d:56:15:5a:
         25:7c:ff:a0:13:ba:e8:7a:07:29:26:84:de:82:4e:f9:30:9e:
         31:36:57:53:11:3d:3e:fa:61:a1:0e:50:5f:a8:ad:d0:4f:17:
         56:6c:1e:68:89:75:5d:a6:2c:19:1a:17:98:23:e8:af:df:01:
         9a:38:1d:f1:94:4a:c4:18:22:fe:e8:7e:98:b8:81:89:9d:f3:
         2f:23:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:44:51 2024 by rpki-client on console.sobornost.net