Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e2033323830.roa
File:                     36362e3131382e3234342e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          T6sH4LA4sw/c9dB0fB0rYYxX4qAAeHBQ4xBc8u1JkK0=
Subject key identifier:   EF:F0:24:E5:32:3F:9F:24:6E:BA:77:8C:76:33:1F:F3:B7:5A:CB:44
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       6D97D14A09CF76D6537631B4D37AE39896288F25
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e2033323830.roa
Signing time:             Thu 09 May 2024 10:56:48 +0000
ROA not before:           Thu 09 May 2024 10:51:48 +0000
ROA not after:            Thu 08 May 2025 10:56:48 +0000
asID:                     3280
IP address blocks:        66.118.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 May 2024 05:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:97:d1:4a:09:cf:76:d6:53:76:31:b4:d3:7a:e3:98:96:28:8f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: May  9 10:51:48 2024 GMT
            Not After : May  8 10:56:48 2025 GMT
        Subject: CN=EFF024E5323F9F246EBA778C76331FF3B75ACB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:56:ca:e1:fc:47:71:15:c5:5a:47:1a:ab:
                    59:60:1f:d7:66:ad:a3:f2:8e:3d:41:cd:a1:f9:c1:
                    a0:fa:00:76:21:03:09:ed:67:7d:3f:84:a5:d2:ad:
                    c2:40:2f:93:81:ce:52:cf:1e:20:d6:8c:c9:bf:f1:
                    27:81:30:5e:bc:b3:91:f6:8e:fd:e8:08:53:4a:e3:
                    1e:c2:49:11:e5:4a:c8:01:07:99:93:d6:cd:b0:1f:
                    4a:0d:cb:2b:1d:3c:b6:b9:81:0d:ea:09:62:6f:6e:
                    b0:cd:41:d5:ed:5d:4e:a5:b7:f5:cb:ea:26:07:d2:
                    e5:7c:6a:2c:f9:d4:7a:80:d4:18:14:51:2d:71:47:
                    65:74:80:71:74:56:2c:b2:de:f5:80:fe:30:bc:ea:
                    57:8a:e2:dc:0a:c5:62:29:f4:4a:6c:85:24:33:30:
                    cd:be:11:c1:ee:dd:23:53:82:8a:3e:4f:17:83:c7:
                    ca:f4:e2:b3:02:39:3a:1d:6d:70:7c:d3:5b:f3:53:
                    c8:06:19:fa:18:13:66:c8:27:19:bf:de:62:7c:d7:
                    9d:8f:54:ba:83:55:bc:53:96:57:e1:bb:c3:85:80:
                    e2:b5:d1:70:e3:d0:48:3c:0b:16:a2:93:f5:e2:7d:
                    d1:4e:80:44:1e:36:88:eb:64:a8:f6:d8:c3:33:3a:
                    a7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:24:E5:32:3F:9F:24:6E:BA:77:8C:76:33:1F:F3:B7:5A:CB:44
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:51:bb:04:a3:f5:d2:45:52:23:44:45:1e:1d:1f:4b:c3:fd:
         50:4c:fb:2f:89:ae:99:c4:cd:c6:a0:09:5d:6d:f7:d1:d3:6c:
         fc:c2:1a:93:56:48:ae:5b:c1:01:bb:37:b4:38:30:eb:04:b7:
         4e:a7:b5:c7:48:e3:f2:f3:f6:d1:89:f7:6b:06:63:4a:05:0c:
         b4:7b:8a:41:62:43:b4:55:db:2d:02:22:16:0c:a0:5c:75:63:
         bf:34:fd:38:68:f4:cb:8a:9f:37:34:64:67:32:f5:d0:88:bd:
         10:19:32:b2:8c:67:47:76:4a:65:f2:e5:53:9a:a0:95:f9:44:
         46:75:26:74:a9:8f:d7:d5:ba:5a:7c:de:bb:0c:49:97:ee:21:
         bb:76:71:e1:b0:64:ac:cb:6d:c7:8f:de:8b:fc:16:9e:26:b9:
         68:73:3a:25:d7:e0:80:00:0f:96:69:3c:c0:e6:23:91:8d:51:
         cf:e8:43:af:20:9a:ac:ca:c0:91:fc:42:e4:e0:9e:f2:ba:a7:
         ef:62:fe:52:75:dc:26:44:f0:9d:2c:8d:e9:50:20:1a:bf:d7:
         61:a2:1e:99:6b:44:5b:7b:4d:b1:73:44:d5:d6:dc:aa:c1:10:
         2d:b6:df:53:a3:bb:7d:d3:ce:4c:ab:73:b2:2e:ba:2b:0a:27:
         87:c4:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org