Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2033323830.roa
File:                     36362e3131382e3234352e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          fMSMW1t4+4Ywu8lvdUdAcn39Rurli/KyD9guCAE2gZE=
Subject key identifier:   E0:B8:94:06:1E:B0:10:BD:E6:AA:B0:8D:95:AE:04:32:5F:59:C6:7B
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       137454CC7C99CC2D104338389B5323A2D9D8B48B
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2033323830.roa
Signing time:             Mon 05 Feb 2024 18:08:26 +0000
ROA not before:           Mon 05 Feb 2024 18:03:26 +0000
ROA not after:            Mon 03 Feb 2025 18:08:26 +0000
asID:                     3280
IP address blocks:        66.118.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 22:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:74:54:cc:7c:99:cc:2d:10:43:38:38:9b:53:23:a2:d9:d8:b4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Feb  5 18:03:26 2024 GMT
            Not After : Feb  3 18:08:26 2025 GMT
        Subject: CN=E0B894061EB010BDE6AAB08D95AE04325F59C67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:73:d0:75:8f:dc:c7:48:10:c4:6a:79:ac:
                    5e:d9:48:c5:08:d3:df:5f:dc:63:bd:e8:a3:0a:21:
                    bb:2e:5a:4a:f9:7f:01:02:fd:4b:84:de:dd:d4:9f:
                    21:93:12:6c:cd:5c:e3:3c:7a:d5:50:19:5e:a7:01:
                    ba:64:fd:56:6e:00:07:1d:91:02:1f:af:7b:f5:ab:
                    8f:43:fb:8f:10:3a:44:d6:26:1b:98:02:ad:c3:19:
                    80:14:22:fc:b5:6b:f5:e6:7e:d0:d3:ee:26:28:05:
                    84:ad:ab:2d:7a:11:57:5c:e8:15:ed:0a:6b:67:4e:
                    70:ef:47:42:bf:ed:90:95:fd:cd:8c:33:ef:17:05:
                    78:0e:e2:9e:de:85:e4:35:07:c3:46:4c:4c:f0:a7:
                    41:e5:6e:3e:2c:02:49:db:5a:1f:c2:e3:c7:40:bf:
                    32:cf:be:61:c5:1e:d1:96:63:f8:ed:85:50:b2:47:
                    1a:b5:0c:0d:ed:95:ad:63:81:64:82:ff:84:ff:3c:
                    07:f3:43:69:c7:5b:fe:2d:cc:4e:5c:42:2f:b1:9d:
                    46:45:9c:01:3e:74:ce:19:de:24:ed:88:5e:df:1e:
                    4f:da:71:a0:6a:c9:1a:13:01:87:9f:8d:06:9e:c3:
                    b1:9f:2c:64:0f:75:b2:29:24:f4:cf:eb:4f:87:ca:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B8:94:06:1E:B0:10:BD:E6:AA:B0:8D:95:AE:04:32:5F:59:C6:7B
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234352e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:df:85:fc:ed:ab:f3:98:86:51:2c:d7:00:3e:c8:59:15:66:
         44:b3:af:7d:94:08:e4:72:f9:2c:3a:8b:ee:78:98:42:4d:22:
         f6:0c:c1:2d:2a:a2:1e:e5:f5:ba:c7:65:7b:cf:32:ac:31:97:
         be:22:7b:54:ab:3a:14:4d:aa:8a:da:1f:11:5f:f5:72:b8:c1:
         15:09:45:37:00:70:08:6f:a7:f8:a4:80:48:47:ce:12:8f:28:
         c3:55:54:fe:35:75:b7:e5:e3:8d:8d:f0:44:7b:36:42:d6:95:
         44:0e:41:5f:3c:63:ac:ef:7b:d4:dc:be:a9:f5:89:37:7b:c9:
         e1:16:b9:01:8b:a0:75:fe:97:3e:90:a3:73:36:16:c3:50:03:
         cc:c3:c2:32:d7:23:ec:d7:4b:50:90:9f:49:2b:c3:92:32:ef:
         96:1e:99:b8:0e:78:d1:c9:0a:8f:37:36:0b:6d:c8:a1:23:c7:
         86:21:bc:91:2d:15:30:65:20:da:63:9a:fa:c0:70:fd:a5:71:
         1a:4b:2b:f5:6d:76:42:19:07:70:5b:b1:b5:60:80:37:fc:7f:
         57:59:b0:3b:5b:20:bd:38:c5:b3:92:05:5e:ea:7a:f4:5a:70:
         32:f5:c7:24:7e:c7:eb:ac:7e:32:6a:df:51:91:d4:bc:6e:7c:
         f1:ae:f5:4c
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUE3RUzHyZzC0QQzg4m1MjotnYtIswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjQwMjA1MTgwMzI2WhcNMjUwMjAzMTgwODI2
WjAzMTEwLwYDVQQDEyhFMEI4OTQwNjFFQjAxMEJERTZBQUIwOEQ5NUFFMDQzMjVG
NTlDNjdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5pz0HWP3MdI
EMRqeaxe2UjFCNPfX9xjveijCiG7LlpK+X8BAv1LhN7d1J8hkxJszVzjPHrVUBle
pwG6ZP1WbgAHHZECH6979auPQ/uPEDpE1iYbmAKtwxmAFCL8tWv15n7Q0+4mKAWE
rastehFXXOgV7QprZ05w70dCv+2Qlf3NjDPvFwV4DuKe3oXkNQfDRkxM8KdB5W4+
LAJJ21ofwuPHQL8yz75hxR7RlmP47YVQskcatQwN7ZWtY4Fkgv+E/zwH80Npx1v+
LcxOXEIvsZ1GRZwBPnTOGd4k7Yhe3x5P2nGgaskaEwGHn40GnsOxnyxkD3WyKST0
z+tPh8r/HQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOC4lAYesBC95qqwjZWuBDJf
WcZ7MB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzM2MzYyZTMxMzEzODJlMzIzNDM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCdvUwDQYJKoZIhvcNAQELBQAD
ggEBABrfhfztq/OYhlEs1wA+yFkVZkSzr32UCORy+Sw6i+54mEJNIvYMwS0qoh7l
9brHZXvPMqwxl74ie1SrOhRNqoraHxFf9XK4wRUJRTcAcAhvp/ikgEhHzhKPKMNV
VP41dbfl442N8ER7NkLWlUQOQV88Y6zve9Tcvqn1iTd7yeEWuQGLoHX+lz6Qo3M2
FsNQA8zDwjLXI+zXS1CQn0krw5Iy75YembgOeNHJCo83NgttyKEjx4YhvJEtFTBl
INpjmvrAcP2lcRpLK/VtdkIZB3BbsbVggDf8f1dZsDtbIL04xbOSBV7qevRacDL1
xyR+x+usfjJq31GR1LxufPGu9Uw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org