Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203236393330.roa
File:                     36362e3131382e3234362e302f32342d3234203d3e203236393330.roa (raw, json)
Hash identifier:          qBkSkHwo2mhNNpHodIJhfCdDv2IfA+Kg2PSY+DHZMRY=
Subject key identifier:   2A:85:8D:3E:18:7F:62:2E:84:25:42:C6:55:92:6B:39:C3:AB:F2:14
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       7EDCC3038143BA1560A1B0E3D1EE804B6DE1F573
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203236393330.roa
Signing time:             Tue 05 Dec 2023 16:51:13 +0000
ROA not before:           Tue 05 Dec 2023 16:46:13 +0000
ROA not after:            Tue 03 Dec 2024 16:51:13 +0000
asID:                     26930
IP address blocks:        66.118.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 18:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:dc:c3:03:81:43:ba:15:60:a1:b0:e3:d1:ee:80:4b:6d:e1:f5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Dec  5 16:46:13 2023 GMT
            Not After : Dec  3 16:51:13 2024 GMT
        Subject: CN=2A858D3E187F622E842542C655926B39C3ABF214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:0a:7c:ea:a1:5a:d7:14:74:56:ee:94:45:
                    24:21:33:eb:f0:d1:76:eb:98:d8:08:08:5a:44:9b:
                    40:c9:4c:74:1a:ad:33:d7:f9:ac:8b:cb:f2:f3:a5:
                    50:b9:6a:5e:aa:4c:d3:18:a0:6f:f9:5b:34:ad:4f:
                    e0:b2:63:19:26:3e:c6:ca:ed:0a:aa:c0:4a:60:9b:
                    83:2a:cf:0b:6e:a3:f9:85:f8:22:b6:99:b9:ac:b3:
                    6b:26:9d:10:f8:1b:b3:ca:e9:b6:1e:16:ff:d4:aa:
                    2d:3e:42:e0:cc:a0:89:32:de:65:7e:f1:d4:ca:43:
                    e8:05:04:3b:54:b8:05:88:1b:f0:ca:f8:36:24:7d:
                    d0:2d:f9:23:fd:9f:34:16:1b:49:20:37:ee:b3:7a:
                    c4:07:d6:81:fa:82:20:70:3d:65:4b:5c:a5:04:ac:
                    42:46:2c:b8:79:7b:f7:7a:08:7e:b9:2b:e5:e1:fc:
                    13:8a:ad:a5:56:73:29:ec:93:6c:e7:e6:6b:f9:28:
                    3f:db:1c:19:39:54:d7:01:c8:72:9d:b1:0e:25:25:
                    cb:f2:f8:c1:74:5d:f0:83:1c:8f:61:dd:83:71:96:
                    55:9f:2a:15:a9:95:7c:1a:52:d1:9e:5e:c5:ce:4c:
                    ea:91:33:85:c9:49:40:a7:94:68:83:86:3e:6b:22:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:8D:3E:18:7F:62:2E:84:25:42:C6:55:92:6B:39:C3:AB:F2:14
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203236393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:9a:27:80:f0:3c:90:9d:6f:83:18:36:dd:5e:7a:3f:a3:bf:
         7a:05:f9:29:9d:08:ca:f2:43:76:e0:7a:4c:ec:c4:43:79:e4:
         4e:1a:6b:57:b8:bb:33:1e:4e:2d:57:75:26:87:39:d5:1b:e7:
         fa:06:27:79:06:70:4c:7c:81:68:ed:06:f7:09:bf:a3:0d:ad:
         bc:12:00:16:60:be:4f:14:db:c3:68:b1:c6:a0:20:5f:82:cc:
         1c:05:75:a7:4b:28:ca:90:a9:13:9c:33:cc:e4:3b:ba:d2:71:
         af:39:9b:e8:dd:cb:c0:80:5e:f2:d5:10:3b:55:c2:d6:0e:ea:
         aa:a1:df:ec:1c:3d:bd:3c:20:6c:e0:ef:80:49:6d:f0:93:57:
         06:94:16:ae:0b:fe:74:73:34:65:55:c3:f8:83:81:a3:a6:bc:
         64:00:ec:b0:2e:6f:22:2c:e4:9c:7c:29:af:0c:d8:1d:6f:d8:
         26:2a:dc:a4:78:c5:d2:ec:87:87:81:3e:e2:7f:5a:15:8a:92:
         8b:4e:2f:40:ac:73:08:9d:92:ea:fb:47:d0:60:96:f4:5b:a6:
         20:3d:ae:4b:29:ab:12:cd:13:d5:44:69:a5:2e:24:9a:a1:b5:
         d7:3a:63:34:e0:b4:95:ab:1d:5a:03:f0:6f:99:04:46:39:c4:
         a9:69:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----