Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203536353535.roa
File:                     36362e3131382e3234362e302f32342d3234203d3e203536353535.roa (raw, json)
Hash identifier:          qspIJaJ0hQnsy3VayNnbpgiKYKUTsCP1chQ0qXlkx0U=
Subject key identifier:   C1:3F:AC:E2:DB:4D:EF:DD:3D:83:C5:62:5C:75:E0:55:AB:4F:A4:29
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       4283EE23D082EA9E396C47A0E45B5C327B37D045
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203536353535.roa
Signing time:             Fri 08 Mar 2024 15:13:14 +0000
ROA not before:           Fri 08 Mar 2024 15:08:14 +0000
ROA not after:            Fri 07 Mar 2025 15:13:14 +0000
asID:                     56555
IP address blocks:        66.118.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 23 Mar 2024 18:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:83:ee:23:d0:82:ea:9e:39:6c:47:a0:e4:5b:5c:32:7b:37:d0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Mar  8 15:08:14 2024 GMT
            Not After : Mar  7 15:13:14 2025 GMT
        Subject: CN=C13FACE2DB4DEFDD3D83C5625C75E055AB4FA429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:aa:e1:de:84:95:ac:d7:02:30:3d:00:ea:
                    54:96:28:c0:8f:d1:e6:ae:4b:05:c3:17:25:bd:0a:
                    38:ca:43:47:31:73:fe:39:0f:cd:18:b8:de:80:ab:
                    a2:7f:27:aa:d9:db:dc:61:ac:84:b1:67:cc:5b:2e:
                    3f:e8:23:3c:63:ba:e3:16:47:b4:82:b7:45:41:b4:
                    88:91:df:47:8e:56:00:07:e6:3d:69:4e:99:37:0f:
                    30:5c:dd:df:c7:f2:8e:7e:59:30:cb:f0:d6:f0:57:
                    68:3a:4f:c5:d8:4c:c7:e2:5a:1a:b6:e8:16:21:b0:
                    63:45:c7:92:d6:0a:b8:cf:cf:35:46:e8:c8:aa:a8:
                    aa:bc:28:71:c4:48:33:42:7e:c3:4a:19:54:ae:fd:
                    b7:e2:19:50:be:38:cd:fc:cc:5f:c6:d0:d8:63:e7:
                    cc:8d:7d:f3:25:9a:bf:d3:bc:12:66:83:c4:4f:7a:
                    ad:f3:76:78:bd:1c:6d:36:98:a1:ac:5f:4e:1e:48:
                    b0:dc:eb:f0:fd:aa:97:ab:08:c4:3f:43:00:b5:b0:
                    ae:98:60:c2:47:04:e4:29:c6:ba:fd:1c:63:6a:5b:
                    56:8e:04:5a:4b:3c:7e:54:f7:92:11:b6:2f:39:07:
                    9a:3f:d6:95:d4:ab:c9:85:be:cf:a4:6e:17:d5:ea:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3F:AC:E2:DB:4D:EF:DD:3D:83:C5:62:5C:75:E0:55:AB:4F:A4:29
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203536353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:84:a5:a1:06:37:29:fb:9c:8a:7c:49:72:a8:4e:b2:3b:a7:
         51:1f:46:f8:ec:16:b1:bb:b3:95:3b:55:5b:60:01:23:36:dc:
         9d:71:3d:37:b1:54:e5:4a:51:64:4d:8a:5a:3b:3b:18:eb:c5:
         4f:fe:50:bf:4f:a2:2e:e6:14:77:c5:ad:6f:46:d3:0a:63:a5:
         5d:35:b6:c5:09:9a:18:54:4b:46:32:bd:d4:76:69:ad:ac:db:
         bb:af:4a:38:70:ee:94:e9:92:7f:d1:34:eb:ac:c9:55:9f:31:
         48:96:7d:9e:ca:2f:99:47:ae:9d:b1:44:df:e2:aa:34:58:e0:
         57:1c:a1:04:2c:d9:31:c2:b4:20:64:41:77:d0:47:2d:c9:ed:
         49:38:c3:72:0f:67:36:a2:ce:bc:19:69:43:bb:72:b2:c6:5e:
         18:2c:26:54:a5:44:e5:6b:76:00:26:18:80:97:ec:f1:cf:e7:
         e8:0b:7f:69:53:6e:c0:02:84:5c:f4:35:d1:53:a6:f7:97:08:
         a9:84:5a:fb:49:dd:7e:31:5b:8b:16:8e:0b:bf:d1:8e:a7:36:
         83:7c:f2:6a:32:8d:be:d5:81:41:e3:42:74:84:3f:7d:57:c3:
         0b:d7:e7:2f:48:56:9d:65:cf:3c:63:70:d4:a2:d3:24:8b:73:
         9e:b2:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org