Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e2033323830.roa
File:                     36362e3131382e3234362e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          KGRiO7LNOFMaAGr7nDLz54LTul76mlbHf22aD4v8EiM=
Subject key identifier:   4C:B9:AB:56:5A:1E:FC:1C:4E:FB:B5:90:08:72:22:A2:B3:53:32:5B
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       0FBC36C5AF6902BCB7478FE6B91E7E345705AC07
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e2033323830.roa
Signing time:             Sat 23 Mar 2024 18:45:55 +0000
ROA not before:           Sat 23 Mar 2024 18:40:55 +0000
ROA not after:            Sat 22 Mar 2025 18:45:55 +0000
asID:                     3280
IP address blocks:        66.118.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bc:36:c5:af:69:02:bc:b7:47:8f:e6:b9:1e:7e:34:57:05:ac:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Mar 23 18:40:55 2024 GMT
            Not After : Mar 22 18:45:55 2025 GMT
        Subject: CN=4CB9AB565A1EFC1C4EFBB590087222A2B353325B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:b6:7d:86:3c:01:e7:51:04:fe:82:a0:69:
                    86:76:de:59:9d:13:a4:6c:90:08:f5:04:eb:52:76:
                    2b:77:52:5c:17:37:a6:d1:8e:21:37:6f:48:39:b3:
                    36:11:9f:f2:3c:5c:59:ce:a8:36:26:fc:b3:a0:1e:
                    22:c0:30:53:d2:c9:75:6f:91:62:13:4a:64:91:98:
                    a1:d4:ff:fa:ff:08:1c:20:0b:eb:5e:f2:34:6d:90:
                    4f:b6:48:ce:26:3e:e0:c3:a9:62:45:7c:35:49:6a:
                    8a:6d:09:21:46:01:ad:24:17:10:28:4e:69:da:79:
                    e2:39:f2:74:48:84:2d:1d:9b:0c:34:3a:34:87:0b:
                    9e:13:e9:7f:f4:1a:f2:fc:17:b4:44:73:42:fb:70:
                    c1:f6:c0:c8:8b:0f:f9:38:92:4d:48:d2:76:ab:50:
                    e3:53:4f:50:8f:c4:92:78:35:56:34:a7:05:a4:0d:
                    ef:cd:04:ba:52:c8:e3:07:35:21:14:80:13:ed:1c:
                    b5:ae:09:8d:bb:36:9e:dd:93:47:98:d4:b7:4a:41:
                    b5:2c:58:d5:1f:2b:98:e7:c2:69:fb:2c:6b:19:59:
                    01:2c:04:c0:23:bb:0a:fa:68:3a:dc:78:ea:4a:96:
                    a3:88:e9:83:46:78:57:c9:ae:03:82:fb:f6:58:4d:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B9:AB:56:5A:1E:FC:1C:4E:FB:B5:90:08:72:22:A2:B3:53:32:5B
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:f6:ef:45:3f:bb:83:a1:7b:52:3f:70:b4:33:1b:d1:4f:
         ec:66:92:62:48:42:0e:95:4b:e3:30:2d:96:f6:6c:79:8b:67:
         b2:61:a8:3f:53:c5:de:a2:b8:75:e8:62:0b:6c:3a:b4:14:c6:
         4c:3c:0c:b6:b6:c8:69:35:b7:c4:56:2a:98:5c:80:e5:a3:53:
         6f:66:34:92:3d:bb:ef:5e:2f:18:56:2c:06:94:92:0f:cb:b6:
         68:98:f8:48:b0:55:cc:79:97:32:94:76:38:c3:4f:b4:4d:9f:
         ec:07:33:f9:58:34:19:de:52:32:a9:ef:81:6d:b6:5e:ef:83:
         4e:7a:e9:df:68:2d:96:48:c6:2a:0e:93:e1:a8:98:ce:1a:79:
         dc:aa:92:40:8e:6f:10:c5:c6:ac:6e:81:cc:d8:c4:6c:1e:85:
         5a:85:9f:ac:a5:81:76:39:41:15:6b:58:3f:39:ae:d7:a7:d5:
         7e:13:74:6f:0c:13:5b:33:5c:c0:50:a0:09:0c:ad:d6:b3:6b:
         12:e0:e2:3b:53:bd:ae:24:7c:01:56:4c:cc:40:28:de:e8:f7:
         fb:45:1a:75:98:cd:0d:ab:58:f8:96:0e:4d:3c:35:ed:e2:d6:
         5c:32:1b:e6:ec:e8:39:20:b2:f4:c6:9e:a1:43:fe:d8:28:5c:
         34:3f:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----