Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20323135323837.roa
File:                     36342e3235332e39302e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier:          q1fvbwtCUviLs51SFqUFcK5syT6YDUmUe0Ob14SD7uk=
Subject key identifier:   E2:27:DE:06:60:7B:10:35:0B:A2:04:08:CE:00:BB:AA:46:A9:82:E6
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       678391ACC85FB76448403C43D9540779327E8B09
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20323135323837.roa
Signing time:             Mon 30 Sep 2024 12:15:21 +0000
ROA not before:           Mon 30 Sep 2024 12:10:21 +0000
ROA not after:            Mon 29 Sep 2025 12:15:21 +0000
asID:                     215287
IP address blocks:        64.253.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:83:91:ac:c8:5f:b7:64:48:40:3c:43:d9:54:07:79:32:7e:8b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Sep 30 12:10:21 2024 GMT
            Not After : Sep 29 12:15:21 2025 GMT
        Subject: CN=E227DE06607B10350BA20408CE00BBAA46A982E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:51:66:e4:1c:4d:ff:36:31:7d:c4:c6:70:
                    03:28:b7:06:90:ad:ca:53:03:dc:7b:36:6c:01:e4:
                    07:3a:ab:cd:e3:40:9e:01:ce:92:98:fd:0c:79:b7:
                    fc:25:4a:db:6e:66:fc:b5:7a:43:ab:05:ea:1c:94:
                    bb:c0:7b:11:80:ec:97:88:a2:49:c5:9e:73:bc:56:
                    f7:f9:08:bb:68:2b:54:5f:95:79:2d:8f:2f:73:32:
                    41:f9:3f:9d:9d:7b:e9:38:4e:7d:3a:d2:51:13:5d:
                    d5:b0:82:cc:3f:71:6b:7d:d2:a8:d9:21:e3:45:f6:
                    ad:b3:f8:18:f5:66:13:8e:2a:6b:c3:dd:9b:e5:0a:
                    32:22:63:ac:9c:c6:43:e3:b2:7b:70:98:ec:05:76:
                    15:d7:4d:cf:8c:a8:e2:3f:a4:df:d3:dd:9d:69:49:
                    70:c6:f0:db:9c:cb:76:f9:1e:24:90:e1:89:7f:4d:
                    35:da:2f:f3:ca:3c:08:ea:65:ac:04:d5:66:72:b6:
                    2e:e2:48:76:c2:4b:41:25:ce:55:c4:d2:f4:a5:1b:
                    ef:03:6d:f4:47:17:ca:ce:96:e5:cd:d2:2e:7c:2e:
                    51:1c:45:59:0d:cc:10:e8:05:26:4a:64:69:21:f7:
                    d5:ef:94:45:93:a1:85:ec:8b:35:9a:e3:54:f9:59:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:DE:06:60:7B:10:35:0B:A2:04:08:CE:00:BB:AA:46:A9:82:E6
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20323135323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:70:52:6f:35:0e:27:54:00:1d:5f:3c:0d:89:d0:fc:67:e9:
         78:31:6b:68:fa:08:b2:1b:e1:40:b9:2d:af:d2:db:e8:bb:b8:
         81:31:06:80:fc:19:f9:85:97:e1:d4:63:4c:52:2f:c8:c6:e4:
         fb:85:30:b7:d8:72:31:ee:3d:03:fc:7d:04:79:12:b6:d8:f6:
         17:e0:66:a6:1d:17:30:1f:c9:00:90:65:c3:7a:17:4b:ea:93:
         40:92:2b:cd:d8:de:7a:3b:98:d6:3a:c3:3d:65:b6:8f:53:c3:
         ce:0a:d5:e7:63:9e:24:5d:80:9c:8c:9f:24:ae:50:88:94:1d:
         22:e4:11:6d:25:50:e0:81:d0:e8:58:48:2c:90:dd:cb:e3:ea:
         2f:65:b1:61:1a:7e:1f:3e:c5:bb:5f:b7:b3:e1:ff:d2:0a:ee:
         1a:b2:92:6a:97:1d:0c:c6:b9:0b:22:36:76:46:a6:1e:4d:13:
         e8:cf:14:5e:5a:2d:ac:be:f1:52:24:11:02:06:d9:ed:57:8c:
         73:92:ea:b9:58:a0:fb:3f:49:37:ed:79:0e:4b:dd:8f:05:c9:
         ab:f7:32:47:76:f6:8b:f3:95:5b:e4:97:be:aa:2f:f0:90:2f:
         74:d7:56:46:1b:e1:b2:3a:fe:7f:b7:7e:be:06:53:84:7b:2e:
         b6:c2:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org