Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20383334.roa
File:                     36392e3136362e3230352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          L2+ZsIHCN7lvQifJPywFdTN4odViR5vdcrtTUQ/uhm8=
Subject key identifier:   E1:89:A2:A3:95:07:6A:FB:BA:B7:0F:D7:71:67:01:04:6F:C6:C5:CF
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       6958989AFD68EFC21DF09001DCE82FE4107B18BC
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 16 May 2024 10:06:57 +0000
ROA not before:           Thu 16 May 2024 10:01:57 +0000
ROA not after:            Thu 15 May 2025 10:06:57 +0000
asID:                     834
IP address blocks:        69.166.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 May 2024 15:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:58:98:9a:fd:68:ef:c2:1d:f0:90:01:dc:e8:2f:e4:10:7b:18:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 16 10:01:57 2024 GMT
            Not After : May 15 10:06:57 2025 GMT
        Subject: CN=E189A2A395076AFBBAB70FD7716701046FC6C5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:c1:3b:f0:a2:dc:69:fe:11:09:9b:5f:5c:
                    13:14:c5:08:fb:2d:55:48:81:6f:7f:e4:ce:fc:a1:
                    db:b7:4a:ba:68:fb:3e:12:75:4e:0f:06:7d:5e:d3:
                    89:ef:ff:76:ab:e8:4b:82:b5:a9:8a:1a:cb:41:69:
                    67:23:0a:0e:c7:02:9a:2a:3c:59:c6:54:b8:2a:e6:
                    af:e6:a7:ed:fc:4e:8f:4a:ba:0c:f5:53:ed:7b:28:
                    6a:8b:cb:d1:b4:d5:bf:3d:37:7e:e0:fb:ff:3b:7a:
                    12:cf:e5:ed:21:b4:37:82:18:94:12:cc:22:e8:0d:
                    b4:90:81:a6:2b:ac:1c:6c:0d:0a:e3:4f:9e:70:a4:
                    36:cd:b5:33:af:c6:f7:aa:62:0e:e5:26:3e:42:d3:
                    b3:6d:5a:ac:61:b0:27:8a:1b:14:89:fc:12:96:df:
                    40:68:c1:5b:fd:ae:fc:aa:be:d9:37:74:c3:7a:b6:
                    04:c6:65:91:f9:58:72:ac:75:c6:e7:80:f0:89:95:
                    5c:32:0f:84:2d:e4:18:1e:43:5a:2e:53:e6:bf:98:
                    8b:b3:34:e2:81:1e:6e:72:4e:62:e0:5b:a4:55:96:
                    11:66:63:41:b5:1a:d9:3a:09:81:bc:1b:0d:bf:f1:
                    a8:5f:dc:df:c1:43:ba:48:97:10:88:ca:62:7f:23:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:89:A2:A3:95:07:6A:FB:BA:B7:0F:D7:71:67:01:04:6F:C6:C5:CF
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:44:af:b3:01:53:ab:35:12:a1:cb:d6:1e:4a:09:01:c7:
         d0:e7:b9:d2:1f:6a:f0:38:33:94:46:cc:76:ec:0c:b8:48:e2:
         66:41:59:1e:6f:8f:f7:02:88:f7:d3:38:8b:8e:eb:6f:08:16:
         f4:75:a5:10:99:f4:ca:5c:2a:21:71:d3:c0:f6:43:af:59:9b:
         6c:c2:17:77:1d:b8:aa:cb:28:ae:1f:68:f6:70:6b:99:a6:0d:
         a2:26:56:6d:34:bf:d8:23:f5:a2:f7:c3:c1:70:b9:c2:80:3f:
         5e:12:66:66:b6:5f:f9:c0:c0:3a:33:01:57:55:63:b8:fc:3d:
         59:3d:6c:7b:ee:db:7f:58:5b:30:af:16:e8:9f:31:cb:a5:dd:
         62:8a:63:4c:27:5a:b4:02:9a:1e:b2:e6:72:fb:a2:9e:be:ba:
         1c:f9:22:e4:35:eb:08:4e:61:b0:34:b2:17:42:c6:f0:f9:b7:
         38:43:d2:7c:76:f3:3a:3e:71:64:4d:2c:e7:a3:17:fd:00:5e:
         03:6b:23:bb:b9:31:50:66:6f:53:9e:ae:a2:0a:a6:73:fd:6e:
         58:22:2b:a5:c1:a6:66:fb:fd:91:31:0d:6d:56:ee:41:93:75:
         06:88:b8:57:d9:d9:24:d1:ab:08:11:3e:50:2f:93:b7:f4:fe:
         d4:e9:80:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org