Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323132333834.roa
File:                     36392e3136362e3232392e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          0s0NXzTkIQR799x6w73iEyTu4FVgizARHfnGd8zOC6g=
Subject key identifier:   15:D0:EF:51:69:A5:54:E5:92:AB:C6:9D:7D:C3:5D:5A:A7:2B:D0:89
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       0651F7BC50A1661B3AE8C0B08C6F47A6414F87C7
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 16 Jan 2024 12:07:36 +0000
ROA not before:           Tue 16 Jan 2024 12:02:36 +0000
ROA not after:            Tue 14 Jan 2025 12:07:36 +0000
asID:                     212384
IP address blocks:        69.166.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 11:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:51:f7:bc:50:a1:66:1b:3a:e8:c0:b0:8c:6f:47:a6:41:4f:87:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan 16 12:02:36 2024 GMT
            Not After : Jan 14 12:07:36 2025 GMT
        Subject: CN=15D0EF5169A554E592ABC69D7DC35D5AA72BD089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:36:1d:65:ff:6c:c9:35:13:16:ad:b9:06:
                    24:c1:5b:40:cf:ba:7c:a3:37:86:24:e1:21:68:06:
                    ba:d7:a9:3a:50:ce:83:97:33:fd:7b:50:6e:66:71:
                    e1:cd:d8:87:9c:d0:13:7e:ee:67:91:7d:6d:b5:7f:
                    61:3b:80:65:3b:3e:bf:78:62:8d:aa:81:06:61:cf:
                    00:35:b8:24:e5:a1:55:c7:3f:cf:b7:e9:f3:20:92:
                    e7:bc:8d:59:fb:cb:57:f5:8f:70:ba:c5:f7:bb:97:
                    06:f4:ad:03:d2:60:e6:21:84:37:2e:a1:42:e2:47:
                    b2:fa:38:2d:ec:cb:c9:f4:fe:16:7f:68:30:3a:5a:
                    03:e7:4f:c7:0c:e7:af:8f:b6:6b:81:cf:92:a8:43:
                    08:a6:24:3a:e1:d4:be:6b:3b:01:f6:0b:b0:24:53:
                    29:d3:f7:c9:07:3e:8e:6a:2b:18:99:c4:0b:db:f7:
                    eb:8f:b0:02:a5:c4:a7:ed:bd:03:ab:1d:cd:92:28:
                    f4:58:dd:3e:f7:69:6a:ca:bc:d1:98:5c:1b:09:d7:
                    75:ba:4f:e6:e0:2b:84:e5:2a:76:b3:f9:b1:83:7d:
                    4c:cc:fa:7d:82:93:a8:f2:90:e7:b7:e4:4e:fa:80:
                    cc:8f:bd:16:9e:03:d8:a0:77:16:3d:47:bd:86:52:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D0:EF:51:69:A5:54:E5:92:AB:C6:9D:7D:C3:5D:5A:A7:2B:D0:89
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:05:ae:dd:05:1a:e9:94:2d:19:a2:39:55:80:ce:23:a9:a0:
         16:3c:c9:4c:00:88:3a:56:09:ee:6a:4e:be:44:1b:59:2b:fa:
         74:53:ae:ee:50:b9:78:27:c4:71:34:5a:85:5c:8a:64:f7:e9:
         58:ba:5d:20:2f:ca:a0:1b:4c:f5:5f:51:a1:a0:ca:95:a5:8f:
         28:94:94:b3:b6:57:ec:26:96:d4:44:3d:92:b7:96:80:a4:55:
         7a:e8:ac:52:7f:4c:7d:49:7d:42:de:72:9e:41:c6:5f:f9:19:
         75:6d:72:f8:c6:61:15:c4:b9:f6:bd:c4:e8:bc:ed:6b:16:e8:
         9b:cc:1a:4d:18:47:89:95:4e:49:b0:c1:b6:67:ea:47:0e:53:
         07:0d:42:c9:79:5f:31:81:3f:21:df:bf:a9:35:5c:39:41:fc:
         a0:4b:4b:2d:c1:12:07:3e:e2:44:97:3e:ff:e4:06:ce:13:ed:
         9b:da:9e:04:75:7a:a8:de:3f:68:e6:7e:20:4f:5d:09:84:c5:
         0c:e9:ba:1a:bd:b0:50:f7:01:f4:05:6d:30:3b:32:6d:c2:ef:
         72:61:d8:60:fb:67:3d:7f:3c:c4:6b:b1:bf:9f:4a:14:06:a9:
         ee:46:55:8e:25:43:9b:21:33:f3:38:54:f6:2d:74:2e:d8:69:
         87:e9:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----