Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233352e302f32342d3234203d3e203139343337.roa
File:                     36392e3136362e3233352e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          W4fQfn/m9rXFJ3mXxp9UonceOgGfz1T3W/my1tzrLYU=
Subject key identifier:   7D:03:41:3E:66:AD:B8:67:A1:38:9F:2C:B8:64:10:4B:75:08:C7:8F
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       574CD7EA25D8179EB93AF92F47A1137C4E047A9C
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233352e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 06 Dec 2023 23:10:43 +0000
ROA not before:           Wed 06 Dec 2023 23:05:43 +0000
ROA not after:            Wed 04 Dec 2024 23:10:43 +0000
asID:                     19437
IP address blocks:        69.166.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 00:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4c:d7:ea:25:d8:17:9e:b9:3a:f9:2f:47:a1:13:7c:4e:04:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec  6 23:05:43 2023 GMT
            Not After : Dec  4 23:10:43 2024 GMT
        Subject: CN=7D03413E66ADB867A1389F2CB864104B7508C78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:88:df:17:2d:fb:ab:4c:a4:31:f9:83:d9:
                    9d:6b:4f:d6:c4:72:f6:ee:64:b4:ee:e3:7e:37:c8:
                    aa:54:54:2d:c2:ff:79:8a:00:8b:19:79:1a:3d:c2:
                    22:8e:dc:ec:5a:e6:5f:e4:bd:7a:d1:65:cd:8d:02:
                    f5:54:26:ef:5d:87:95:7f:d8:11:cf:4f:66:54:55:
                    12:39:7b:ba:bd:db:db:89:37:98:77:a7:1d:fb:e5:
                    9c:23:88:3f:92:75:ed:bd:86:46:74:51:53:b4:57:
                    c1:9b:c3:7a:ce:7d:e2:2f:31:92:60:02:0a:44:29:
                    40:fa:89:07:75:51:4b:ba:e6:ac:7e:20:02:39:c2:
                    25:ab:df:8c:c3:dc:ad:fe:5f:e2:ee:95:5e:2f:79:
                    05:d3:85:a0:71:7e:20:8c:87:36:e4:2e:1e:2f:b4:
                    c7:5d:a9:e0:08:58:59:81:7f:c2:31:e8:93:f1:62:
                    21:2d:6b:57:60:1b:1c:92:4b:d1:b6:0e:26:42:c3:
                    53:08:07:80:31:eb:6e:cb:a9:41:12:4f:db:7c:55:
                    94:27:c8:85:d4:53:f5:40:41:b2:d5:1b:93:f3:d3:
                    f0:41:52:a7:a4:70:e6:60:e4:be:5a:36:09:cb:f8:
                    2d:9e:ba:bc:56:6d:c8:c2:70:68:a2:3d:e6:ff:ef:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:41:3E:66:AD:B8:67:A1:38:9F:2C:B8:64:10:4B:75:08:C7:8F
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233352e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:30:15:4a:73:87:06:fb:21:c8:0e:54:7b:0b:78:b6:17:7a:
         df:96:1d:e8:aa:56:60:0e:fb:07:50:fa:4a:cd:33:98:d1:96:
         6d:a4:12:19:4b:44:82:df:9d:d5:ac:69:fa:b3:14:41:45:87:
         4a:f4:48:19:18:39:79:b1:a2:b9:72:5c:62:ee:04:d5:8d:12:
         4d:a3:d2:21:83:48:72:98:99:5f:54:f1:29:45:8d:9f:d3:57:
         80:f1:d7:97:5d:ea:dc:6f:99:5b:ac:dc:d9:31:4d:37:57:44:
         d3:05:de:c1:a8:3d:7d:6b:b0:e7:04:4e:88:5d:e0:6e:e1:f7:
         78:be:3e:b5:85:51:bd:ca:b8:9a:20:ea:4d:45:d0:a7:c9:65:
         52:e7:74:ec:6a:9a:9d:52:f1:ac:92:9e:87:53:ab:e6:3f:c1:
         3c:6f:9c:e2:4f:36:8d:15:3a:02:a4:58:b3:ff:84:c9:ed:8f:
         ca:d4:be:16:63:80:50:03:c0:af:a3:06:79:1c:6f:20:cf:89:
         d4:59:65:68:78:d4:51:0f:7a:36:61:05:15:95:f9:5e:97:34:
         8f:c7:e0:32:c1:2d:9d:0e:24:fc:99:4d:fe:a4:5b:24:00:a4:
         4c:d3:62:92:dd:f3:33:de:77:4c:fa:cf:3f:b0:90:b0:89:d5:
         f2:9b:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org