Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa
File:                     36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa (raw, json)
Hash identifier:          scJj5ES8Ckfsd3EPtG9M2YfBwEQIlIJcW/qEV8zf3xo=
Subject key identifier:   6F:9C:B8:FB:0C:19:64:7C:90:44:DA:7B:44:C1:18:63:A6:7B:59:E9
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       66D247C7A51AB9659D07E3D9E00B7FB7DB90CCF0
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa
Signing time:             Thu 22 Aug 2024 18:41:52 +0000
ROA not before:           Thu 22 Aug 2024 18:36:52 +0000
ROA not after:            Thu 21 Aug 2025 18:41:52 +0000
asID:                     270764
IP address blocks:        69.166.236.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 22 Jan 2025 00:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d2:47:c7:a5:1a:b9:65:9d:07:e3:d9:e0:0b:7f:b7:db:90:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug 22 18:36:52 2024 GMT
            Not After : Aug 21 18:41:52 2025 GMT
        Subject: CN=6F9CB8FB0C19647C9044DA7B44C11863A67B59E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0f:3a:85:e7:90:16:af:22:b5:cb:55:2b:07:
                    7e:44:93:b2:04:25:98:5d:0c:a2:19:e0:a3:ff:23:
                    df:0f:fb:c0:5d:9c:dc:f1:e7:64:fb:e5:b4:01:da:
                    c0:c1:96:ac:7c:73:ee:c7:4a:ae:d0:48:2f:8b:32:
                    e0:c8:a7:85:e2:2d:c8:2f:d3:8b:be:18:d7:74:a2:
                    36:2c:ba:e6:34:d9:58:72:35:34:79:d8:c9:76:ab:
                    d0:ba:ab:83:5b:28:01:91:66:6a:22:39:d7:b0:b9:
                    f8:9b:bc:1a:89:20:fd:23:3e:9c:6a:71:1e:ce:f0:
                    f7:bb:ca:2e:3d:26:62:1c:ac:e4:3b:4a:1d:3d:fa:
                    91:ad:23:55:89:43:a7:87:10:9c:e0:bf:f4:8d:36:
                    dc:a8:b6:de:75:fa:63:5d:b3:0f:1a:ea:e5:8f:23:
                    54:e0:fe:c9:81:52:ea:e0:08:76:92:bd:c7:7e:16:
                    e2:fe:8f:5c:86:18:18:5b:2e:40:c8:2f:db:cb:71:
                    1d:cb:31:fd:51:93:d3:74:c3:86:ea:12:e4:30:fd:
                    f7:dc:4b:7d:f5:4a:df:33:0a:de:39:91:0a:1e:b5:
                    4c:9f:4f:7b:eb:b3:19:3c:95:51:48:b7:76:14:42:
                    bf:a6:69:29:e1:cd:96:61:86:1b:1c:e8:13:ec:4f:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9C:B8:FB:0C:19:64:7C:90:44:DA:7B:44:C1:18:63:A6:7B:59:E9
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:a0:74:9f:89:0b:1b:a6:f3:70:f4:4b:53:ea:24:1a:95:
         d0:f6:7c:db:cb:54:ba:2d:ae:9e:33:f4:82:c9:7f:15:f5:65:
         6c:f4:5a:ad:71:14:10:c5:17:51:b2:f8:4f:99:43:d7:09:64:
         d4:6c:1a:f4:5d:d5:bc:19:26:17:87:bf:18:c3:5f:fb:7b:60:
         4b:d3:47:ae:e1:ca:9b:ed:33:3f:fc:94:3b:98:a8:b9:1a:4d:
         a6:22:e7:b3:8e:96:a3:df:84:69:75:a0:84:bd:3f:7e:90:2b:
         ae:13:ca:2a:fe:13:78:12:a4:06:53:3c:0b:33:6c:91:aa:f1:
         81:cd:d3:01:80:7d:65:89:cb:04:bd:c1:13:69:85:8f:ea:82:
         bb:89:f9:51:9f:20:62:b5:7b:e7:12:72:7a:62:c4:c8:a7:fe:
         21:ab:c0:63:53:77:c6:d4:92:74:a0:f1:4c:07:60:96:05:0a:
         f5:d0:6f:f5:e3:2a:59:86:ec:81:4a:f9:9e:86:9c:43:af:9f:
         7b:65:a2:ec:e2:0d:91:31:23:44:1f:7b:20:bf:a4:09:bb:59:
         71:e3:8f:68:be:e3:66:b5:8b:aa:54:f4:65:22:0d:75:7a:e5:
         fa:f3:2d:ae:55:53:b8:4e:85:32:65:a4:58:4b:c0:f3:46:17:
         e3:0f:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:59 2025 by rpki-client