Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203535303533.roa
File:                     36392e3136362e3233362e302f32342d3234203d3e203535303533.roa (raw, json)
Hash identifier:          76A0sBDFT7rqMANFFTANYlTwbXKun04HAxsh5+JqfWI=
Subject key identifier:   41:9E:BE:B8:C1:BC:02:FB:C2:F9:F2:82:A8:B0:44:39:BD:3D:2D:E1
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       4DD3376B90BE51C74020403617B46F33C9061C08
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203535303533.roa
Signing time:             Wed 14 Feb 2024 23:47:46 +0000
ROA not before:           Wed 14 Feb 2024 23:42:46 +0000
ROA not after:            Wed 12 Feb 2025 23:47:46 +0000
asID:                     55053
IP address blocks:        69.166.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d3:37:6b:90:be:51:c7:40:20:40:36:17:b4:6f:33:c9:06:1c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Feb 14 23:42:46 2024 GMT
            Not After : Feb 12 23:47:46 2025 GMT
        Subject: CN=419EBEB8C1BC02FBC2F9F282A8B04439BD3D2DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:12:0e:f5:fe:bc:87:e6:1f:77:50:80:a1:
                    0f:67:18:67:aa:89:c4:27:79:d3:41:9f:9c:ec:c6:
                    f3:2d:10:89:20:70:f8:61:e3:fe:05:85:40:1f:93:
                    4e:0b:89:6f:17:f5:1d:50:73:ed:9d:e2:0b:cb:1c:
                    14:ea:97:92:62:3e:3f:ab:8e:ad:9f:bf:b7:fa:58:
                    77:5f:7c:2c:a6:97:00:13:22:5b:36:a3:6d:b6:a1:
                    d2:47:9b:25:3e:80:4e:91:e6:3f:d1:7b:72:37:62:
                    ec:29:7c:84:b8:83:68:cd:ec:98:75:e5:1f:1b:67:
                    a5:aa:cd:7d:4f:ec:5a:b6:8a:f1:7f:5c:5d:13:5d:
                    fd:1c:c0:f5:02:9e:60:5a:1e:4a:78:96:07:26:fb:
                    da:36:47:a7:a0:40:54:f9:bb:6e:7c:57:77:39:5f:
                    f1:77:f9:2a:73:92:b9:5c:5a:50:a7:90:db:85:6b:
                    8e:87:10:85:8a:ad:8e:29:ec:a7:87:5d:88:07:46:
                    e1:8f:7f:41:39:a2:a6:6f:dd:f0:53:39:57:e4:66:
                    16:dc:e9:e4:ac:03:76:2f:f5:81:19:4e:ff:ac:27:
                    c1:f2:07:63:e8:52:93:b4:c5:21:99:cf:65:fe:c4:
                    25:55:eb:e7:dc:63:9e:da:0b:2a:b9:cf:cb:8b:cf:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:BE:B8:C1:BC:02:FB:C2:F9:F2:82:A8:B0:44:39:BD:3D:2D:E1
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203535303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:15:36:32:2d:1f:05:2b:97:99:08:02:c6:bb:b7:46:2e:
         28:08:06:1c:bc:01:23:6f:a9:91:94:ab:de:5b:f3:c0:2b:e0:
         18:e6:c2:6d:52:9b:81:0f:4d:6c:4e:eb:c8:95:73:8f:56:42:
         1c:22:e0:a8:9a:9d:24:2c:13:04:4a:aa:5f:1f:bb:b7:d2:e9:
         f0:b4:c4:44:e8:18:8d:e5:65:95:c8:e0:4f:e5:28:d9:1d:b1:
         90:f7:fa:41:55:40:f1:0a:5d:1c:74:22:08:7e:8a:71:8c:35:
         23:8f:84:5a:c8:d7:3d:21:3e:f0:7a:52:11:fc:5c:26:58:7f:
         ec:87:26:be:45:21:57:37:e4:f5:2a:a0:73:a5:d5:18:ef:62:
         44:c2:1b:7b:7b:c7:d6:32:c5:eb:f0:7b:92:34:45:0a:d0:30:
         8a:5b:e9:5b:95:de:25:c6:fe:bb:f1:16:75:f2:91:8f:86:60:
         00:97:d4:33:ca:5d:2b:05:2e:db:e2:14:7d:53:82:35:b7:fb:
         94:e5:bc:05:cb:eb:5e:8c:42:4e:9d:30:55:b9:33:b2:7b:4b:
         01:68:d6:f3:ab:05:4e:2e:0f:9f:1f:6a:fd:19:3e:f7:40:2e:
         ac:fa:21:bf:57:96:28:16:a8:31:cc:39:c3:a1:3a:c2:e7:86:
         3f:81:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----