Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203539343236.roa
File:                     36392e3136362e3233362e302f32342d3234203d3e203539343236.roa (raw, json)
Hash identifier:          P0uKqrrlUO6/Hzi/vx7xdu0ldtm9uEeDb7YMmGDcr5k=
Subject key identifier:   49:09:65:71:2A:26:CF:DF:26:3F:CD:47:8D:CC:52:8D:B9:78:2F:BA
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       7E8201DF722955BB2952F29CE0B85960796558F3
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203539343236.roa
Signing time:             Thu 30 Nov 2023 06:41:01 +0000
ROA not before:           Thu 30 Nov 2023 06:36:01 +0000
ROA not after:            Thu 28 Nov 2024 06:41:01 +0000
asID:                     59426
IP address blocks:        69.166.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 31 Dec 2023 00:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:01:df:72:29:55:bb:29:52:f2:9c:e0:b8:59:60:79:65:58:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 30 06:36:01 2023 GMT
            Not After : Nov 28 06:41:01 2024 GMT
        Subject: CN=490965712A26CFDF263FCD478DCC528DB9782FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:b6:3f:39:e2:9b:84:4f:87:ae:2b:91:b6:
                    d5:ec:43:39:97:e8:fa:08:91:0a:f1:6c:9d:65:c1:
                    48:58:35:ef:39:7a:4e:44:5a:6a:f7:ab:17:89:35:
                    42:39:ca:16:a8:a1:b2:be:23:f9:8f:95:67:e1:f2:
                    32:50:7d:6b:be:20:87:77:9a:fe:f6:90:c6:80:60:
                    a7:d3:92:ff:c2:1d:b7:43:ff:89:fd:1a:c2:90:36:
                    50:d3:8b:14:34:32:f2:8c:6a:c9:8d:34:75:01:9d:
                    56:df:68:cc:ef:96:65:87:fe:63:63:f8:d8:a6:b3:
                    0b:42:9b:98:b5:16:2a:87:bf:09:48:05:18:ad:f9:
                    dd:de:5b:aa:ae:95:db:66:42:b9:44:48:5c:ae:e8:
                    02:7d:87:83:ee:db:03:ab:76:46:58:21:ff:63:34:
                    6c:7e:db:53:9c:01:af:88:5d:22:f7:e0:2c:0d:b6:
                    22:cd:fe:52:0e:b0:67:27:d3:c2:c7:f0:22:de:02:
                    c7:86:f6:62:e4:d4:db:88:99:54:a6:0b:05:2e:7f:
                    41:16:d4:28:0d:cf:23:f6:1b:6b:69:bc:ab:f4:2a:
                    6e:3d:90:a6:d1:5a:1c:88:f6:16:db:74:50:b8:a1:
                    b0:28:c3:de:ca:9d:32:f8:72:7f:91:76:4a:1b:73:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:09:65:71:2A:26:CF:DF:26:3F:CD:47:8D:CC:52:8D:B9:78:2F:BA
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203539343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:75:2c:f5:7f:54:ba:fe:9b:97:ed:00:d1:8f:31:38:67:a8:
         20:6e:b4:a9:4f:87:84:c5:fa:90:ab:91:2e:47:a1:62:8b:05:
         ce:9b:08:92:13:34:22:fa:f8:a0:46:92:fb:6e:b7:74:83:e1:
         29:b9:6f:fa:ba:59:ed:bf:37:b1:1a:77:38:ae:06:bf:3c:80:
         8a:a6:ac:c0:7e:cf:a2:f3:96:47:1d:e8:28:af:db:b7:24:50:
         08:bc:f2:63:b8:d6:d4:5f:49:dc:72:4c:ab:84:40:89:80:3c:
         45:a4:68:26:84:e2:5c:12:39:3f:1d:3a:b2:ca:ba:67:2c:2e:
         4f:dd:8b:81:5a:7e:d7:aa:94:9e:f0:78:a3:7b:69:3d:cb:9b:
         bf:f5:68:0d:62:d8:0e:f2:92:5e:e6:9f:54:06:16:0f:15:35:
         e2:1d:8f:b6:17:d3:8c:ca:21:83:b3:c0:55:6d:bc:47:14:be:
         58:c3:96:79:0b:bf:83:b5:be:af:39:87:43:65:02:6b:0f:ee:
         ff:fb:1d:36:2c:29:7a:0c:cb:4f:59:ac:22:4e:df:b2:05:d9:
         dd:85:fb:68:0b:23:1a:0c:d4:8c:32:e6:8b:3e:e7:9d:ae:e6:
         32:7b:88:dd:34:d6:ac:4c:50:d8:ab:55:05:0c:6e:48:62:cb:
         f2:4f:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----