Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203631333137.roa
File:                     36392e3136362e3233362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ZdaaDMHP/PmhpSetyjuaFtWYrfAeggomErpyYpvw9K0=
Subject key identifier:   27:4E:DD:22:5E:96:83:97:88:54:AC:48:8D:F7:08:BA:3B:C4:62:FB
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       5AE642A921236FA521C0504B048B01A2A5BC29FD
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 05 Jan 2024 10:37:32 +0000
ROA not before:           Fri 05 Jan 2024 10:32:32 +0000
ROA not after:            Fri 03 Jan 2025 10:37:32 +0000
asID:                     61317
IP address blocks:        69.166.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 Jan 2024 19:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e6:42:a9:21:23:6f:a5:21:c0:50:4b:04:8b:01:a2:a5:bc:29:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan  5 10:32:32 2024 GMT
            Not After : Jan  3 10:37:32 2025 GMT
        Subject: CN=274EDD225E9683978854AC488DF708BA3BC462FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:9a:cb:ca:b3:77:d3:0c:1c:30:a7:8a:17:
                    e0:fb:cb:25:0f:bf:35:75:e5:96:72:a0:3a:77:91:
                    4a:2c:ed:e9:af:c4:90:95:19:3a:96:1f:bc:9b:ac:
                    93:d9:1f:d7:02:0a:97:b9:ae:3d:0f:a1:44:f6:6f:
                    40:f0:d1:a5:ae:a7:f9:77:9c:80:e8:4f:86:15:1f:
                    e6:a3:ae:d0:75:a0:97:8f:21:ca:99:15:3e:ee:39:
                    d6:c7:77:8f:85:f1:b9:dd:d1:a9:93:4c:c8:81:d6:
                    dc:96:11:42:ea:dc:32:de:63:ba:c1:82:d0:08:d4:
                    f3:a9:86:da:30:79:90:72:51:58:c2:1d:17:6f:7a:
                    92:27:d4:dc:7c:5d:ab:41:90:c0:f6:c3:86:2b:51:
                    d8:d0:86:9a:3f:c4:57:2a:4f:bd:2d:91:88:2e:cf:
                    f9:1b:46:94:b7:75:c6:6a:d4:d0:48:a9:2c:30:b1:
                    a1:91:00:67:7f:5f:91:13:4b:60:bd:c4:60:e1:3d:
                    69:48:3f:64:bd:0b:fd:d4:c1:a6:1d:f9:c0:8e:d4:
                    95:e3:84:1a:07:ef:b5:22:8f:e1:cf:9f:7f:68:82:
                    4c:4a:dd:69:03:81:96:bc:58:97:9b:85:b4:11:96:
                    5e:cc:48:07:0f:cb:19:2e:c6:cc:83:1a:42:5c:74:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:DD:22:5E:96:83:97:88:54:AC:48:8D:F7:08:BA:3B:C4:62:FB
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:c2:3d:9c:00:f8:3a:6a:bd:25:07:3a:1a:5f:ee:60:40:
         fe:32:40:ef:13:0c:46:30:52:79:e0:c4:76:f1:24:bb:df:84:
         f6:65:da:3d:62:c1:95:f4:ab:fb:6d:f6:0d:bf:2d:68:31:cb:
         ab:16:d7:a6:68:c3:c0:22:a4:d0:14:39:ff:31:28:d8:58:10:
         82:49:b5:cb:59:07:2d:76:a2:05:ef:eb:44:12:90:70:d2:c6:
         58:0d:4a:48:1c:b5:c2:4d:bd:bf:a5:1b:ec:d4:f9:17:7b:32:
         52:ef:7b:ce:33:c8:d9:50:27:e4:49:e7:92:7c:d2:fe:53:72:
         f2:7c:ff:f6:c7:37:5f:57:2f:0a:83:c4:e6:21:f0:3c:7b:78:
         f1:99:96:8d:ed:4d:b0:a1:78:a5:60:65:10:4f:5c:88:a1:2a:
         b0:e1:e1:e7:25:e5:be:c3:db:c7:1b:04:26:a6:ec:cb:49:bb:
         0c:c1:87:cf:fd:0e:b4:22:c9:7a:5a:0e:e9:45:14:f7:a2:dd:
         ba:42:b6:87:15:94:66:39:c8:62:77:5e:d4:ad:37:e1:ae:69:
         4f:5b:8f:40:80:a5:eb:52:70:dc:c2:0f:be:33:ed:ac:61:03:
         a5:24:e5:82:64:f5:e2:e5:c8:8e:66:6c:8f:6a:a5:74:c0:e1:
         82:20:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org