Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3131342e302f32342d3234203d3e203631313338.roa
File:                     36372e3231302e3131342e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          xPBESsmN7ClQHnG4U9rpNf+GfBYTYOi/5NjcA0MbEvU=
Subject key identifier:   59:80:A2:1B:D2:F2:09:76:BA:30:D9:3E:8A:15:A9:8C:BD:6B:38:4C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       055797D315B3E08D8744EC7CB3324A8BD5DAA24B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3131342e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 02 Dec 2022 17:49:31 +0000
ROA not before:           Fri 02 Dec 2022 17:44:31 +0000
ROA not after:            Fri 01 Dec 2023 17:49:31 +0000
asID:                     61138
IP address blocks:        67.210.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:57:97:d3:15:b3:e0:8d:87:44:ec:7c:b3:32:4a:8b:d5:da:a2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  2 17:44:31 2022 GMT
            Not After : Dec  1 17:49:31 2023 GMT
        Subject: CN=5980A21BD2F20976BA30D93E8A15A98CBD6B384C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:44:e5:46:e7:7a:c4:cf:5f:d8:23:4c:45:a8:
                    d7:aa:0e:24:c8:c9:0a:36:42:9b:98:74:ed:ee:19:
                    5c:0d:6c:48:32:ab:25:ac:da:2d:d1:53:fa:0f:68:
                    0b:ac:00:75:c6:3b:3b:34:d6:bc:bd:8e:be:8a:6f:
                    d6:70:e7:27:94:e2:88:ef:f0:f9:24:af:35:bd:b3:
                    46:6c:4d:64:f4:2e:6c:0f:90:01:27:9e:1a:7d:94:
                    2d:ed:5e:fa:9a:28:4a:af:7f:53:06:0c:14:2a:c5:
                    f0:6c:ea:69:02:5c:66:64:7e:9a:9e:91:50:d0:28:
                    b7:37:ae:bf:e1:5d:59:d0:3a:46:fd:b7:dd:c3:9d:
                    8e:8f:63:d8:81:20:61:f5:07:de:3c:cf:ae:f3:07:
                    7f:7c:ce:86:7e:35:43:49:88:7c:5f:e5:43:9b:12:
                    6f:63:5c:71:59:bd:ad:ff:2b:8f:58:60:20:6e:df:
                    5f:8b:b2:f9:54:7c:0b:4e:f8:51:93:dc:13:ba:02:
                    4c:0b:03:5c:92:30:9b:dc:e7:10:0d:81:88:b9:cb:
                    01:01:9b:5f:3b:43:b3:30:43:e5:c8:56:75:fd:18:
                    4a:05:5f:fb:ec:44:77:ba:3f:29:50:af:bc:0c:27:
                    61:c2:80:4f:a3:80:59:e6:01:58:6e:1d:7d:93:51:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:A2:1B:D2:F2:09:76:BA:30:D9:3E:8A:15:A9:8C:BD:6B:38:4C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3131342e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:f2:8c:5a:0c:bd:60:12:dc:09:84:13:4e:fc:f9:23:90:
         39:0f:cd:dd:d4:9e:5b:46:af:1a:30:99:fb:ea:27:2e:f9:9f:
         03:36:e7:96:d5:e5:0b:25:c9:ae:fb:a4:db:7f:b3:ae:e0:d5:
         9e:dd:93:53:4e:a1:54:c6:18:2d:95:a9:db:56:2c:67:2a:30:
         96:f4:45:04:68:45:b9:ce:e7:c4:8b:c8:dc:4a:bd:7d:12:43:
         4c:2f:d3:6c:2e:94:d7:3f:0b:00:90:0a:5d:7c:63:7a:4d:73:
         8f:27:5e:8b:39:9d:34:eb:67:f9:25:09:97:37:38:4d:ed:92:
         f3:95:f2:28:14:68:f3:46:c6:a3:2e:f6:f7:82:a7:cb:18:c8:
         e3:f9:5e:5f:7c:e1:73:64:7c:f1:48:78:16:f5:82:d3:ae:30:
         89:53:ae:1a:82:9e:a1:47:4c:2a:b0:42:37:f9:10:26:e8:d7:
         eb:0e:0e:b1:84:c6:49:2c:08:f8:62:ca:37:33:53:57:8c:87:
         84:c9:f8:25:b8:4a:5f:eb:3e:94:fe:4b:57:46:42:be:18:cb:
         f2:26:ae:e2:7f:86:4e:6d:1e:a2:55:f3:d4:19:5a:fa:01:06:
         b0:8d:bd:84:5c:33:d9:19:6d:02:70:fe:d5:d5:88:2a:3e:cc:
         69:a2:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----