Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36113.roa
File:                     AS36113.roa (raw, json)
Hash identifier:          fsFx2DQVxinJmSMVG/kCvSwcdI9Ck2o8UOR1kdKKxRE=
Subject key identifier:   64:DD:F5:B9:CB:C8:A1:AF:9B:41:73:8C:56:4F:7E:31:F3:55:D8:36
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5C5CB2A119A65DBC97EAE519F5EAB61CF9FDB765
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36113.roa
Signing time:             Wed 14 Feb 2024 00:00:35 +0000
ROA not before:           Tue 13 Feb 2024 23:55:35 +0000
ROA not after:            Wed 12 Feb 2025 00:00:35 +0000
asID:                     36113
IP address blocks:        192.228.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 00:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5c:b2:a1:19:a6:5d:bc:97:ea:e5:19:f5:ea:b6:1c:f9:fd:b7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 13 23:55:35 2024 GMT
            Not After : Feb 12 00:00:35 2025 GMT
        Subject: CN=64DDF5B9CBC8A1AF9B41738C564F7E31F355D836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:54:40:ae:52:68:00:5d:91:b4:67:c6:76:
                    15:a0:97:23:bb:71:f7:3d:2e:0b:c8:78:8e:49:07:
                    e1:a6:2f:5e:b1:9d:97:c3:cc:93:4c:32:69:3d:57:
                    fa:72:2e:0a:67:41:4e:ab:02:48:9c:a3:84:cd:76:
                    de:81:e8:20:26:8e:63:c8:9a:36:84:82:67:f2:56:
                    26:a8:f3:7a:34:93:f8:b7:31:7d:20:dc:22:55:c8:
                    93:d7:6a:0e:c6:09:b5:d9:43:19:54:99:f5:72:cf:
                    c6:01:45:d0:ae:01:2a:6b:ae:33:02:01:bd:0a:5c:
                    5e:b9:e3:6d:f6:12:b1:99:2d:f5:41:df:11:2e:2c:
                    c7:81:02:6a:2b:04:fd:31:72:70:c5:ab:f2:28:82:
                    2b:aa:e4:e6:fb:28:b7:8e:f6:8c:3c:78:85:23:bf:
                    b3:21:ec:1b:96:03:c4:4f:18:61:7c:25:22:6a:a4:
                    dd:69:d1:71:6a:e2:c7:81:26:55:03:d9:86:cc:92:
                    fc:db:61:c7:f3:1f:91:12:d1:4c:53:85:ce:88:1d:
                    42:35:0e:ad:55:e5:d3:38:19:10:28:ff:f4:13:08:
                    37:8f:b4:0d:40:c1:27:fd:30:fb:48:cc:30:b3:e5:
                    44:46:49:b5:a5:83:89:c9:08:05:e0:6d:9f:56:09:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DD:F5:B9:CB:C8:A1:AF:9B:41:73:8C:56:4F:7E:31:F3:55:D8:36
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:56:51:e7:86:14:7a:f4:6b:7c:ff:78:61:e9:eb:de:af:fb:
         7e:a1:1c:b5:d5:be:46:ca:b1:ff:7a:63:3d:b4:25:00:50:2b:
         e2:31:57:f4:b8:ad:b9:1f:3b:fe:0d:16:7f:ac:db:f8:75:3f:
         3e:b8:95:d2:c9:53:77:29:e8:e6:11:49:f9:16:b8:07:dd:ce:
         11:b4:d6:81:62:71:0a:01:ca:d4:9f:8e:8d:13:41:04:e7:6b:
         3a:a3:ef:e2:4b:60:da:92:8d:be:2f:a1:8d:c8:15:84:5d:43:
         76:f4:8e:72:c8:75:4b:b4:3a:1f:dc:10:54:76:7d:5b:0b:21:
         c9:6f:dc:b5:ff:b5:c2:b7:57:e8:8b:f0:82:4e:09:40:86:18:
         71:60:4c:23:b2:b2:d7:58:fa:c1:81:f3:70:d1:13:45:9d:b5:
         63:5b:5d:7e:ba:a9:03:86:6e:35:9c:7e:40:05:d1:26:79:a1:
         0a:e4:5d:65:b4:f5:a4:74:77:22:0d:7c:56:c1:df:bf:61:2f:
         7b:8b:25:a1:b7:11:5f:14:20:63:67:34:b4:34:06:f2:3a:73:
         bf:e3:59:71:ba:24:22:13:4a:fb:ad:a7:c9:bc:46:d3:fe:e0:
         ee:1a:a5:eb:ef:cf:4f:0d:f1:83:fc:60:b5:0d:e6:18:52:27:
         ba:53:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----