Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32322d3234203d3e203631313338.roa
File:                     36342e34392e31322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          gdOvvlmVlvTEqQD2DSkWzAoO0Jv5w3gavAtXpESsYU8=
Subject key identifier:   F2:B4:73:EB:51:9C:23:3F:77:D6:21:28:AC:90:11:F5:30:23:89:88
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       32CB77E969028CD289351957283C7EB744545A56
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32322d3234203d3e203631313338.roa
Signing time:             Wed 26 Jun 2024 20:35:44 +0000
ROA not before:           Wed 26 Jun 2024 20:30:44 +0000
ROA not after:            Wed 25 Jun 2025 20:35:44 +0000
asID:                     61138
IP address blocks:        64.49.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 03:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cb:77:e9:69:02:8c:d2:89:35:19:57:28:3c:7e:b7:44:54:5a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun 26 20:30:44 2024 GMT
            Not After : Jun 25 20:35:44 2025 GMT
        Subject: CN=F2B473EB519C233F77D62128AC9011F530238988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:0f:1f:9c:a3:1a:e9:28:1c:5a:51:89:af:
                    ee:be:a7:ea:d7:3b:e2:ac:05:cb:7c:6e:4b:50:21:
                    88:80:ac:6d:50:d0:d9:21:cd:2a:e5:05:9f:7e:2a:
                    9d:d7:3a:57:54:ae:f7:e9:5c:1c:ef:62:a5:14:a2:
                    67:51:3e:9d:cc:27:fc:89:1d:f3:f1:e7:07:1d:16:
                    c5:eb:f8:22:94:f5:15:04:43:e5:3d:1f:b7:1b:61:
                    7d:79:60:bc:78:43:12:43:73:b5:1b:9e:fd:46:e4:
                    1f:e8:e8:81:9e:9e:02:2d:16:29:b7:dc:f0:26:1c:
                    91:10:96:a7:43:9e:1d:68:c5:16:de:bf:61:86:00:
                    bc:42:5c:01:49:73:e8:43:83:6a:54:58:c6:97:16:
                    9f:bd:74:5d:af:60:37:93:43:38:1a:28:3e:d6:87:
                    29:99:b9:12:66:87:04:ec:68:cc:67:32:02:91:ae:
                    13:a8:a4:6a:e2:4f:fd:63:17:4a:c0:74:9c:36:23:
                    30:6a:0d:02:94:64:13:ac:7e:17:6d:e8:5c:c1:7e:
                    82:88:27:56:76:a0:8d:f9:d2:fc:f4:c7:75:f1:c2:
                    fe:a2:10:df:26:11:31:4d:60:43:16:10:77:31:cc:
                    f7:7d:4f:cf:c0:38:d7:56:32:66:bf:a3:78:8d:fa:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:73:EB:51:9C:23:3F:77:D6:21:28:AC:90:11:F5:30:23:89:88
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:0d:62:b0:ff:e0:1b:48:77:69:bc:52:35:ba:e2:96:fd:bb:
         a8:d5:a1:aa:94:37:94:11:0e:2a:2b:b1:01:e8:f7:ca:dd:bd:
         56:19:d1:a0:cc:90:8e:b8:b2:b7:4d:2c:a5:90:8f:6c:29:99:
         18:28:d7:e5:b9:60:16:29:d2:3a:03:ac:ef:68:52:42:25:b0:
         ec:e1:07:a8:6c:06:47:3d:db:45:ec:e7:93:aa:b9:c2:e4:a2:
         b6:56:96:90:14:ef:4b:0b:ba:ad:56:3d:ba:58:ba:24:42:fa:
         e9:2f:7b:ba:b9:e3:4f:bf:d5:ea:40:d7:7d:cd:12:86:17:67:
         83:64:c0:ae:09:15:a7:a4:6c:51:c9:69:9b:ba:c3:b5:08:fe:
         8e:86:41:7d:5c:49:b7:ef:5a:68:dd:ab:19:2b:62:16:d4:01:
         1f:b6:99:57:6b:ac:7d:c1:63:de:77:c0:92:72:7e:e8:74:d5:
         58:84:b4:e2:2d:9f:13:d3:75:04:73:23:74:ae:20:63:ac:2a:
         f6:71:c2:99:dd:d9:62:97:75:2e:b1:d4:85:1a:a3:0b:09:ba:
         e8:de:4f:62:19:39:ac:23:aa:d6:da:15:57:7b:ff:c6:6b:25:
         f8:e4:e9:f8:70:83:f5:ca:5b:17:e5:09:49:0b:a6:3f:48:1d:
         4d:1e:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----