Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20313337343039.roa
File:                     36342e34392e31342e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier:          B48E17wEgoYJMxiqtiqT7RPIywdFTSptPv45EO1diuc=
Subject key identifier:   34:C7:3B:8B:4D:3D:F6:20:05:2C:24:E7:F3:61:A4:F3:D6:6A:13:95
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       59BB6D48A4A96A0125FEE78E6BD6B8656A9B7BCE
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20313337343039.roa
Signing time:             Fri 28 Jun 2024 04:46:44 +0000
ROA not before:           Fri 28 Jun 2024 04:41:44 +0000
ROA not after:            Fri 27 Jun 2025 04:46:44 +0000
asID:                     137409
IP address blocks:        64.49.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Jul 2024 03:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bb:6d:48:a4:a9:6a:01:25:fe:e7:8e:6b:d6:b8:65:6a:9b:7b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun 28 04:41:44 2024 GMT
            Not After : Jun 27 04:46:44 2025 GMT
        Subject: CN=34C73B8B4D3DF620052C24E7F361A4F3D66A1395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:31:d8:21:de:33:77:ec:5e:d0:7d:ba:6c:
                    13:59:d7:63:90:4f:4b:31:0b:64:e3:9b:7c:e0:68:
                    ba:0c:7f:75:2f:0f:db:97:b1:97:ed:cc:36:5a:2e:
                    13:cc:14:b4:f5:32:d7:01:3e:49:f7:b8:c2:4e:2f:
                    08:ee:a6:24:a7:80:86:51:c7:86:b4:54:b9:6b:f5:
                    8b:e4:18:29:8a:cd:2f:78:f2:ab:cb:a2:f8:2c:2a:
                    95:e7:33:bc:7b:00:09:0d:2b:be:37:68:6a:84:54:
                    87:d1:8c:fb:8b:48:f7:56:e5:37:db:a5:00:25:c3:
                    53:f9:1b:d7:1e:38:01:cb:51:1b:91:72:c9:53:23:
                    f7:72:b0:2d:a2:b1:68:a5:a5:7f:3d:70:a5:71:23:
                    af:ba:49:ae:9b:46:75:b2:c3:e4:76:d5:62:ad:b7:
                    17:7d:28:5e:d7:06:40:d0:aa:c8:0a:17:51:e8:ae:
                    09:c4:76:f8:5f:90:11:e3:41:36:b9:0e:bf:d4:3b:
                    a2:eb:5a:50:bb:37:07:c6:fb:e9:8b:9c:df:bc:a3:
                    53:76:2b:8e:e5:f1:d0:d9:1f:bc:8b:e9:ae:a8:58:
                    f2:fc:10:c8:ad:0a:1d:ab:45:bc:90:a2:ba:1b:7f:
                    af:48:ed:6e:9b:fb:55:2a:61:15:a2:d0:bc:6a:2a:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:3B:8B:4D:3D:F6:20:05:2C:24:E7:F3:61:A4:F3:D6:6A:13:95
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20313337343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:35:0f:f9:d9:84:f2:c3:7c:f0:19:e9:7d:22:a5:22:c4:a0:
         24:04:30:ec:e9:aa:26:67:0c:43:86:4c:43:91:4b:b8:c0:3a:
         dd:c4:56:4d:d7:c1:fb:13:87:3f:4e:04:8f:09:17:ea:5e:ff:
         3a:4f:e5:b2:59:d4:1d:f2:de:45:99:c9:48:ec:cb:55:c9:22:
         84:e4:bf:83:5c:6e:1d:bc:a8:32:fd:29:bf:7c:6c:b6:48:9d:
         00:4c:f7:39:6b:80:54:77:05:31:1d:d6:1b:ac:50:f0:45:ae:
         77:8b:3b:c3:6f:92:5a:50:a1:88:b0:84:0a:12:40:29:75:52:
         15:60:a3:e2:30:ac:3f:06:fc:96:8b:60:64:f3:0d:83:e4:45:
         1a:94:1a:40:58:fa:b5:3d:55:a4:64:6e:f1:0f:50:d9:36:2a:
         6c:dc:4f:7b:85:c7:7e:f3:86:7a:88:83:56:a4:7c:d8:4f:89:
         47:45:a4:35:7d:85:21:7e:b0:8e:4c:b7:cc:bb:55:49:56:c4:
         4d:99:70:80:c1:8d:45:a1:9e:e5:20:02:73:ff:3d:0f:b4:1b:
         83:74:d1:df:f7:38:50:dd:a3:8e:b9:3b:52:bd:c7:b3:4e:33:
         e1:40:4c:b2:7a:e8:c2:6c:9c:6c:4e:7b:08:31:e0:7d:4f:7e:
         a2:8e:98:be
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUWbttSKSpagEl/ueOa9a4ZWqbe84wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjQwNjI4MDQ0MTQ0WhcNMjUwNjI3MDQ0NjQ0
WjAzMTEwLwYDVQQDEygzNEM3M0I4QjREM0RGNjIwMDUyQzI0RTdGMzYxQTRGM0Q2
NkExMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Mx2CHeM3fs
XtB9umwTWddjkE9LMQtk45t84Gi6DH91Lw/bl7GX7cw2Wi4TzBS09TLXAT5J97jC
Ti8I7qYkp4CGUceGtFS5a/WL5Bgpis0vePKry6L4LCqV5zO8ewAJDSu+N2hqhFSH
0Yz7i0j3VuU326UAJcNT+RvXHjgBy1EbkXLJUyP3crAtorFopaV/PXClcSOvukmu
m0Z1ssPkdtVirbcXfShe1wZA0KrIChdR6K4JxHb4X5AR40E2uQ6/1Dui61pQuzcH
xvvpi5zfvKNTdiuO5fHQ2R+8i+muqFjy/BDIrQodq0W8kKK6G3+vSO1um/tVKmEV
otC8aipGKwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDTHO4tNPfYgBSwk5/NhpPPW
ahOVMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzM2MzQyZTM0MzkyZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMTMzMzczNDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMQ4wDQYJKoZIhvcNAQELBQAD
ggEBAIk1D/nZhPLDfPAZ6X0ipSLEoCQEMOzpqiZnDEOGTEORS7jAOt3EVk3XwfsT
hz9OBI8JF+pe/zpP5bJZ1B3y3kWZyUjsy1XJIoTkv4Ncbh28qDL9Kb98bLZInQBM
9zlrgFR3BTEd1husUPBFrneLO8NvklpQoYiwhAoSQCl1UhVgo+IwrD8G/JaLYGTz
DYPkRRqUGkBY+rU9VaRkbvEPUNk2KmzcT3uFx37zhnqIg1akfNhPiUdFpDV9hSF+
sI5Mt8y7VUlWxE2ZcIDBjUWhnuUgAnP/PQ+0G4N00d/3OFDdo465O1K9x7NOM+FA
TLJ66MJsnGxOewgx4H1PfqKOmL4=
-----END CERTIFICATE-----