Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e203631313338.roa
File:                     36342e34392e31342e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          3CUCYzfbrnhKNszK45GYbpk9aLIORb6MIE92MDqoUgI=
Subject key identifier:   F6:96:49:60:CD:08:E7:C2:29:03:29:8D:6C:04:57:92:11:AA:4E:FA
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       25D434CE688CCF6C588FA7C6D69725351781422A
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e203631313338.roa
Signing time:             Sun 28 Jul 2024 03:35:48 +0000
ROA not before:           Sun 28 Jul 2024 03:30:48 +0000
ROA not after:            Sun 27 Jul 2025 03:35:48 +0000
asID:                     61138
IP address blocks:        64.49.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 22:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d4:34:ce:68:8c:cf:6c:58:8f:a7:c6:d6:97:25:35:17:81:42:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul 28 03:30:48 2024 GMT
            Not After : Jul 27 03:35:48 2025 GMT
        Subject: CN=F6964960CD08E7C22903298D6C04579211AA4EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:8a:4b:81:df:51:f9:c2:df:f8:ee:fd:45:
                    9d:de:1a:c6:8f:97:64:78:d2:b4:07:09:e5:6b:6f:
                    26:59:e2:b9:8a:47:28:77:d0:92:c8:93:2a:e1:fd:
                    fc:8f:3a:c6:9c:a5:98:65:91:ac:c5:6e:56:2d:4a:
                    e5:e0:c9:26:f1:8b:21:cf:c9:5f:54:01:b3:7c:18:
                    b9:e0:e8:85:a9:8d:1a:70:46:45:7b:0f:69:7a:62:
                    f3:7a:e3:de:c7:92:f7:22:21:49:f4:dd:64:1b:bb:
                    73:11:ec:92:07:8a:a4:0b:fa:a8:74:bb:a5:3d:4c:
                    ca:ac:15:26:84:52:12:55:7f:e4:dc:65:25:1b:4c:
                    5e:7b:d2:19:e2:f1:1c:c6:ac:58:c6:65:d2:9b:c2:
                    3a:65:83:a7:42:e3:39:b0:ba:66:b5:cd:d1:30:99:
                    3d:f1:ef:4a:c5:ff:61:79:91:0a:1c:eb:f2:c1:29:
                    0a:18:c7:22:35:2d:80:a2:03:68:98:90:35:66:b6:
                    61:a4:a5:75:81:bd:57:d0:04:40:0d:a4:bc:1e:2b:
                    ed:60:d5:37:65:ac:e4:dc:2c:8f:cf:d8:65:62:b5:
                    b9:00:13:4f:a9:21:16:c6:39:6d:00:81:9c:92:98:
                    32:9e:da:f9:21:c3:0d:0b:e2:d7:13:99:70:36:6f:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:96:49:60:CD:08:E7:C2:29:03:29:8D:6C:04:57:92:11:AA:4E:FA
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:28:bd:bd:31:85:57:21:86:17:7a:09:8d:6a:15:94:7f:
         18:9a:b5:36:9d:54:6d:a0:d3:e3:43:bd:1b:d7:57:02:dc:b0:
         03:40:6b:3c:cf:f2:fa:58:bf:09:66:6a:70:a8:d1:d5:dc:68:
         f5:d0:bf:f0:87:4a:c0:ae:84:5e:8a:09:79:2c:b9:16:23:e2:
         43:82:29:32:0d:84:0a:1f:24:36:59:d3:e0:d3:62:21:9e:ab:
         11:46:6c:09:c5:c7:22:88:eb:0f:20:d1:5b:db:6b:c3:0a:35:
         24:9a:90:7e:c0:e8:a3:6f:48:69:40:88:91:a6:0b:8e:c2:1d:
         df:87:a2:f8:f0:1a:ee:29:22:9b:9e:ad:d8:f1:12:9b:97:f4:
         0e:54:48:cc:8a:93:89:01:fe:3f:19:75:b6:0a:b4:89:45:6d:
         2e:07:8b:a5:d1:bc:86:7c:e4:c6:9e:7c:2d:58:e5:f1:de:22:
         cc:39:83:6d:35:a5:68:e0:5a:af:ed:e2:df:d3:56:ef:45:d4:
         c0:ed:d4:aa:21:31:f2:17:8c:9c:48:06:a3:d8:84:68:05:06:
         44:c7:2a:45:34:75:6f:ff:a8:5b:86:32:e4:3d:d6:ee:97:f3:
         32:b1:c6:85:46:b4:22:62:98:61:ed:59:4b:29:bb:ab:c8:93:
         db:10:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----