Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e20313339343832.roa
File:                     36362e3230352e3234362e302f32342d3234203d3e20313339343832.roa (raw, json)
Hash identifier:          C9SAwAVaISr2advEIuIYia1FP7RmIkN4hp1oJ6UWD0I=
Subject key identifier:   F9:39:2C:0E:6A:D0:35:66:9B:85:7F:12:49:CF:7E:18:F5:42:C3:63
Certificate issuer:       /CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
Certificate serial:       77813491621173E50C531DF7C25452D2B3B4DB70
Authority key identifier: 8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e20313339343832.roa
Signing time:             Fri 17 Nov 2023 14:42:04 +0000
ROA not before:           Fri 17 Nov 2023 14:37:04 +0000
ROA not after:            Fri 15 Nov 2024 14:42:04 +0000
asID:                     139482
IP address blocks:        66.205.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Dec 2023 07:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:81:34:91:62:11:73:e5:0c:53:1d:f7:c2:54:52:d2:b3:b4:db:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
        Validity
            Not Before: Nov 17 14:37:04 2023 GMT
            Not After : Nov 15 14:42:04 2024 GMT
        Subject: CN=F9392C0E6AD035669B857F1249CF7E18F542C363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:d3:ff:ee:06:d0:0e:92:d8:06:98:32:a7:
                    77:89:b9:63:e7:fd:09:ea:be:21:8b:86:0b:55:c4:
                    44:60:c6:2c:e4:5c:7d:b7:5a:cb:16:83:02:af:0a:
                    20:86:ca:ac:0e:82:c4:54:e6:16:d3:64:bf:be:7a:
                    87:37:04:1e:d3:85:f4:ac:45:e1:aa:c2:79:2a:3f:
                    73:ac:37:8a:00:cc:62:ad:0b:9f:60:db:f8:05:11:
                    38:f9:1f:a5:97:c9:9c:ec:e0:73:35:9f:b8:05:e9:
                    19:1c:55:b0:91:15:25:c8:62:8b:95:5d:f3:33:5a:
                    13:55:72:fd:e2:79:22:67:9a:63:a6:44:4a:dc:7d:
                    22:ee:c4:8e:e2:19:aa:5d:90:fa:eb:be:c7:47:01:
                    47:ff:63:50:5c:83:73:32:80:ef:98:82:79:bc:61:
                    b3:1f:91:1f:dc:77:e3:45:6e:2f:5a:e0:26:85:88:
                    79:c8:2f:97:09:9b:f4:bf:9f:4d:df:99:e9:94:48:
                    73:7d:d9:63:17:92:cc:62:0a:83:9e:eb:19:33:60:
                    fb:8f:95:7c:f5:04:9e:76:53:9b:54:96:e7:0f:c8:
                    11:e0:ed:e0:92:48:fd:51:09:47:2f:8f:6e:d3:3d:
                    31:87:0b:f8:98:ac:5c:cd:07:e3:21:7b:df:d9:36:
                    a7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:2C:0E:6A:D0:35:66:9B:85:7F:12:49:CF:7E:18:F5:42:C3:63
            X509v3 Authority Key Identifier:
                keyid:8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e20313339343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:cb:ba:cb:1a:cf:1d:15:68:ca:2d:4a:d1:3a:ab:ae:8a:
         07:c1:77:d4:14:41:7b:63:2b:22:d0:09:d3:d2:b4:02:d7:ad:
         f7:b7:31:54:9c:6e:00:b7:1b:7d:c9:27:ea:54:9a:67:84:18:
         af:4e:e2:b7:93:14:a2:59:b9:7c:30:c2:2e:37:ca:51:6d:57:
         41:ff:02:ae:e0:f5:2f:f3:96:04:68:70:79:13:9f:3a:3f:3f:
         09:1b:1b:76:e3:ba:25:25:82:c2:61:ab:46:7c:bf:24:0e:09:
         f2:eb:4b:77:d1:0b:02:b8:b8:a5:99:c6:b8:da:fa:d3:4a:5a:
         22:08:55:e9:44:09:b6:cf:3d:39:8d:31:0f:d9:9e:23:f9:47:
         9e:af:43:63:97:79:83:ee:93:d0:0d:2d:e1:a2:d5:3c:b5:0f:
         a0:e2:0c:f3:e6:d1:02:73:19:8c:9c:b4:01:e0:f4:2f:dc:3b:
         a5:a5:d9:53:92:0f:ab:10:9b:e1:43:28:1a:15:a8:a6:a7:06:
         35:be:1f:b5:41:bf:cd:4a:9f:4f:d9:67:f0:b6:1a:9e:7b:e4:
         ed:bc:e2:d7:0d:7d:c0:12:92:f0:0a:82:a6:53:90:bb:8f:8d:
         06:04:b8:e1:6c:a4:c3:d8:0b:f5:9b:0c:49:8e:c4:e4:12:67:
         41:c9:03:b8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUd4E0kWIRc+UMUx33wlRS0rO023AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGFjNWY4MjFkNmU2YjFlYjdmYjA0YjEzNjU2YTQzOTgy
NjJjNThmYzBmMGQ2NmFmOTMwHhcNMjMxMTE3MTQzNzA0WhcNMjQxMTE1MTQ0MjA0
WjAzMTEwLwYDVQQDEyhGOTM5MkMwRTZBRDAzNTY2OUI4NTdGMTI0OUNGN0UxOEY1
NDJDMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn7T/+4G0A6S
2AaYMqd3iblj5/0J6r4hi4YLVcREYMYs5Fx9t1rLFoMCrwoghsqsDoLEVOYW02S/
vnqHNwQe04X0rEXhqsJ5Kj9zrDeKAMxirQufYNv4BRE4+R+ll8mc7OBzNZ+4BekZ
HFWwkRUlyGKLlV3zM1oTVXL94nkiZ5pjpkRK3H0i7sSO4hmqXZD6677HRwFH/2NQ
XINzMoDvmIJ5vGGzH5Ef3HfjRW4vWuAmhYh5yC+XCZv0v59N35nplEhzfdljF5LM
YgqDnusZM2D7j5V89QSedlObVJbnD8gR4O3gkkj9UQlHL49u0z0xhwv4mKxczQfj
IXvf2TanGwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFPk5LA5q0DVmm4V/EknPfhj1
QsNjMB8GA1UdIwQYMBaAFIqAHzFL7qgK1Zd8Qx8bHHc3Zu80MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGIxNTg4ZTYwMThiMTg3NjAwNGIwMWYxLzAv
OEE4MDFGMzE0QkVFQTgwQUQ1OTc3QzQzMUYxQjFDNzczNzY2RUYzNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzliZjYzZGQwLTdmY2YtNDAyOC05NjdhLWU0NzU5YzllZGYxZS8wYWM1
ZjgyMWQ2ZTZiMWViN2ZiMDRiMTM2NTZhNDM5ODI2MmM1OGZjMGYwZDY2YWY5My5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiMTU4OGU2MDE4YjE4
NzYwMDRiMDFmMS8wLzM2MzYyZTMyMzAzNTJlMzIzNDM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzM5MzQzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs32MA0GCSqGSIb3DQEB
CwUAA4IBAQAQ7Mu6yxrPHRVoyi1K0TqrrooHwXfUFEF7Yysi0AnT0rQC1633tzFU
nG4Atxt9ySfqVJpnhBivTuK3kxSiWbl8MMIuN8pRbVdB/wKu4PUv85YEaHB5E586
Pz8JGxt247olJYLCYatGfL8kDgny60t30QsCuLilmca42vrTSloiCFXpRAm2zz05
jTEP2Z4j+Ueer0Njl3mD7pPQDS3hotU8tQ+g4gzz5tECcxmMnLQB4PQv3DulpdlT
kg+rEJvhQygaFaimpwY1vh+1Qb/NSp9P2Wfwthqee+TtvOLXDX3AEpLwCoKmU5C7
j40GBLjhbKTD2Av1mwxJjsTkEmdByQO4
-----END CERTIFICATE-----