Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e203432303535.roa
File:                     36362e3230352e3234362e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier:          Q9hcr6ZUA1+WVi3T6o1H7UrPflT/8K1/W0pUCAPDcWI=
Subject key identifier:   54:50:C1:AF:B2:42:EB:E5:4D:8B:06:73:39:C7:96:33:04:3C:D1:CF
Certificate issuer:       /CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
Certificate serial:       4E3A903B200D0DE01AADA30CD67B286E110AE2E1
Authority key identifier: 8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e203432303535.roa
Signing time:             Tue 10 Oct 2023 08:11:07 +0000
ROA not before:           Tue 10 Oct 2023 08:06:07 +0000
ROA not after:            Tue 08 Oct 2024 08:11:07 +0000
asID:                     42055
IP address blocks:        66.205.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 08:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3a:90:3b:20:0d:0d:e0:1a:ad:a3:0c:d6:7b:28:6e:11:0a:e2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
        Validity
            Not Before: Oct 10 08:06:07 2023 GMT
            Not After : Oct  8 08:11:07 2024 GMT
        Subject: CN=5450C1AFB242EBE54D8B067339C79633043CD1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:fc:f2:7b:e7:69:62:1d:0d:fb:96:87:ac:
                    41:c6:a1:ec:85:97:59:72:5f:f0:2e:43:4a:e1:cb:
                    e7:f1:f9:ec:e6:4d:4b:e5:b7:f2:13:22:79:e7:03:
                    17:e3:20:35:bb:ce:86:d8:bc:46:7f:56:e6:07:3e:
                    04:83:87:3a:31:a9:53:92:cb:d6:ce:46:ac:ca:7f:
                    84:5f:0a:27:de:64:f2:ac:9e:f4:e2:cf:32:d2:e6:
                    30:fe:a0:e3:30:35:fa:8e:a2:78:eb:50:8e:d9:a7:
                    d9:f2:11:2c:5a:54:0e:4c:f9:b8:37:89:e2:52:68:
                    d5:c8:0b:48:ed:2d:ff:a8:32:ae:90:a2:d4:44:58:
                    27:16:4a:4a:9b:12:55:71:d6:85:f9:77:d9:38:bf:
                    3a:02:45:a4:fc:17:35:da:4a:92:27:3d:90:14:cf:
                    48:0e:ce:9d:00:d0:35:bb:7e:3b:21:ff:ab:5c:fb:
                    57:06:2a:6d:04:da:e4:9b:42:74:5a:d5:a6:ec:47:
                    2e:7f:c0:27:9b:f8:2f:5e:36:44:02:d4:3d:56:c4:
                    4f:47:0b:32:c2:fd:99:e3:da:09:84:f5:5a:4f:1d:
                    e2:ae:86:52:69:81:f2:22:57:07:27:1d:8d:ed:53:
                    68:9e:7e:d4:81:ca:89:54:cd:ee:56:37:3f:ac:7e:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:50:C1:AF:B2:42:EB:E5:4D:8B:06:73:39:C7:96:33:04:3C:D1:CF
            X509v3 Authority Key Identifier:
                keyid:8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e203432303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:f9:d4:89:21:3c:32:25:72:98:6f:dd:f1:73:20:70:75:
         48:e3:87:47:c8:0a:83:3a:a5:05:2f:ef:d1:04:ad:74:0a:0d:
         6e:97:bc:91:75:eb:f6:42:80:92:33:1e:d3:5f:fb:bf:81:8c:
         3e:2e:00:35:c5:04:e1:6a:db:a5:ab:d4:56:e6:0f:a9:76:35:
         7b:c2:33:36:16:9c:dd:96:d4:1e:e9:03:d2:ea:05:e7:4c:8c:
         72:4b:33:b8:12:9e:93:bb:f8:f4:eb:40:b2:df:d2:62:1e:4d:
         d0:0d:9d:65:ef:f8:b7:fe:74:8c:58:34:88:7d:9e:ad:a9:a7:
         de:3f:12:01:39:ab:a2:1b:e8:21:f8:ed:7e:11:c6:3d:db:04:
         a1:09:72:d8:37:1e:76:83:2a:18:10:b7:17:54:7f:01:1f:5a:
         8a:9c:c2:d2:c1:59:8e:e1:28:e0:68:56:57:bb:ca:7e:90:54:
         c1:44:05:50:7d:c0:88:1e:f9:26:e3:f3:75:bf:9c:dc:c1:82:
         2b:8a:77:07:29:fa:9b:89:ca:2d:6e:18:09:1e:70:e4:74:71:
         d8:99:f8:13:81:77:98:38:4f:ab:79:93:fb:68:24:4a:2f:3f:
         4f:7c:6d:cd:0b:79:e5:b5:a1:49:1e:33:8d:2c:1f:b8:13:af:
         c7:c1:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----