Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e20383334.roa
File:                     36362e3230352e3234362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          wtHPM2M/xt7vad/+UJVeg7iPs1wXA7YKtr1goBcUzX4=
Subject key identifier:   E8:2A:E7:F7:75:C1:71:0F:AC:D6:99:2E:4D:78:30:9D:C3:6B:F0:FF
Certificate issuer:       /CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
Certificate serial:       413CFCB277199F98D10B1036393B17CE14133519
Authority key identifier: 8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e20383334.roa
Signing time:             Fri 07 Jun 2024 10:07:27 +0000
ROA not before:           Fri 07 Jun 2024 10:02:27 +0000
ROA not after:            Fri 06 Jun 2025 10:07:27 +0000
asID:                     834
IP address blocks:        66.205.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 10:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3c:fc:b2:77:19:9f:98:d1:0b:10:36:39:3b:17:ce:14:13:35:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
        Validity
            Not Before: Jun  7 10:02:27 2024 GMT
            Not After : Jun  6 10:07:27 2025 GMT
        Subject: CN=E82AE7F775C1710FACD6992E4D78309DC36BF0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:3e:7a:53:9a:d1:f8:b2:8a:86:7b:9f:d0:
                    a0:e9:e2:5d:50:35:d7:ef:67:a8:63:b2:91:7a:72:
                    a0:8b:07:87:84:85:93:74:0b:83:39:b0:b4:85:b0:
                    0a:58:59:24:58:c4:7b:22:10:6b:3d:ee:32:2a:8a:
                    3e:a8:c1:fb:d8:af:e5:90:24:73:b0:25:08:dd:11:
                    61:46:05:81:d5:12:58:3c:60:b0:6a:cf:1e:48:df:
                    a0:8c:0a:3d:09:06:17:86:e1:22:5b:57:be:8f:4e:
                    64:57:94:94:5a:84:02:63:37:80:c4:31:cb:27:65:
                    dc:75:fa:db:a5:dd:88:cf:1f:ab:6a:bb:35:b9:39:
                    fa:5c:5a:43:84:bd:28:39:11:e3:c3:ac:3f:3e:ee:
                    61:9e:3b:3a:b5:aa:40:3f:33:1c:07:42:5f:1e:6d:
                    15:17:30:01:2f:a5:2e:36:8f:53:f4:0c:39:17:73:
                    6c:ee:24:f6:5e:4f:54:d0:5a:58:f5:94:cd:14:46:
                    03:ec:21:b5:5f:bf:6d:d7:24:62:23:29:0c:dd:d9:
                    12:0d:0c:d4:ac:fe:c5:6a:c5:bd:0e:57:b3:32:07:
                    f1:ad:de:e2:3b:7a:d5:05:f2:c3:46:72:86:f8:cf:
                    88:dc:b6:4a:88:af:5c:51:23:4c:83:ae:7e:c8:6a:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2A:E7:F7:75:C1:71:0F:AC:D6:99:2E:4D:78:30:9D:C3:6B:F0:FF
            X509v3 Authority Key Identifier:
                keyid:8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:db:2b:16:fc:bb:9f:2b:c6:54:9f:fe:b8:4d:b5:7d:ef:
         83:26:77:38:a7:aa:84:ac:f7:be:98:cf:aa:dc:f3:b8:f5:6b:
         5b:04:3e:3e:93:b1:b2:02:13:9b:2d:03:e6:b7:68:c5:7f:6e:
         4f:e5:7d:e2:43:32:a9:bd:25:c6:4d:03:6e:3b:dd:29:51:78:
         47:a0:df:a0:a3:76:4a:dd:53:ac:5e:ca:44:a6:eb:50:d1:a1:
         b4:f0:63:38:69:9c:10:18:1e:48:9b:e7:8a:cb:f2:98:d7:23:
         65:da:38:79:ae:af:f7:96:bf:7a:8c:23:5f:c6:b8:49:e8:e4:
         4d:f6:1c:ae:99:32:51:ca:82:1f:83:f5:a9:ff:96:c8:62:a6:
         eb:ba:78:95:60:0f:9c:8c:d8:00:08:c6:27:ed:dc:a1:28:85:
         6e:54:cb:98:3d:39:f9:47:f5:72:ff:73:da:08:95:35:0d:f0:
         c8:ed:b6:e2:4a:fa:8e:34:0c:53:a4:c8:bc:24:cc:6f:94:a8:
         b7:a2:f3:05:9c:e2:86:41:8f:d1:85:38:bc:77:e9:89:30:5c:
         ba:29:35:9b:6c:31:bc:bd:e0:36:be:2a:11:82:9b:ac:b3:f6:
         52:ef:72:f4:65:d2:e7:c7:13:42:4f:63:3a:15:5e:79:33:41:
         dd:bb:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 13:50:38 2024 by rpki-client on console-ams.rpki-client.org