Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS996.roa
File:                     AS996.roa (raw, json)
Hash identifier:          bdZucfMwSx47PVzIAAn8WsWcqVzcQAaK2gxCq/aOH+Y=
Subject key identifier:   3F:EE:9D:F2:80:72:0B:50:24:B5:AF:37:6A:23:FE:D2:54:92:A3:56
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7B5986623701BBDB2DF21E5B5ABBEF02F93DD079
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS996.roa
Signing time:             Fri 15 Nov 2024 18:38:32 +0000
ROA not before:           Fri 15 Nov 2024 18:33:32 +0000
ROA not after:            Fri 14 Nov 2025 18:38:32 +0000
asID:                     996
IP address blocks:        66.225.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 15:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:59:86:62:37:01:bb:db:2d:f2:1e:5b:5a:bb:ef:02:f9:3d:d0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:32 2024 GMT
            Not After : Nov 14 18:38:32 2025 GMT
        Subject: CN=3FEE9DF280720B5024B5AF376A23FED25492A356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:ad:9f:11:90:e5:a5:be:b8:2d:b6:48:d6:
                    40:4e:56:f2:77:db:f0:ce:46:36:7f:91:c0:e6:c7:
                    2b:7f:e6:31:87:9a:92:26:8c:f0:a4:8b:84:be:f3:
                    b9:24:ea:65:ee:b7:41:3e:05:b1:ff:d8:31:86:a5:
                    8b:94:75:e9:91:37:9d:96:63:97:da:12:9f:ca:68:
                    f8:7f:ad:ce:cd:d1:6f:9d:d8:da:c2:37:d8:9b:69:
                    18:db:74:ea:06:33:9a:3a:89:fd:f0:67:c6:c1:5d:
                    de:b7:16:7d:54:ea:4c:94:c0:b6:6d:0d:57:58:d6:
                    5e:c0:c2:e4:10:c7:e2:77:98:e9:16:a7:37:18:8d:
                    a1:47:d0:c2:f0:66:63:5e:ca:89:06:b5:44:1e:cb:
                    72:03:ab:78:95:84:bd:9b:84:f7:7e:8b:15:9f:57:
                    0a:51:db:c5:6d:02:59:b3:a3:8a:0b:83:24:92:49:
                    98:e4:ba:c4:8a:19:f8:2c:3b:c3:5e:77:ef:48:0c:
                    4d:b9:2f:35:6d:53:9d:c0:01:2b:25:f7:46:25:a6:
                    2d:7d:94:a9:95:73:eb:b0:8e:42:9a:b7:61:67:9c:
                    60:1f:33:fc:e5:ca:d8:65:21:5e:d5:5a:81:6d:0b:
                    48:bb:2e:a1:c5:ae:96:3f:44:2f:a9:bf:60:3c:4f:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EE:9D:F2:80:72:0B:50:24:B5:AF:37:6A:23:FE:D2:54:92:A3:56
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5e:2e:73:df:3a:b3:11:b1:de:ed:1e:9b:78:36:2a:46:02:
         aa:c0:38:54:b6:7e:d0:86:12:7c:a6:17:a6:01:8a:33:eb:40:
         ff:76:ab:4d:8b:69:6f:f7:fc:ae:63:d6:49:0c:83:1b:92:49:
         ef:cb:b2:53:8d:4e:7a:32:41:0e:b8:41:5d:7d:e6:de:06:c2:
         2f:ce:1d:a3:83:93:fb:6c:5f:34:ed:51:cd:38:04:59:50:fe:
         ca:6c:48:af:37:10:55:15:64:ec:c4:5b:b6:29:2b:4c:05:c5:
         4b:ba:f0:69:b0:0e:1c:0e:3a:16:71:02:ce:a4:87:85:50:1e:
         18:23:6f:61:3f:61:94:e0:71:01:88:34:62:54:0e:f1:e3:b3:
         ea:79:60:2c:10:ed:b1:59:dd:95:be:07:b7:73:92:82:d4:03:
         60:f5:a2:ea:a6:bc:cc:09:97:0d:82:70:d8:54:65:ea:b6:ef:
         8a:9f:f6:11:88:32:2d:c9:2b:cc:3a:d6:5f:30:4f:44:46:de:
         dd:a4:e8:68:c9:25:da:bb:d4:df:95:6a:84:d6:be:5c:a8:3e:
         5d:d1:fb:98:5b:73:f6:55:ee:f8:82:dd:4b:61:b0:d0:fb:eb:
         b6:84:b3:7b:0b:4a:19:5d:5b:25:f6:88:54:48:67:f1:1f:89:
         28:ec:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----