Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203231383539.roa
File:                     36342e3235332e39302e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          YxPW9lmwbQzAvxzXbYYKejdlje0KOzhc73kPfTQ9NpA=
Subject key identifier:   E7:87:CA:5E:CA:55:3B:15:34:9C:86:6D:67:1D:0C:91:7A:D8:B1:08
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       2E6F96B1E5C7C75876C6D6D935BED4B4FFAD5D3A
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203231383539.roa
Signing time:             Tue 03 Dec 2024 14:58:15 +0000
ROA not before:           Tue 03 Dec 2024 14:53:15 +0000
ROA not after:            Tue 02 Dec 2025 14:58:15 +0000
asID:                     21859
IP address blocks:        64.253.90.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 03 Jan 2025 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6f:96:b1:e5:c7:c7:58:76:c6:d6:d9:35:be:d4:b4:ff:ad:5d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec  3 14:53:15 2024 GMT
            Not After : Dec  2 14:58:15 2025 GMT
        Subject: CN=E787CA5ECA553B15349C866D671D0C917AD8B108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:73:2b:43:38:e3:5a:27:6e:bc:2d:72:5c:
                    6b:6d:7e:8c:16:f0:5c:8d:f5:08:4f:eb:28:3e:2b:
                    2c:1c:a5:74:81:15:2a:47:b0:15:b1:ae:d1:e1:a5:
                    53:2e:48:a7:53:82:c9:db:c4:d1:d7:0b:26:c3:3f:
                    70:7c:98:0f:3d:e2:e7:3d:80:cc:30:58:76:7a:01:
                    ae:e7:45:39:d4:81:84:e8:53:c8:78:58:2e:03:b6:
                    08:63:fe:9b:a1:55:ba:14:b6:50:e3:a7:71:46:2d:
                    f6:6b:43:a3:e0:76:04:94:0c:88:8b:70:fd:19:34:
                    65:5a:ed:4c:12:62:21:82:37:98:bd:31:72:8a:a8:
                    b2:df:39:da:52:0e:05:88:4a:f9:69:f9:24:49:fa:
                    a6:82:bb:6b:39:b3:5d:c1:01:c4:ae:3c:0d:c4:31:
                    f5:bc:3f:40:21:e7:41:5a:44:9f:3a:94:06:03:2f:
                    ca:b8:3b:33:76:de:b0:d5:d7:07:7c:15:9f:e7:ae:
                    31:d1:fc:84:a1:a8:68:30:2e:cc:e7:0e:d9:bb:c5:
                    dd:9f:6d:3d:52:e0:2f:47:0b:b4:7e:f5:57:2a:c6:
                    4e:30:08:2e:6e:79:93:fb:d7:35:cc:62:63:0f:b8:
                    9b:5b:21:e7:32:ba:30:fc:b7:a1:36:69:50:f9:c4:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:87:CA:5E:CA:55:3B:15:34:9C:86:6D:67:1D:0C:91:7A:D8:B1:08
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:a5:77:f9:c5:38:27:47:e8:47:16:5a:fd:2e:57:2e:78:
         26:0f:76:f4:92:e0:e9:7e:7e:d0:b9:bd:af:7b:43:a0:72:2d:
         3f:b7:57:54:64:67:b7:73:b3:d8:46:53:3f:0d:44:b7:2f:32:
         c5:fb:28:8c:19:18:2a:dd:54:4a:30:15:df:41:20:2e:83:b0:
         b2:19:cb:84:50:1c:82:c6:2b:73:b2:5b:39:1f:87:1c:92:f4:
         2c:9d:4f:3c:01:54:67:40:49:11:0a:8c:e6:9f:f5:5f:5c:bf:
         f4:c0:2b:fd:ae:c0:78:5a:db:23:89:6f:ad:a7:7e:26:b5:df:
         f6:48:05:b7:f1:6e:70:4a:09:2e:a1:fb:e8:dc:ca:35:5b:3f:
         62:87:51:40:22:ea:c1:99:0d:90:74:64:6c:b8:b2:bc:75:8f:
         c0:2b:e1:c0:06:76:30:b5:98:88:bc:64:85:e9:ea:ea:57:2b:
         88:ed:55:91:c4:62:1c:82:4c:03:2c:a5:69:fc:6b:ad:4a:f2:
         30:ba:7b:af:d3:b7:6b:8b:91:fe:15:59:21:44:d7:29:eb:14:
         25:c9:44:c9:45:f6:c4:7c:ed:db:c2:75:11:bd:14:9f:c6:a1:
         90:c7:3f:8f:49:d9:41:73:c7:c7:55:c6:93:49:e9:af:b7:2e:
         19:4a:09:72
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIULm+WseXHx1h2xtbZNb7UtP+tXTowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQxMjAzMTQ1MzE1WhcNMjUxMjAyMTQ1ODE1
WjAzMTEwLwYDVQQDEyhFNzg3Q0E1RUNBNTUzQjE1MzQ5Qzg2NkQ2NzFEMEM5MTdB
RDhCMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/RzK0M441on
brwtclxrbX6MFvBcjfUIT+soPissHKV0gRUqR7AVsa7R4aVTLkinU4LJ28TR1wsm
wz9wfJgPPeLnPYDMMFh2egGu50U51IGE6FPIeFguA7YIY/6boVW6FLZQ46dxRi32
a0Oj4HYElAyIi3D9GTRlWu1MEmIhgjeYvTFyiqiy3znaUg4FiEr5afkkSfqmgrtr
ObNdwQHErjwNxDH1vD9AIedBWkSfOpQGAy/KuDszdt6w1dcHfBWf564x0fyEoaho
MC7M5w7Zu8Xdn209UuAvRwu0fvVXKsZOMAgubnmT+9c1zGJjD7ibWyHnMrow/Leh
NmlQ+cTHhwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOeHyl7KVTsVNJyGbWcdDJF6
2LEIMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzQyZTMyMzUzMzJlMzkzMDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABA/VowDQYJKoZIhvcNAQELBQAD
ggEBAJ/2pXf5xTgnR+hHFlr9LlcueCYPdvSS4Ol+ftC5va97Q6ByLT+3V1RkZ7dz
s9hGUz8NRLcvMsX7KIwZGCrdVEowFd9BIC6DsLIZy4RQHILGK3OyWzkfhxyS9Cyd
TzwBVGdASREKjOaf9V9cv/TAK/2uwHha2yOJb62nfia13/ZIBbfxbnBKCS6h++jc
yjVbP2KHUUAi6sGZDZB0ZGy4srx1j8Ar4cAGdjC1mIi8ZIXp6upXK4jtVZHEYhyC
TAMspWn8a61K8jC6e6/Tt2uLkf4VWSFE1ynrFCXJRMlF9sR87dvCdRG9FJ/GoZDH
P49J2UFzx8dVxpNJ6a+3LhlKCXI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:57 2025 by rpki-client