Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233342e302f32342d3234203d3e20313337323335.roa
File:                     36392e3136362e3233342e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier:          293J6sILlAgjhxLwuq7EHlZ/qtNi6ugCkqGmyei9yD4=
Subject key identifier:   5E:37:9D:0F:5D:45:0A:B0:1B:CC:F5:38:B7:EC:15:17:8B:CF:61:C5
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       37970456922B63C069F3861FAFCC508DA4A48B9E
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233342e302f32342d3234203d3e20313337323335.roa
Signing time:             Thu 26 Dec 2024 02:24:37 +0000
ROA not before:           Thu 26 Dec 2024 02:19:37 +0000
ROA not after:            Thu 25 Dec 2025 02:24:37 +0000
asID:                     137235
IP address blocks:        69.166.234.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Feb 2025 13:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:97:04:56:92:2b:63:c0:69:f3:86:1f:af:cc:50:8d:a4:a4:8b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 26 02:19:37 2024 GMT
            Not After : Dec 25 02:24:37 2025 GMT
        Subject: CN=5E379D0F5D450AB01BCCF538B7EC15178BCF61C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:64:ba:97:fa:0b:bc:2a:4a:de:03:dd:c5:
                    0f:e5:39:4f:df:3e:2e:a5:20:f1:8a:1e:0e:52:dd:
                    33:19:2c:54:0a:2f:f5:03:ad:d0:83:54:80:19:2f:
                    d7:3c:23:58:7d:27:cf:e6:45:44:34:c5:a5:cb:10:
                    2a:c3:f2:be:4e:02:c3:37:fd:8c:3f:f0:c1:0b:78:
                    51:34:fc:d8:bb:fa:fb:69:e1:3c:de:de:92:88:11:
                    5c:51:64:12:9e:90:a7:73:ec:f3:ef:19:46:82:ab:
                    a3:d4:91:87:a0:79:d9:13:bc:6b:78:5d:20:ab:82:
                    93:d2:2b:d3:a0:7d:bb:e0:ff:16:f9:cb:cf:80:90:
                    8e:ac:eb:92:da:c9:18:61:c2:da:b8:06:02:3f:71:
                    bb:80:09:1c:d7:40:fd:eb:50:f8:28:70:7c:e6:3b:
                    e6:aa:0e:f6:8b:55:7d:ed:db:f1:b1:5c:02:1a:be:
                    58:41:a8:fe:54:6a:dc:09:60:f1:be:2c:2a:c2:a4:
                    8e:ab:54:b5:b7:a4:f1:30:bd:df:b2:a3:3a:74:8c:
                    f3:6c:92:06:02:d7:5c:b9:42:3d:ee:87:b6:4c:c3:
                    a8:eb:61:64:9e:ff:e6:83:4a:9e:bd:bb:80:01:67:
                    a0:8d:86:c2:89:8e:bd:8f:53:cb:1f:0b:0f:de:52:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:37:9D:0F:5D:45:0A:B0:1B:CC:F5:38:B7:EC:15:17:8B:CF:61:C5
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233342e302f32342d3234203d3e20313337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ef:88:67:46:18:df:c5:6c:e8:40:d5:ce:32:86:65:0a:2a:
         44:65:63:22:72:18:e4:b1:8c:d1:4c:a1:c5:57:f6:48:b0:20:
         fd:0d:29:b7:61:0a:6a:c6:3e:08:cf:43:f5:80:98:24:bd:4a:
         56:83:40:cc:09:d5:6d:65:02:67:40:07:f6:a0:f1:92:fd:6d:
         33:1b:1a:a6:c3:25:fd:62:74:82:b6:f2:69:47:de:ad:8d:a6:
         8c:54:e6:5c:66:d1:35:20:f8:8b:de:c2:70:f8:6c:c5:b9:d5:
         c8:cb:9d:39:8b:b2:52:2f:fd:36:94:cc:bf:b6:cc:6f:a6:61:
         e3:26:10:22:ad:04:07:68:fb:ed:57:17:30:4d:7d:48:a8:1f:
         15:14:60:33:1c:9a:a8:13:96:7a:69:bc:5f:55:ac:9e:c4:59:
         82:06:e7:8f:f7:18:f9:82:ef:40:e4:8a:15:dc:05:5c:d6:7c:
         40:e4:ee:14:ef:81:51:a1:b0:f3:8b:80:39:ee:e4:20:b5:08:
         c8:17:68:72:5b:37:6c:a2:0f:ef:b3:0c:1b:bf:8d:c7:0c:ce:
         89:5d:96:0f:f9:fd:c2:34:ab:dd:e8:d2:56:c4:4b:5a:37:95:
         44:9f:94:67:a3:32:02:95:29:eb:ed:7c:a1:8f:8e:67:77:16:
         9c:ba:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:53:05 2025 by rpki-client