Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20383334.roa
File:                     3139322e37302e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          QkJtSGC3bE8YTEzDE0+iM8Ho7kxhLC0T5sBkxpmzNVA=
Subject key identifier:   97:BD:39:9A:FD:B4:15:CE:FE:EB:62:E5:CB:B3:74:BB:9A:87:16:AE
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       42254725DBED85545348365B5C9B385A77AFD2B9
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20383334.roa
Signing time:             Fri 14 Jun 2024 16:12:47 +0000
ROA not before:           Fri 14 Jun 2024 16:07:47 +0000
ROA not after:            Fri 13 Jun 2025 16:12:47 +0000
asID:                     834
IP address blocks:        192.70.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 14:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:47:25:db:ed:85:54:53:48:36:5b:5c:9b:38:5a:77:af:d2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 14 16:07:47 2024 GMT
            Not After : Jun 13 16:12:47 2025 GMT
        Subject: CN=97BD399AFDB415CEFEEB62E5CBB374BB9A8716AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:d3:32:a2:db:57:7b:68:44:a2:15:e2:10:
                    ed:3a:94:27:47:02:a7:2e:49:6b:0a:22:e5:bd:b5:
                    69:15:e5:3f:bf:80:3e:cd:5e:84:ef:c3:f3:5d:20:
                    60:a0:9f:98:14:1d:54:d4:9c:3c:97:6d:3f:bc:70:
                    59:15:fc:cb:70:28:bb:d6:01:12:60:1a:3b:fb:5f:
                    bf:66:21:aa:98:aa:71:a7:5a:0d:48:43:55:d6:0e:
                    82:ee:c9:2e:8b:9e:44:c4:6e:36:3d:42:04:78:dc:
                    b2:30:38:a6:c9:ed:33:12:f0:4c:4b:7a:0b:77:b1:
                    a1:6d:9e:91:85:f3:dc:93:64:0e:25:ef:2e:f1:a9:
                    b9:60:6f:fd:2c:2b:3e:b2:e7:d4:e7:6b:53:d7:3d:
                    82:9f:15:2d:51:a3:02:53:11:1f:54:04:66:36:38:
                    aa:5f:1b:2d:12:40:0e:6c:20:45:9b:f1:40:ff:fe:
                    49:3e:fe:14:76:85:01:67:c4:ec:43:36:5a:86:3d:
                    10:34:d9:c4:a8:d1:46:3a:96:d0:e6:f9:f1:4b:43:
                    fd:6a:7b:6e:9e:84:14:8f:42:69:fb:e8:33:46:9e:
                    3c:d8:41:5a:02:39:bb:71:c9:70:9a:c8:ed:b2:96:
                    b4:f0:35:14:ea:e6:ee:5a:3c:c5:3e:55:66:09:48:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:39:9A:FD:B4:15:CE:FE:EB:62:E5:CB:B3:74:BB:9A:87:16:AE
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:71:ff:1b:fd:2c:c8:8c:a4:5f:94:ab:4c:b3:e2:25:ab:
         0f:8e:0e:2d:35:f7:f4:1c:bd:36:de:0c:c7:3d:18:29:37:34:
         66:29:20:c5:ca:89:cc:80:5b:19:d9:bc:51:be:6f:79:37:5f:
         f3:b5:d7:3a:9a:46:33:85:ae:71:0c:c5:5e:a9:5c:97:44:32:
         58:f0:77:8b:47:d7:b9:da:12:85:03:11:80:87:24:ec:bb:bc:
         eb:09:e2:d0:9c:8a:f6:78:58:2b:16:cd:87:a5:26:e2:17:29:
         9b:fc:9c:fa:34:c4:91:b6:16:92:66:60:7a:66:6a:c5:11:3e:
         49:ec:d6:3e:23:91:e5:07:d7:6b:35:3d:15:5f:8a:16:d6:79:
         ab:72:9f:f2:00:f7:1e:25:0a:f9:68:47:82:9d:7b:31:75:8d:
         b2:94:05:a7:90:03:08:14:06:65:e9:50:fc:24:5a:0f:be:e3:
         07:62:c9:1e:b7:cd:81:41:a6:82:90:ee:52:24:83:0c:b4:c8:
         3c:11:2a:37:9b:db:03:0b:f7:69:3f:c4:35:25:d8:21:48:f6:
         a2:4b:4f:d9:3b:b9:7e:18:62:d2:00:90:70:d1:03:b6:1e:b4:
         c2:06:13:cc:6f:bf:37:1e:42:eb:5d:7d:e5:df:6a:13:67:8a:
         87:54:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----