Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e2033323830.roa
File:                     3137322e38322e38392e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          8JoCEdm6pXOUhdb4pi6ektvn9iqtFPr1qME6+v7SpQA=
Subject key identifier:   83:21:27:E5:19:51:CD:05:45:D9:EA:BC:D5:D9:4D:AA:16:FD:C4:99
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       2A4B0DB6DF951F20EFBC665272D7502531CC07BF
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e2033323830.roa
Signing time:             Fri 19 Apr 2024 21:16:21 +0000
ROA not before:           Fri 19 Apr 2024 21:11:21 +0000
ROA not after:            Fri 18 Apr 2025 21:16:21 +0000
asID:                     3280
IP address blocks:        172.82.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 19:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:0d:b6:df:95:1f:20:ef:bc:66:52:72:d7:50:25:31:cc:07:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr 19 21:11:21 2024 GMT
            Not After : Apr 18 21:16:21 2025 GMT
        Subject: CN=832127E51951CD0545D9EABCD5D94DAA16FDC499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:5a:df:d8:b3:a2:ea:03:b2:4d:e4:c9:b0:
                    97:ed:ef:4b:af:8c:7b:d3:77:c3:ab:3a:2a:82:7d:
                    01:38:43:90:f0:3e:e6:5a:90:4d:c2:7d:7b:e0:3f:
                    67:a3:40:85:ce:02:a9:f4:47:78:9a:b7:5c:01:5d:
                    3b:96:53:af:e3:d0:50:81:34:f2:e5:1f:db:cb:e7:
                    65:df:6a:8e:c7:01:76:c4:f3:b3:5a:7f:7e:71:94:
                    e6:20:e4:24:63:4d:89:f7:08:5b:df:19:3f:b0:33:
                    9c:78:57:c5:aa:56:07:c5:ca:3a:e0:68:65:03:08:
                    e6:5a:da:d1:f4:4e:02:57:57:40:22:c8:d0:27:9b:
                    bf:3c:e4:75:ec:48:ac:3b:66:6b:fb:8f:b1:3c:81:
                    73:fe:e8:46:ab:72:67:8a:07:11:86:96:ee:36:50:
                    6f:12:67:b3:7b:99:6f:cd:bf:ec:66:c1:b3:7d:93:
                    19:f0:47:e9:7e:81:c8:aa:e1:fd:f4:06:cb:8d:a5:
                    8d:b3:62:34:4c:97:37:e3:80:75:ba:0a:45:7b:2f:
                    80:e5:83:4a:83:f8:c0:5c:b1:a8:cf:f2:05:6f:2b:
                    f3:b0:40:21:3f:b5:32:68:3b:1f:14:e7:65:3c:3e:
                    b1:ba:62:21:e0:0d:84:80:28:01:d3:13:c7:48:16:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:21:27:E5:19:51:CD:05:45:D9:EA:BC:D5:D9:4D:AA:16:FD:C4:99
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:96:e3:ca:c1:39:ac:29:cc:d8:42:45:ae:d4:12:b6:80:
         06:1e:a8:f1:a0:8b:fc:ee:7e:a1:4a:54:b0:7c:13:c4:8a:ab:
         9c:00:20:42:2b:b8:e3:9f:27:f1:a8:2b:9e:2a:fd:5b:1c:b5:
         7d:75:c2:48:b7:c3:45:7a:77:d4:75:56:bb:cf:fc:67:ce:b0:
         ce:8d:3c:21:3d:96:c8:68:ed:75:50:52:24:18:1c:e8:b5:26:
         17:36:34:34:98:16:b5:7a:2c:bc:bc:09:80:42:07:1c:d3:f3:
         79:86:6b:59:4f:91:2d:02:59:ca:ad:e9:3a:0c:ad:0b:b3:d2:
         e1:05:34:ce:29:cb:3d:ef:fc:ed:9b:33:0c:fd:40:4a:44:39:
         2b:fe:9c:fb:8c:a2:f2:97:19:d5:22:89:ac:26:79:49:90:19:
         9f:e5:d3:52:e3:cd:63:cc:c2:d8:8d:be:8f:ae:0f:f3:bc:b0:
         0d:5a:9e:40:0d:4b:66:19:3e:d6:cd:78:00:32:86:a2:d6:52:
         7b:bb:2f:b3:d5:30:00:5d:e5:30:b5:d4:1c:a3:de:dd:29:3a:
         9b:0c:04:58:5e:66:f9:a1:bc:4e:50:5a:73:94:a9:c1:00:c6:
         84:55:8d:d6:4f:d1:73:d2:96:73:c1:85:32:31:1b:71:83:79:
         22:01:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----