Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131322e302f32302d3234203d3e20383334.roa
File:                     3231362e3132322e3131322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          bp0r7gFwAHy1eBMySuVK+nC689/fZhPc0T/MPJIiUDk=
Subject key identifier:   57:20:60:5A:8D:42:E2:5D:F7:E9:01:9C:9F:0A:A5:EE:AF:81:08:D5
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       426C222BA3937AC1502F439DF3F599D49937FCB6
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131322e302f32302d3234203d3e20383334.roa
Signing time:             Mon 22 Apr 2024 00:00:25 +0000
ROA not before:           Sun 21 Apr 2024 23:55:25 +0000
ROA not after:            Mon 21 Apr 2025 00:00:25 +0000
asID:                     834
IP address blocks:        216.122.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 15:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:22:2b:a3:93:7a:c1:50:2f:43:9d:f3:f5:99:d4:99:37:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 21 23:55:25 2024 GMT
            Not After : Apr 21 00:00:25 2025 GMT
        Subject: CN=5720605A8D42E25DF7E9019C9F0AA5EEAF8108D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:a3:b2:c5:29:1f:01:7e:78:d5:f7:4e:e8:
                    61:a3:bb:a7:ff:ff:a2:b5:3c:2e:61:10:16:24:f2:
                    ea:e7:2a:e8:a5:a0:11:da:0a:ff:e1:0f:6d:f4:1a:
                    b0:f6:fc:26:00:b5:83:0d:f2:c6:2e:d3:a6:51:20:
                    be:92:23:53:94:19:bf:e5:97:bd:cf:dc:b5:77:75:
                    8b:58:ca:4b:b2:28:a3:12:30:ea:67:a7:f4:ac:51:
                    34:a5:1a:7d:65:7b:ae:dc:6c:4b:6b:59:b9:40:2e:
                    dc:48:22:70:19:ef:cc:2d:b6:69:f0:1e:72:13:cb:
                    a9:42:f3:6a:f3:4f:66:a4:d3:ab:2f:5c:2d:a0:77:
                    e2:00:f4:b4:f6:b7:2d:74:11:f5:04:b5:f7:8f:3c:
                    37:2b:3b:39:67:b6:a0:74:20:ed:68:51:77:fa:df:
                    aa:ca:69:1c:e6:38:b0:d5:ac:55:52:27:a1:b7:c4:
                    84:a3:e0:9b:a2:a1:b6:dd:c1:3d:82:dd:8c:ac:4d:
                    3b:34:2d:97:87:72:3f:fd:6f:3a:e3:73:68:01:65:
                    2d:e3:0a:aa:d1:ca:0b:74:b5:15:e6:44:b7:77:7f:
                    1a:3c:33:30:ad:50:62:1b:32:a7:ae:f9:52:c4:ea:
                    fa:be:d2:a3:11:18:b8:8a:f4:f9:e2:83:0d:97:f7:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:60:5A:8D:42:E2:5D:F7:E9:01:9C:9F:0A:A5:EE:AF:81:08:D5
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131322e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:08:f3:06:eb:66:c9:68:ee:ab:5c:44:96:7a:e9:a5:23:
         f7:9b:37:5d:69:00:f6:f2:3b:a7:29:f0:c2:aa:14:5e:10:3d:
         ec:5c:ec:f9:cd:0c:30:fa:7e:df:87:3d:42:b2:61:72:15:7f:
         7c:5d:da:05:c1:26:7c:a9:94:dd:75:63:64:aa:64:f7:15:40:
         77:28:54:be:aa:12:9f:d3:e9:21:49:b6:da:96:6c:cd:28:c8:
         a0:fb:88:3f:ec:08:4c:b3:d3:80:04:7d:5b:88:df:cf:65:cb:
         45:36:fe:ee:8b:9c:83:f5:53:67:03:05:83:56:5e:db:3c:ae:
         49:35:9f:2c:ac:ff:82:ab:32:a1:59:c3:ca:2e:c8:ca:8e:8a:
         45:e9:be:fc:81:7e:34:30:4f:5f:0c:23:04:46:64:ff:38:21:
         3c:a0:d3:ca:ea:a2:8b:8e:0b:16:a9:0e:29:9b:60:d8:70:9d:
         d9:38:08:13:e4:07:e6:71:8a:fc:8c:9c:dc:cc:fb:98:73:5b:
         0d:30:da:67:4e:6c:ac:6a:64:36:8d:91:53:f8:17:be:5a:45:
         0b:79:89:80:9a:7e:3b:d2:5d:3e:8f:ee:22:e5:30:7d:2e:95:
         2b:0d:25:5a:d3:d9:90:b3:59:40:b0:58:ab:b1:be:31:60:d9:
         ad:ca:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----