Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32322d3234203d3e2037393232.roa
File:                     3231362e3132322e3132302e302f32322d3234203d3e2037393232.roa (raw, json)
Hash identifier:          BHQx2SQTFk3zjddJgvLmbqyg39LWoCLvOprDbWS/pJY=
Subject key identifier:   B8:F9:BD:4F:D2:46:84:22:62:38:C4:BC:84:80:4C:C4:D1:0E:8F:28
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       384AEDB2526AEED8C0C8FB33BD24395B986656B3
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32322d3234203d3e2037393232.roa
Signing time:             Mon 13 May 2024 15:20:43 +0000
ROA not before:           Mon 13 May 2024 15:15:43 +0000
ROA not after:            Mon 12 May 2025 15:20:43 +0000
asID:                     7922
IP address blocks:        216.122.120.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 14:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4a:ed:b2:52:6a:ee:d8:c0:c8:fb:33:bd:24:39:5b:98:66:56:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 13 15:15:43 2024 GMT
            Not After : May 12 15:20:43 2025 GMT
        Subject: CN=B8F9BD4FD24684226238C4BC84804CC4D10E8F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:1a:5a:39:2f:1e:c1:03:a1:19:4d:49:a8:
                    f2:69:1a:fb:80:6d:c3:93:3f:f5:a3:63:a7:49:23:
                    88:59:40:ff:86:f4:64:8d:63:79:98:45:6e:f2:8e:
                    3f:e5:04:85:f5:b4:19:8e:28:bc:d5:21:3c:06:80:
                    89:b2:e6:d2:43:a0:d4:2d:3b:ad:27:e8:c0:e4:1f:
                    24:ef:9b:4a:d1:b2:6e:9e:95:6e:38:e1:93:a3:04:
                    07:41:d5:bf:ee:54:0e:2a:01:85:ff:0f:b8:ad:20:
                    04:c5:83:2d:03:1e:c8:28:8a:02:2e:e8:99:15:ed:
                    cd:06:68:a6:03:c8:24:93:2f:d9:d3:ac:f6:67:1b:
                    ba:32:7c:fb:67:54:a2:25:25:14:63:92:fc:30:9d:
                    03:af:ea:30:ad:a5:28:b7:1a:44:10:f2:24:e4:dc:
                    25:48:e6:f0:d9:e2:03:d2:35:3c:35:91:0b:e7:cd:
                    0d:d2:e1:4a:31:e6:38:d6:b4:e1:55:e9:db:c8:86:
                    d2:bc:01:5d:47:72:ed:8d:f1:69:3e:e3:c6:b5:70:
                    68:6e:16:2f:00:4f:d3:0c:f5:89:17:c9:31:ba:1d:
                    d0:a8:b7:65:97:ee:d9:50:cc:53:bc:5a:ee:11:30:
                    7d:e9:c6:3b:1b:e4:88:89:5a:90:6c:4b:32:fd:b5:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F9:BD:4F:D2:46:84:22:62:38:C4:BC:84:80:4C:C4:D1:0E:8F:28
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32322d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:04:3e:26:84:cd:52:2d:ef:f6:31:ae:25:0d:a0:82:d3:
         ee:63:2e:78:6f:ac:8f:ec:90:81:eb:c4:fe:b8:7e:3a:10:3a:
         6f:d1:dc:1c:5f:5c:8f:cf:49:ee:3d:2a:2e:d3:4a:9b:af:ab:
         9a:7d:ea:20:2e:d7:26:e8:8b:df:de:35:c2:99:95:67:73:f2:
         68:e7:00:53:cb:9b:b5:26:fc:90:12:85:21:2b:7a:a3:b9:61:
         95:35:40:6e:7b:fc:bf:c8:22:18:11:f0:8c:c6:05:eb:f9:a7:
         b3:65:66:d7:66:6e:93:d7:54:08:9e:26:5c:e3:58:e9:93:23:
         e4:ed:be:56:2c:b3:28:1b:4a:69:02:98:c7:a9:7b:55:7d:73:
         85:e7:86:4c:71:9a:21:a1:40:35:33:f9:cc:30:cc:fe:68:ae:
         a5:49:dd:77:49:d2:2d:51:53:b9:e7:f5:80:09:49:09:c8:ad:
         ab:c2:4d:ee:5c:54:8f:2e:d3:1f:03:f2:29:04:30:48:2d:aa:
         89:a2:82:90:6c:9d:1f:21:a2:ad:b0:16:04:3c:7f:79:ad:15:
         21:3a:7d:05:46:55:d0:85:cf:8a:75:aa:47:6d:47:77:ba:49:
         99:e8:1c:be:83:d6:5a:bf:63:3a:d8:19:2c:8c:6a:8f:17:44:
         0b:7d:09:9a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUOErtslJq7tjAyPszvSQ5W5hmVrMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjQwNTEzMTUxNTQzWhcNMjUwNTEyMTUyMDQz
WjAzMTEwLwYDVQQDEyhCOEY5QkQ0RkQyNDY4NDIyNjIzOEM0QkM4NDgwNENDNEQx
MEU4RjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjYaWjkvHsED
oRlNSajyaRr7gG3Dkz/1o2OnSSOIWUD/hvRkjWN5mEVu8o4/5QSF9bQZjii81SE8
BoCJsubSQ6DULTutJ+jA5B8k75tK0bJunpVuOOGTowQHQdW/7lQOKgGF/w+4rSAE
xYMtAx7IKIoCLuiZFe3NBmimA8gkky/Z06z2Zxu6Mnz7Z1SiJSUUY5L8MJ0Dr+ow
raUotxpEEPIk5NwlSObw2eID0jU8NZEL580N0uFKMeY41rThVenbyIbSvAFdR3Lt
jfFpPuPGtXBobhYvAE/TDPWJF8kxuh3QqLdll+7ZUMxTvFruETB96cY7G+SIiVqQ
bEsy/bVx1QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFLj5vU/SRoQiYjjEvISATMTR
Do8oMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzEzMjMyMmUzMTMyMzAyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzNzM5MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAth6eDANBgkqhkiG9w0BAQsF
AAOCAQEAKzwEPiaEzVIt7/YxriUNoILT7mMueG+sj+yQgevE/rh+OhA6b9HcHF9c
j89J7j0qLtNKm6+rmn3qIC7XJuiL3941wpmVZ3PyaOcAU8ubtSb8kBKFISt6o7lh
lTVAbnv8v8giGBHwjMYF6/mns2Vm12Zuk9dUCJ4mXONY6ZMj5O2+ViyzKBtKaQKY
x6l7VX1zheeGTHGaIaFANTP5zDDM/miupUndd0nSLVFTuef1gAlJCcitq8JN7lxU
jy7THwPyKQQwSC2qiaKCkGydHyGirbAWBDx/ea0VITp9BUZV0IXPinWqR21Hd7pJ
megcvoPWWr9jOtgZLIxqjxdEC30Jmg==
-----END CERTIFICATE-----