Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3234203d3e2037393232.roa
File:                     3231362e3132322e3132342e302f32322d3234203d3e2037393232.roa (raw, json)
Hash identifier:          i0ecPxBoA4Dqwvk0/8JwhShHqApZBseJUclE40hHqkg=
Subject key identifier:   81:51:22:6A:C6:1A:E8:60:E0:EF:EE:7F:7A:DA:2E:C7:03:B1:14:B3
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6FF476FA1EADEC94C05FC4A19AC097C48C1115A6
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3234203d3e2037393232.roa
Signing time:             Mon 13 May 2024 15:20:44 +0000
ROA not before:           Mon 13 May 2024 15:15:44 +0000
ROA not after:            Mon 12 May 2025 15:20:44 +0000
asID:                     7922
IP address blocks:        216.122.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 14:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f4:76:fa:1e:ad:ec:94:c0:5f:c4:a1:9a:c0:97:c4:8c:11:15:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 13 15:15:44 2024 GMT
            Not After : May 12 15:20:44 2025 GMT
        Subject: CN=8151226AC61AE860E0EFEE7F7ADA2EC703B114B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:c4:56:06:e4:d2:1d:39:a3:30:c5:ae:e0:
                    ff:10:7a:90:f0:c2:f3:7c:1e:f5:35:66:1c:1d:e5:
                    08:d5:e3:db:5b:41:29:42:5d:52:09:f7:68:dd:01:
                    4b:0e:d7:0a:9b:db:f3:75:f1:92:73:42:a2:51:94:
                    d0:46:11:be:84:11:e3:63:4b:de:00:ed:ba:50:61:
                    0d:98:ff:2b:88:fe:8b:83:21:8b:f6:dd:eb:f2:91:
                    9c:5c:c4:52:a4:7e:04:98:be:50:e5:64:19:fa:28:
                    cb:c3:ca:17:ac:37:57:d7:01:e9:e7:8a:73:08:72:
                    e3:e6:74:da:8c:53:cb:d5:a6:c2:09:5e:2b:58:28:
                    ba:a9:73:79:4f:32:e5:59:4e:f6:fe:c6:be:0b:41:
                    4f:f5:00:3e:c0:14:58:67:9e:e8:69:4f:d4:87:ba:
                    2d:69:1c:94:85:ab:bb:b1:bb:6e:1a:fc:ad:fc:5c:
                    02:a8:97:25:b8:57:c6:f6:61:f2:16:d4:dc:21:64:
                    e3:8f:37:c3:86:13:1c:a3:30:59:9a:a1:2c:7f:1a:
                    2e:21:13:00:ba:d4:fb:68:b2:8a:9f:ea:6b:5a:d5:
                    a3:3e:7f:f6:be:b2:23:5f:b3:7d:5c:0a:b9:95:18:
                    b1:73:77:d3:77:8e:f7:30:d9:89:1f:0a:6e:bc:98:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:51:22:6A:C6:1A:E8:60:E0:EF:EE:7F:7A:DA:2E:C7:03:B1:14:B3
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:7b:16:03:c9:23:2b:e6:11:cb:dc:2c:89:af:a7:53:dc:8e:
         36:3d:5a:12:5b:c0:6b:9f:8e:80:31:5c:71:4e:77:aa:c7:2a:
         df:84:30:d9:09:6b:75:ba:bb:4f:e2:1c:c5:4f:f1:22:c7:be:
         88:e7:22:83:48:6d:80:20:78:11:3a:c6:e5:d2:71:98:ce:ae:
         fe:ea:13:92:31:87:9b:71:08:81:ae:30:98:4a:11:83:a2:b2:
         35:40:6b:24:34:2a:4a:8b:e4:33:09:26:e1:1f:0a:3a:0f:33:
         dd:09:52:cc:b6:89:1e:42:28:51:67:2c:b9:92:d3:0f:9f:93:
         d1:02:bf:71:c8:77:1a:5b:6b:fe:b2:f1:5e:89:5e:fb:30:94:
         6e:39:65:72:9b:a4:b9:84:81:bc:4a:84:87:35:2d:4c:2c:97:
         34:73:94:f3:e2:bc:d7:72:af:a2:56:93:0a:01:cd:74:e8:93:
         45:76:d7:02:39:da:2c:c1:85:10:c5:57:5d:b1:60:2d:19:08:
         19:1b:e8:81:f1:a7:f7:b6:cd:ea:eb:72:a5:6a:c6:55:a1:d7:
         47:73:b9:b9:3f:09:7c:47:33:60:6b:40:4a:05:54:a5:0d:89:
         99:3b:dd:f7:7a:a9:80:71:87:ab:e5:32:2f:3a:c4:6d:f5:b9:
         80:25:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----