Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3232203d3e20323132323338.roa
File:                     3231362e3234372e3130302e302f32322d3232203d3e20323132323338.roa (raw, json)
Hash identifier:          jCpH2lzpr/Rj7/cV2+O2eJUFWg7MTXYqfJY+s30UOUY=
Subject key identifier:   2E:F7:85:91:9F:CA:9C:1E:8A:E9:78:E1:E8:FF:04:C9:C7:0E:0E:39
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2265C6D10F930429BD1EB36514367FAC9CDEBE4F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3232203d3e20323132323338.roa
Signing time:             Fri 15 Dec 2023 09:02:05 +0000
ROA not before:           Fri 15 Dec 2023 08:57:05 +0000
ROA not after:            Fri 13 Dec 2024 09:02:05 +0000
asID:                     212238
IP address blocks:        216.247.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:65:c6:d1:0f:93:04:29:bd:1e:b3:65:14:36:7f:ac:9c:de:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Dec 15 08:57:05 2023 GMT
            Not After : Dec 13 09:02:05 2024 GMT
        Subject: CN=2EF785919FCA9C1E8AE978E1E8FF04C9C70E0E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:75:f7:32:59:98:09:be:51:da:a7:c9:26:
                    7a:48:42:54:75:b5:39:94:e9:1b:89:3a:ec:28:64:
                    53:41:b2:4d:77:dc:5f:55:1d:31:ba:b0:c1:a2:36:
                    56:e9:f3:d6:7e:07:35:cc:7c:37:b4:e6:cd:6a:61:
                    23:6b:48:bb:d6:0c:22:6b:62:f5:46:3b:af:d1:f2:
                    6a:45:4e:55:da:63:d8:cd:e7:5c:97:3f:63:83:fa:
                    d7:f7:44:f0:11:b4:0e:07:80:8a:bb:13:33:3b:90:
                    2e:6c:79:61:e0:a7:4e:a4:90:f2:34:40:fe:f1:50:
                    88:0f:cc:d7:0c:c8:c7:b2:98:be:11:c3:fe:f3:7f:
                    0f:db:c5:60:63:a7:af:3e:c0:31:5f:aa:e9:fb:5d:
                    05:49:6e:89:d4:1a:70:af:a5:18:c3:10:5a:2f:de:
                    cd:fc:07:a4:45:70:6c:4a:32:84:97:be:c4:21:a1:
                    68:d4:32:44:24:66:12:28:f7:b3:bc:43:50:b8:dd:
                    9b:ca:db:e8:5a:c2:8a:8d:e1:e4:44:a9:2c:2a:56:
                    af:64:1e:ab:0e:62:21:54:ed:14:2c:d6:50:20:e7:
                    bb:4c:a9:37:84:62:48:94:99:68:79:ca:66:10:89:
                    a8:d2:6d:97:49:3b:2d:8e:76:f4:b9:6a:33:c3:a7:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F7:85:91:9F:CA:9C:1E:8A:E9:78:E1:E8:FF:04:C9:C7:0E:0E:39
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3232203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:d0:72:b7:00:8a:b4:f3:4b:9d:28:e5:61:53:e7:64:dd:ca:
         2d:12:e6:8c:6e:f0:57:9b:da:56:d2:41:3b:ad:93:2c:b3:af:
         a3:51:b3:30:7f:1e:c2:0b:7e:75:83:0c:9f:a5:3a:d9:25:0e:
         8c:94:5f:d4:7b:dd:6c:1e:80:86:19:c3:0b:f9:e6:5f:83:6f:
         10:73:dd:23:f6:c3:39:94:da:85:c6:5d:f7:ce:4b:c4:fe:d3:
         a7:6d:f3:e5:d9:6b:5b:cc:5c:15:3b:58:4b:65:6f:07:fa:0d:
         2a:ca:79:92:6d:a5:d8:77:82:82:b7:85:a4:f1:04:95:90:99:
         f7:fe:aa:c0:0d:f4:06:93:4c:64:c2:38:ff:97:54:b8:cb:49:
         e2:32:de:ce:a0:00:11:3c:46:a5:63:58:a0:2a:5f:cb:95:f7:
         cb:e5:2b:68:08:b8:c3:7e:ab:3c:67:57:38:90:22:fe:3d:6c:
         a8:b0:7f:94:60:2c:dc:a2:53:9f:dd:f8:94:14:17:6a:f8:ad:
         55:e3:f5:bc:06:af:e3:bb:45:47:bc:1a:3e:0b:c6:a9:85:41:
         7b:85:03:b6:6f:9a:f7:14:a8:cd:39:b7:6e:ea:73:84:03:0c:
         51:83:a4:5f:ef:f4:c4:4c:72:c2:d6:de:4a:63:a8:9f:b3:e4:
         e4:45:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----