Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa
File:                     3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa (raw, json)
Hash identifier:          9nGAQlu4E4JUG6HIeSQw4rs/sI9a5R+t4U2n0yObc+s=
Subject key identifier:   BE:7E:33:83:B3:47:6A:EA:D0:17:5D:98:F7:C0:A1:62:28:11:70:6E
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6A1D282A1AEF9CE881F50013CEBF301DDB4EDD5F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa
Signing time:             Mon 30 Oct 2023 12:03:54 +0000
ROA not before:           Mon 30 Oct 2023 11:58:54 +0000
ROA not after:            Mon 28 Oct 2024 12:03:54 +0000
asID:                     7018
IP address blocks:        216.247.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Dec 2023 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:28:2a:1a:ef:9c:e8:81:f5:00:13:ce:bf:30:1d:db:4e:dd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:54 2023 GMT
            Not After : Oct 28 12:03:54 2024 GMT
        Subject: CN=BE7E3383B3476AEAD0175D98F7C0A1622811706E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:20:57:ab:7e:68:38:5e:fb:44:73:38:63:
                    80:99:8a:62:41:b6:e1:d8:22:74:8c:bf:55:02:ba:
                    90:f2:4a:8b:ab:01:9f:98:43:5d:2a:04:9c:ef:26:
                    72:11:18:b3:11:c8:ff:06:c9:9c:0a:0b:f4:50:f9:
                    87:20:32:76:a6:90:4b:7e:46:74:4a:01:b2:62:b2:
                    b0:4f:77:18:b2:1c:6b:44:ff:02:29:5b:29:a3:1c:
                    59:97:54:c2:57:9c:42:58:7d:ff:c8:34:60:dd:5c:
                    69:a2:87:4d:ea:74:5c:6e:66:b7:c6:d4:1d:5e:4b:
                    bd:73:94:60:9f:6b:95:17:5e:ee:c4:69:5f:69:68:
                    2b:ba:d1:63:26:d3:4f:28:9f:5b:28:a7:d9:7b:cb:
                    45:e7:a3:94:32:fd:96:42:a1:8a:f0:3d:1f:17:8d:
                    0f:65:d4:b8:f7:38:76:38:d4:86:03:31:f8:4b:8a:
                    2b:1d:4e:d9:be:eb:d4:14:75:21:01:b1:f3:02:58:
                    12:ec:0f:c9:ca:62:9b:18:76:ab:b6:4b:c8:44:30:
                    54:4b:35:5f:79:c0:48:b6:37:89:00:c9:0b:42:07:
                    20:11:3e:27:c9:c0:85:4a:33:d1:f3:22:9a:ae:9a:
                    8d:bd:e9:b4:88:e0:7c:9f:ac:dd:fb:1d:e6:af:2b:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7E:33:83:B3:47:6A:EA:D0:17:5D:98:F7:C0:A1:62:28:11:70:6E
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:ca:7c:fe:51:b6:39:ec:34:8b:58:3b:c6:6f:df:b5:b5:9f:
         fc:1d:5b:f3:44:dd:5a:b9:24:d9:4d:c2:1f:1c:e4:2c:82:75:
         43:70:00:af:48:e0:04:31:38:12:75:88:a2:32:ba:ee:94:e2:
         2d:7a:84:e4:ee:9a:2c:1b:1b:c5:6d:a1:55:70:3d:b2:55:a1:
         20:59:db:9c:44:a2:dc:6f:0d:fb:56:ab:e2:02:f9:59:40:a5:
         4f:bc:c1:5f:b3:32:9b:9f:3a:a3:a7:4d:46:7c:11:c4:c6:a2:
         2c:5b:50:ed:2d:79:49:58:34:aa:82:42:da:79:88:28:0b:38:
         de:95:a9:a6:b3:f2:ee:ca:1d:32:a5:5d:f6:7a:29:1b:c3:27:
         fa:3a:41:84:11:4a:bb:07:9b:14:39:e9:64:6d:b8:b5:51:68:
         8b:fd:71:99:09:af:83:d8:40:cb:2b:15:ec:f3:2b:35:b6:bf:
         ea:63:71:5a:dd:d6:ec:65:91:a5:97:94:2e:df:07:87:7d:44:
         ca:3f:52:02:98:31:63:8d:83:59:08:95:00:84:f6:40:30:8d:
         28:22:61:6a:64:14:a5:01:76:c5:69:c7:47:55:48:d9:be:fa:
         df:de:a4:d1:f7:ed:fa:77:98:22:ba:74:be:1b:ca:07:98:79:
         b1:7a:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----