Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          oG/JlSYMBGVrdbdWTBTsZ3cYyIXAkZU4YcTknklYzqQ=
Subject key identifier:   5A:7C:30:CD:57:2B:DC:3C:3C:4D:6D:3F:09:4A:1F:C5:FD:DD:9A:45
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       469D7F3F807CE181EE8C1D97C252094CDCD3DE3D
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 16 Oct 2023 11:30:05 +0000
ROA not before:           Mon 16 Oct 2023 11:25:05 +0000
ROA not after:            Mon 14 Oct 2024 11:30:05 +0000
asID:                     834
IP address blocks:        216.247.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 13:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9d:7f:3f:80:7c:e1:81:ee:8c:1d:97:c2:52:09:4c:dc:d3:de:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 16 11:25:05 2023 GMT
            Not After : Oct 14 11:30:05 2024 GMT
        Subject: CN=5A7C30CD572BDC3C3C4D6D3F094A1FC5FDDD9A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:0d:9f:7b:38:6d:84:0c:b3:bb:8a:ec:91:
                    b6:bb:ff:cf:a0:55:ee:d1:db:f9:9e:ed:19:72:b7:
                    da:96:c2:fc:06:37:e8:40:d8:a5:c4:78:22:97:51:
                    2d:ee:8d:7c:09:70:83:75:c2:ef:d1:77:38:90:4c:
                    a0:c8:5f:7d:76:6a:24:2a:b7:f7:79:89:96:20:94:
                    20:62:d7:05:aa:83:58:c3:15:1a:e1:62:34:2f:7a:
                    ee:86:16:6d:8b:7c:91:b2:7b:78:99:e4:b8:4b:ea:
                    2b:e3:14:1a:0c:e6:18:78:d2:79:d8:66:3d:0c:c7:
                    50:43:01:fd:40:59:9d:ad:99:82:28:46:b9:6c:1d:
                    60:29:7a:96:e1:02:40:43:ac:36:5c:6a:87:63:e2:
                    bb:d0:0c:3f:fb:b9:56:c9:61:26:98:34:76:6e:10:
                    6b:5b:a6:27:40:ce:a8:c5:fc:4e:54:5c:30:5d:6e:
                    d1:0e:3e:f7:fe:90:72:39:b3:ae:e4:50:bf:e2:1f:
                    11:cd:8b:98:34:3b:0a:4d:37:e1:ea:b4:5b:4d:11:
                    d5:0d:68:5f:76:3c:dd:e3:49:ad:ea:83:ac:59:1b:
                    c0:48:c3:cd:2b:f0:c4:f5:45:dc:e3:83:97:9d:96:
                    46:d6:d0:3f:3b:d1:4f:bc:90:65:4a:47:3e:9f:72:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:30:CD:57:2B:DC:3C:3C:4D:6D:3F:09:4A:1F:C5:FD:DD:9A:45
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:6e:b2:f3:32:aa:1c:4e:a9:a4:ee:90:71:62:e3:2b:f5:
         ba:79:7f:b8:a2:18:42:93:25:a6:c1:85:de:6e:5a:19:3e:3f:
         8c:88:80:ae:bf:67:08:70:0c:0f:5c:96:b0:d5:4f:4a:1d:0f:
         13:91:22:9d:19:c6:22:b1:b7:44:aa:06:c0:00:05:e6:26:d4:
         56:af:1b:1b:73:c6:c1:05:64:ae:bc:ef:b0:3f:26:a4:7c:4d:
         a9:f8:9a:c7:59:e4:7d:d5:bc:29:3e:4d:18:9d:7e:d6:f1:40:
         5e:dd:6e:ee:e9:7f:10:f9:80:fc:8d:5c:ab:8f:13:29:04:44:
         d0:17:89:80:e1:27:6c:5d:9d:e7:f9:70:71:da:1c:b3:d5:d4:
         a8:a8:1a:9b:3a:a2:a1:90:b9:31:ad:19:51:bd:93:1a:d0:d4:
         b3:8d:18:f9:03:91:f7:1f:6e:e2:c4:28:71:63:24:1d:cb:aa:
         6d:24:b8:4e:35:d7:7d:33:5e:ea:cd:67:e2:93:e5:a3:37:93:
         d1:9c:51:21:d6:98:2a:7d:6b:81:4a:39:22:6d:3d:90:70:ca:
         30:52:1f:44:13:85:6d:f7:a9:9a:b4:cc:e3:23:28:05:43:64:
         2f:f7:23:5e:55:1e:a7:02:88:28:66:26:22:48:f4:4b:bf:40:
         be:26:f2:d2
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIURp1/P4B84YHujB2XwlIJTNzT3j0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjMxMDE2MTEyNTA1WhcNMjQxMDE0MTEzMDA1
WjAzMTEwLwYDVQQDEyg1QTdDMzBDRDU3MkJEQzNDM0M0RDZEM0YwOTRBMUZDNUZE
REQ5QTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8kNn3s4bYQM
s7uK7JG2u//PoFXu0dv5nu0ZcrfalsL8BjfoQNilxHgil1Et7o18CXCDdcLv0Xc4
kEygyF99dmokKrf3eYmWIJQgYtcFqoNYwxUa4WI0L3ruhhZti3yRsnt4meS4S+or
4xQaDOYYeNJ52GY9DMdQQwH9QFmdrZmCKEa5bB1gKXqW4QJAQ6w2XGqHY+K70Aw/
+7lWyWEmmDR2bhBrW6YnQM6oxfxOVFwwXW7RDj73/pByObOu5FC/4h8RzYuYNDsK
TTfh6rRbTRHVDWhfdjzd40mt6oOsWRvASMPNK/DE9UXc44OXnZZG1tA/O9FPvJBl
Skc+n3I36wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFp8MM1XK9w8PE1tPwlKH8X9
3ZpFMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY92owDQYJKoZIhvcNAQELBQAD
ggEBAA2DbrLzMqocTqmk7pBxYuMr9bp5f7iiGEKTJabBhd5uWhk+P4yIgK6/Zwhw
DA9clrDVT0odDxORIp0ZxiKxt0SqBsAABeYm1FavGxtzxsEFZK6877A/JqR8Tan4
msdZ5H3VvCk+TRidftbxQF7dbu7pfxD5gPyNXKuPEykERNAXiYDhJ2xdnef5cHHa
HLPV1KioGps6oqGQuTGtGVG9kxrQ1LONGPkDkfcfbuLEKHFjJB3Lqm0kuE41130z
XurNZ+KT5aM3k9GcUSHWmCp9a4FKOSJtPZBwyjBSH0QThW33qZq0zOMjKAVDZC/3
I15VHqcCiChmJiJI9Eu/QL4m8tI=
-----END CERTIFICATE-----