Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e203436343530.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e203436343530.roa (raw, json)
Hash identifier:          YT2miqXNVblZE7co+WRUe8OwoyiXERV7aNssbtHvrOw=
Subject key identifier:   B4:5E:F9:8E:5C:F8:90:99:EC:CF:5C:9E:9F:20:6D:16:0A:C0:E0:EF
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       0479E4895C73DCD45368A087D94780F11A04E4C0
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e203436343530.roa
Signing time:             Sun 21 Apr 2024 13:44:49 +0000
ROA not before:           Sun 21 Apr 2024 13:39:49 +0000
ROA not after:            Sun 20 Apr 2025 13:44:49 +0000
asID:                     46450
IP address blocks:        216.247.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 00:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:79:e4:89:5c:73:dc:d4:53:68:a0:87:d9:47:80:f1:1a:04:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 21 13:39:49 2024 GMT
            Not After : Apr 20 13:44:49 2025 GMT
        Subject: CN=B45EF98E5CF89099ECCF5C9E9F206D160AC0E0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:de:71:e2:ff:20:7b:99:bd:48:bd:55:b1:
                    9b:fe:75:b9:74:e6:b7:08:c8:22:ef:a9:72:08:a6:
                    49:7d:2f:3d:fc:c7:74:af:d8:b2:6d:df:12:57:47:
                    81:cc:5a:8e:9e:eb:9d:4f:c4:13:74:0f:46:66:cc:
                    a6:09:73:35:43:70:f5:31:93:6b:2b:7d:22:e8:5a:
                    e2:7d:88:32:f7:e0:73:cf:ac:7b:98:b1:f0:f8:73:
                    8d:b3:92:13:b0:71:e1:e4:2f:77:f4:cd:f9:e5:72:
                    b2:a6:f7:70:76:48:73:38:2f:87:03:48:d2:79:d8:
                    b2:94:a1:8d:ef:2f:14:8c:70:6f:07:e9:8e:b9:5e:
                    9c:41:fa:90:96:15:e6:62:f3:95:29:b6:9e:3d:8d:
                    7d:a8:ed:41:06:91:31:d0:2e:89:c9:1d:27:43:68:
                    dc:2a:d0:22:85:ed:3d:ef:1a:2f:45:5f:c1:3c:a1:
                    16:6e:2d:30:76:32:95:2c:68:d4:fd:d8:4a:b3:c0:
                    12:15:ff:4e:de:f6:f8:43:23:41:ef:fb:8a:bb:3f:
                    8a:f9:a9:e1:3d:f3:85:5e:48:b4:55:b7:b7:85:56:
                    09:5c:2f:cb:41:3d:2e:6d:ae:01:fb:a8:21:9d:a1:
                    ba:73:b0:c7:00:38:9e:0d:6e:ac:55:1b:54:2c:9b:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5E:F9:8E:5C:F8:90:99:EC:CF:5C:9E:9F:20:6D:16:0A:C0:E0:EF
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e203436343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:c8:1b:dd:00:51:e5:81:84:5e:47:b7:b6:80:7c:a3:da:
         79:e9:29:1c:e3:47:30:08:82:fd:1b:41:d0:f6:1f:e4:bd:91:
         33:41:1f:35:cf:53:a8:26:2e:39:a8:d7:8f:6c:de:15:f1:a1:
         04:68:28:3a:e2:ef:de:c3:0a:52:87:95:66:2a:76:0f:fb:ef:
         4f:7e:7c:72:76:70:72:6f:a9:4f:d2:2b:f5:6c:d8:64:bf:9b:
         7f:cb:23:8f:64:1c:a7:f8:5f:11:81:a2:cc:51:56:04:f5:03:
         22:74:37:ea:a4:58:66:bf:da:19:d6:45:fc:3b:cc:f3:ae:90:
         25:c1:64:f8:4a:8c:e3:80:85:e3:d0:06:5c:7b:32:b7:a3:87:
         28:82:14:ed:28:29:4e:c2:d2:9d:7d:12:fe:0f:fd:c4:cd:68:
         97:57:df:9a:38:f8:37:4d:94:4b:0d:fe:18:63:21:90:f5:ae:
         81:f3:36:91:80:14:4c:72:75:87:95:fb:bf:1e:da:ae:f5:c0:
         a4:0c:41:fa:d2:d8:12:08:a7:ff:69:1f:6f:a6:c0:e5:73:c6:
         00:b9:0c:02:d0:e0:94:58:e4:0b:db:a3:c6:fb:b4:b3:8f:05:
         8c:aa:da:e3:74:7e:31:5f:2f:d4:eb:e4:bc:68:25:2e:ba:a0:
         28:0a:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----