Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e203631333137.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          tb0Yq7TTfoho8rlqWUq+AYeKoRRV94m5cIU4JDdNQB0=
Subject key identifier:   9F:8F:A9:7E:56:55:C0:07:43:E6:F0:FD:F0:8C:2F:B3:4A:48:EC:34
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       3AC4964F2D22DDFBF1AA3BD936688F255D093975
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 12 Dec 2023 19:01:11 +0000
ROA not before:           Tue 12 Dec 2023 18:56:11 +0000
ROA not after:            Tue 10 Dec 2024 19:01:11 +0000
asID:                     61317
IP address blocks:        216.247.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 10:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c4:96:4f:2d:22:dd:fb:f1:aa:3b:d9:36:68:8f:25:5d:09:39:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Dec 12 18:56:11 2023 GMT
            Not After : Dec 10 19:01:11 2024 GMT
        Subject: CN=9F8FA97E5655C00743E6F0FDF08C2FB34A48EC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:e1:27:a7:66:1c:5a:e0:3a:e9:c9:90:98:
                    2f:d1:8c:cb:e5:3f:db:c9:b6:56:49:f3:4b:4f:da:
                    74:27:9c:6e:ee:40:e9:09:9a:c6:51:5a:09:b1:5b:
                    c8:00:68:26:48:01:4b:0f:82:aa:65:ce:18:b7:28:
                    4a:3f:4c:23:97:2d:c3:23:23:19:95:05:0d:5c:8f:
                    82:2e:50:b2:f6:c1:0e:e7:84:77:ef:de:33:92:0c:
                    9e:92:4c:cb:f3:4e:82:c9:b2:c8:07:0b:2a:84:29:
                    6c:f4:59:23:15:89:a6:af:3e:0d:5c:20:ac:f4:ab:
                    9a:d6:a4:e5:55:1a:44:48:29:96:7f:41:93:d4:32:
                    ec:f9:a7:74:e5:e1:85:47:0d:8f:72:a9:59:03:f2:
                    02:b0:84:11:a8:7b:06:69:03:a1:03:8e:8a:46:4b:
                    0d:ef:d3:2c:c9:ef:5f:26:f6:32:81:12:9e:ed:2f:
                    3b:04:71:98:f0:26:70:c2:ad:e7:6f:80:6c:a6:f6:
                    b0:4a:2a:4b:38:33:0c:45:79:38:e9:33:0e:8b:f4:
                    0b:32:4a:b8:af:9b:cd:bc:e8:94:2b:ca:34:dc:01:
                    04:bb:af:ad:7a:7b:e8:16:7e:00:ba:16:66:99:75:
                    76:eb:98:6c:25:6b:24:8e:79:93:4c:6f:aa:3f:a9:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:A9:7E:56:55:C0:07:43:E6:F0:FD:F0:8C:2F:B3:4A:48:EC:34
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f6:74:e7:28:0c:b9:36:81:64:78:55:d7:61:42:b7:15:27:
         b2:b9:4b:42:16:74:57:12:03:dc:fe:e2:aa:8d:c9:30:7f:e6:
         8b:36:94:cf:78:8f:60:0e:50:94:50:59:84:29:1e:ae:dc:39:
         c9:50:2b:b4:eb:80:6e:67:f6:8e:28:54:4a:40:ad:12:e5:17:
         98:0a:d1:a2:64:9d:f9:6b:97:1c:ba:12:eb:8d:40:40:c3:cf:
         64:0a:4d:ed:c2:66:31:76:d5:06:80:0d:4f:35:08:26:28:d8:
         ab:f0:35:87:ce:1b:01:79:70:2a:91:9d:eb:ee:74:3d:25:10:
         66:15:ff:a6:f5:ad:14:00:8c:71:f9:b4:99:4b:54:71:b6:f8:
         1a:ff:75:5b:36:5b:f5:08:a6:48:57:28:38:d4:ac:55:d9:f2:
         4a:47:cb:be:ba:c7:ae:dc:06:35:9d:02:d9:d9:fd:0c:6f:91:
         bd:11:76:d6:77:9f:11:d2:0c:8c:7c:ab:b8:51:4a:1f:2d:8d:
         3f:c4:ff:fe:ad:36:e3:8b:2a:32:4b:29:a2:0e:a1:7b:96:6b:
         64:26:9b:1c:aa:4f:82:c7:b4:b2:80:8e:e8:22:14:46:98:f3:
         59:d3:30:e4:6e:37:f0:77:3b:73:b0:17:00:aa:26:ef:76:29:
         cf:5e:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----