Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          uowfo1wyz5tZSAoY8J4m2nOrd46Rnnw0guRsF5ErmmU=
Subject key identifier:   F6:FB:91:A3:78:5F:89:AF:83:5C:6F:D8:4B:98:82:6A:B9:0E:45:B9
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1C1F11DBC520243889523FDFA4596C8A8440E9AA
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20383334.roa
Signing time:             Fri 21 Jun 2024 00:01:09 +0000
ROA not before:           Thu 20 Jun 2024 23:56:09 +0000
ROA not after:            Fri 20 Jun 2025 00:01:09 +0000
asID:                     834
IP address blocks:        216.247.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 13:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1f:11:db:c5:20:24:38:89:52:3f:df:a4:59:6c:8a:84:40:e9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 20 23:56:09 2024 GMT
            Not After : Jun 20 00:01:09 2025 GMT
        Subject: CN=F6FB91A3785F89AF835C6FD84B98826AB90E45B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:bd:cf:b7:19:b4:da:1a:0b:3a:ed:14:38:
                    b9:8b:8e:9a:93:7f:20:f4:19:08:dc:8a:96:da:c4:
                    35:ac:8d:a4:73:17:b4:d6:88:e0:f1:5e:cd:a6:61:
                    31:9c:44:63:df:b9:84:d0:1e:3e:2f:5c:b0:a0:3f:
                    5a:43:e9:a1:f7:4e:4e:45:68:6a:7b:8a:32:51:b3:
                    fd:53:9d:cc:07:be:61:e3:d4:c0:c1:b8:1d:d9:3a:
                    bf:04:09:af:83:65:4d:13:d7:a7:94:19:54:4e:88:
                    7b:e4:7a:31:b9:1e:85:77:f3:a8:e0:11:1e:c4:8e:
                    f2:8f:c2:2a:f4:ec:1f:94:b6:93:ae:32:98:10:ef:
                    1d:72:76:c6:e6:07:55:19:60:6e:ba:56:45:2a:ec:
                    b4:8b:46:7b:64:e8:c2:b3:8d:eb:c1:41:3d:8c:20:
                    ad:df:7a:ef:05:c7:0b:2f:89:ff:34:3c:cd:0f:25:
                    91:c3:c8:f3:58:0f:2d:81:68:32:94:52:94:c1:c0:
                    b0:1a:77:b0:a5:a7:76:b0:ef:9b:dd:0d:af:56:8e:
                    3a:33:3b:17:97:e4:ca:89:0a:e8:f7:46:8d:2f:38:
                    c9:7f:15:37:3d:f6:7e:c5:36:21:02:17:6a:ea:08:
                    c2:db:ae:dc:ae:4b:cb:b3:b9:be:80:a6:dc:bf:e0:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FB:91:A3:78:5F:89:AF:83:5C:6F:D8:4B:98:82:6A:B9:0E:45:B9
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:c2:25:5b:cf:e8:79:db:a8:57:1e:42:68:3e:48:b7:9a:18:
         4c:85:73:0b:82:2a:7e:f0:22:ba:70:ee:c9:0d:07:c3:3d:a8:
         49:e3:d8:16:20:13:6b:1d:d9:d1:8e:90:68:5f:25:d4:67:d4:
         78:d3:6f:c2:08:0b:10:9d:a5:84:05:b9:72:c7:80:96:dd:20:
         0f:32:38:84:dd:a8:91:da:79:09:39:dc:38:2d:fb:b9:bd:06:
         12:53:09:6b:4b:3a:36:dd:08:3f:f4:78:d0:44:07:1e:8b:55:
         05:37:ec:6c:45:fa:d1:56:5a:2f:70:e8:6d:8f:48:5f:55:ab:
         c8:29:66:db:84:7f:6a:5d:75:e0:26:15:f1:0e:4a:7f:04:a2:
         5a:73:7f:bc:ab:41:9b:53:75:2a:4d:b2:d1:89:e6:16:2f:1b:
         da:f4:a7:fd:20:5d:21:93:75:06:fe:15:76:24:e7:79:42:38:
         4d:cd:bd:a3:d7:67:b5:86:c0:14:36:df:62:e1:32:6b:85:29:
         02:a1:17:a5:69:b4:2d:d8:e0:cd:8a:8a:8d:83:aa:78:a1:4b:
         66:15:44:c1:86:e2:df:08:ba:9e:31:23:82:0e:b9:21:a8:0c:
         cb:bc:24:a3:b7:5c:50:8e:ab:90:07:c2:7a:23:5d:50:f1:ac:
         7f:e2:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----