Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa
File:                     3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier:          B04GQ2UuEXT1qNDa2qEcLgwqvHirmIWJ4RGIvnXA7ow=
Subject key identifier:   E0:D5:6C:5A:C8:6F:02:AA:11:24:6D:ED:FE:9A:C9:02:97:36:1C:40
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5B24DC0625470AD298E5C0D4BD12888D82936DE9
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa
Signing time:             Mon 28 Nov 2022 11:10:30 +0000
ROA not before:           Mon 28 Nov 2022 11:05:30 +0000
ROA not after:            Mon 27 Nov 2023 11:10:30 +0000
asID:                     139660
IP address blocks:        216.247.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:24:dc:06:25:47:0a:d2:98:e5:c0:d4:bd:12:88:8d:82:93:6d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 28 11:05:30 2022 GMT
            Not After : Nov 27 11:10:30 2023 GMT
        Subject: CN=E0D56C5AC86F02AA11246DEDFE9AC90297361C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:47:70:82:43:0f:13:fc:c6:19:b1:ee:a2:
                    e5:68:aa:ad:e7:d2:2a:6a:85:16:7d:d0:1d:19:5d:
                    b4:ba:73:54:ca:22:16:c8:f1:e8:fe:c6:ff:d3:03:
                    23:27:b3:ff:b0:04:af:47:55:a8:67:27:ba:c2:a0:
                    1f:b3:9d:c9:30:75:11:af:08:05:7c:69:2f:b1:5e:
                    6d:44:ac:f1:9f:15:6a:a9:23:07:ea:75:a4:9e:c2:
                    fa:7d:26:69:41:75:88:b9:d9:58:1e:84:a6:5e:28:
                    03:cf:62:24:e4:5b:e0:1b:df:14:95:f4:68:90:59:
                    79:76:dc:2c:b5:78:ad:dd:e2:ac:d8:ab:f7:af:48:
                    8e:5f:1a:31:f4:51:e1:b1:b4:37:45:89:0f:47:14:
                    2c:a9:b5:c3:6a:66:ba:32:3b:a5:eb:9b:16:d8:4d:
                    1c:92:37:4b:33:15:fc:ca:f8:f1:91:40:29:df:e7:
                    0b:73:ad:73:a8:1c:eb:7b:86:bc:58:d0:50:ed:e0:
                    f8:ef:29:cd:a7:f9:94:ab:b6:fa:e0:5e:ef:d4:7e:
                    3f:56:bf:9d:27:86:b2:fa:6f:ca:7d:04:5d:fd:52:
                    de:80:44:6b:a1:54:28:5e:5d:18:f6:a7:5b:96:8f:
                    10:ff:4c:ac:6f:57:1a:28:19:1b:81:ea:8d:fd:c5:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D5:6C:5A:C8:6F:02:AA:11:24:6D:ED:FE:9A:C9:02:97:36:1C:40
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313339363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:20:64:3e:02:39:9b:72:8e:05:5b:b3:0f:20:61:2b:3a:fa:
         20:62:5b:58:ea:54:98:59:d9:11:b5:75:35:0d:80:bf:ec:b5:
         10:a0:07:c4:11:02:e4:a1:d5:83:2b:d9:7a:48:b0:5d:fb:77:
         87:02:63:51:31:9f:ce:22:7c:9d:86:bc:04:d5:0f:8d:d1:92:
         ac:8d:73:15:f6:07:46:ba:71:54:07:3b:6c:1b:c3:8d:90:49:
         1e:9e:fe:4a:3a:0f:dd:ed:f2:a9:b9:7e:7c:ce:35:37:03:a0:
         3a:43:21:30:05:59:eb:7c:18:e3:8d:0e:a9:47:66:cf:17:9a:
         96:a1:a1:9c:9d:e1:a9:b1:4f:80:38:f8:2c:1c:59:b6:f3:0b:
         6c:36:d3:08:45:aa:b8:a0:62:ad:2f:f2:fb:a0:20:4b:bb:ce:
         7e:5e:65:8d:a5:e9:18:cc:52:72:fa:6a:80:d4:af:4a:a7:d0:
         06:03:e2:bb:45:48:29:dc:d9:ba:d9:b2:b7:c0:46:d1:da:3e:
         bf:d9:ea:83:b2:e7:8f:a8:be:ab:ae:42:12:a8:5f:17:8d:6b:
         f3:e6:eb:63:17:00:43:d5:39:36:2e:99:73:9b:50:15:82:39:
         e2:95:4f:55:89:10:79:4b:0d:97:50:15:0b:bf:72:1a:94:25:
         f1:f4:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----