Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e3131312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          kp605JYWH/f6pOuBAdvVj1n+kWtJh9Q5hLpmF9U0vcw=
Subject key identifier:   C9:E9:56:E7:1A:C0:F0:EE:60:92:30:2E:40:73:87:E8:69:B1:75:A2
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       128F34A1C056E59B5A43262C26AF5A140784E0CF
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20383334.roa
Signing time:             Tue 08 Aug 2023 10:00:04 +0000
ROA not before:           Tue 08 Aug 2023 09:55:04 +0000
ROA not after:            Tue 06 Aug 2024 10:00:04 +0000
asID:                     834
IP address blocks:        216.247.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Oct 2023 19:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8f:34:a1:c0:56:e5:9b:5a:43:26:2c:26:af:5a:14:07:84:e0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug  8 09:55:04 2023 GMT
            Not After : Aug  6 10:00:04 2024 GMT
        Subject: CN=C9E956E71AC0F0EE6092302E407387E869B175A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:35:bd:90:7f:d9:01:3f:4b:5c:c2:e4:4d:
                    a2:d3:91:ee:99:ca:1d:59:72:3b:25:34:42:0c:02:
                    0a:99:84:9e:bb:86:67:06:26:98:2c:63:f8:84:7b:
                    35:b3:95:76:57:67:19:ab:9f:bc:2c:4f:26:de:99:
                    a7:a1:72:0b:51:da:a4:82:99:91:20:90:9f:0d:1e:
                    32:3b:3c:62:99:2b:da:6b:42:b7:a5:fc:cd:3a:17:
                    8b:9f:4a:01:7a:b4:24:4f:e3:ca:a9:6a:aa:d4:de:
                    f2:c1:3c:2e:24:20:df:c5:04:3b:71:32:5f:af:36:
                    d4:da:c3:02:84:10:d9:6b:dd:3b:12:4f:3f:fa:22:
                    c6:da:45:c0:36:08:48:30:69:c6:6b:d3:3c:af:0d:
                    c1:79:f5:ea:8e:a1:76:aa:f1:88:d9:b2:9f:32:0a:
                    33:dc:bd:a2:e3:ac:04:21:61:fb:9f:68:ad:f1:19:
                    df:fe:6b:35:2a:9a:25:04:fc:52:28:8d:f5:78:74:
                    2d:d1:19:94:1c:72:7b:13:76:a1:c5:57:6d:3c:d7:
                    8a:8b:e5:6b:b7:30:40:48:b8:12:58:12:23:fe:fe:
                    79:3a:bb:e9:60:33:2f:94:27:7f:51:39:1b:bb:31:
                    da:d9:40:ed:46:ca:1f:14:ad:fc:c0:c8:1a:ac:c3:
                    4f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E9:56:E7:1A:C0:F0:EE:60:92:30:2E:40:73:87:E8:69:B1:75:A2
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:d8:5a:89:ca:76:2f:b1:11:a2:7c:0d:10:35:04:92:2e:22:
         ed:ea:cc:b5:a2:94:d3:81:8b:b9:7b:1c:73:44:0b:7d:ed:fc:
         09:cd:c2:1e:6b:8f:59:d7:78:a9:ce:f5:0a:59:6f:ec:0e:92:
         d0:e1:08:65:91:ae:0f:c2:d6:57:74:30:41:bf:d2:b4:1b:03:
         f4:0a:b7:01:e5:93:b0:f6:76:cb:08:cf:51:5b:3b:b3:eb:9e:
         a1:5f:a7:c1:36:96:14:76:2d:41:46:bc:0d:2a:ec:45:c7:3a:
         98:9f:68:21:99:74:e8:04:d9:7c:af:b8:2d:5f:65:dd:27:84:
         4c:45:33:52:c7:7a:94:be:ec:45:b2:e6:68:0d:f2:17:a9:a1:
         c3:49:9c:34:dd:75:94:47:c9:c7:ad:75:cf:65:ed:5a:a6:a3:
         d6:ca:3b:63:f2:64:c4:62:e0:ac:e3:56:e6:a2:93:13:91:27:
         5a:3f:42:6d:c4:71:12:ed:fb:dc:63:23:06:05:92:5e:a3:d1:
         ec:c7:7a:e4:b5:0e:4e:d7:9a:4a:6e:0c:4a:d5:3a:33:51:ce:
         16:c0:a4:44:2d:af:2a:f9:03:62:f1:c7:ea:06:55:f9:ed:f7:
         64:40:7e:8b:d2:22:7d:6a:44:8c:59:a0:26:d8:5e:8b:bc:e4:
         ae:5d:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----