Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203232373733.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          CTuK6ZHRLHfaNm5Ob9YcywH1gipVaC+jtui3LTeiK5c=
Subject key identifier:   38:1F:8E:F9:FB:CB:87:3B:47:DA:ED:B9:BF:97:AA:BD:75:3B:CA:16
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       15A87DBFB12000E9BA63D3F944CCC7FF4EB5601F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203232373733.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     22773
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a8:7d:bf:b1:20:00:e9:ba:63:d3:f9:44:cc:c7:ff:4e:b5:60:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=381F8EF9FBCB873B47DAEDB9BF97AABD753BCA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:fa:f6:c3:83:1d:82:ce:da:dc:e6:0f:24:
                    1b:60:8d:c4:f2:7b:5e:2c:d6:d9:85:8e:4c:2a:eb:
                    13:ac:ec:f8:9e:ae:9f:c0:54:67:41:ea:4b:fa:a2:
                    96:02:72:ef:db:85:cb:6f:f9:e4:14:b4:62:c5:9b:
                    25:55:d5:94:08:e4:3e:ca:78:aa:2f:3a:ba:13:1f:
                    74:e9:59:e8:8d:4b:dd:79:62:d1:87:df:de:3d:59:
                    bd:ba:f4:97:72:e6:03:0b:79:d9:ac:5b:bf:5f:fe:
                    15:18:5f:1a:e4:81:d1:6b:f5:19:cc:69:be:69:70:
                    20:dd:18:ea:91:d9:a4:1a:87:86:81:3f:f7:ea:ab:
                    1c:46:13:65:ce:6a:db:b6:1c:9c:04:67:13:ea:96:
                    90:f5:60:6e:7b:6e:51:80:cb:3d:b2:2c:37:8b:d2:
                    ce:c5:9e:0d:56:89:66:60:a3:b7:b9:e2:40:5e:83:
                    ec:dc:79:51:95:0d:b3:92:a7:34:93:20:04:50:e9:
                    9d:11:b5:55:69:a6:3b:63:38:fe:38:47:0a:c5:d2:
                    4f:f2:17:9a:ad:e7:e7:05:85:62:2a:6e:7b:3d:8f:
                    d9:f6:48:ed:83:55:25:bd:75:99:8e:3f:8d:2c:d5:
                    10:0c:b0:04:26:bf:cd:b2:21:55:34:50:d9:83:88:
                    45:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1F:8E:F9:FB:CB:87:3B:47:DA:ED:B9:BF:97:AA:BD:75:3B:CA:16
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:d8:99:7e:b5:98:6e:29:f9:f1:a9:75:1b:b8:4a:d5:b7:
         1d:8d:88:52:bc:3e:b8:73:33:cf:60:9f:25:ea:d4:54:3a:16:
         fb:2a:57:b8:e9:c8:b6:c6:19:cc:2d:06:37:94:fb:96:5e:12:
         c9:bc:c8:08:0f:99:8b:47:bc:4c:a3:d9:1f:1b:af:00:9c:45:
         49:14:41:e9:6f:79:4f:47:e2:bf:25:f9:60:bd:6a:d5:bf:b7:
         55:92:22:bf:d5:1b:f1:82:24:2e:5d:ea:4e:d6:c6:0d:ae:91:
         51:cd:99:30:c5:10:a0:bb:a0:9f:b9:a8:b4:32:69:28:f0:09:
         ab:7c:4c:c3:a6:95:5f:3a:b5:60:05:d2:a4:21:cf:ae:a7:98:
         3e:9a:8e:b4:20:f7:02:d0:4e:53:fa:5e:14:9d:1f:cf:c0:62:
         dd:20:90:08:50:54:f9:50:0d:ce:46:f2:7c:6e:c5:01:34:dd:
         01:1c:fd:51:b3:95:7e:78:5a:8a:d4:95:3e:5c:88:fb:25:69:
         7b:4d:71:6e:8d:52:70:a6:f1:c0:78:5b:a7:f3:1a:43:44:4a:
         8e:1b:5f:65:1f:df:34:91:cb:95:3b:77:b1:0f:d7:c7:12:8f:
         1b:81:39:25:cb:18:25:df:c0:1c:69:42:55:ca:13:30:84:54:
         c7:d3:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----