Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          O5wU2mdR+jstsbVXlmjJeHdyE5dCkBHCbTY91EwquiM=
Subject key identifier:   A0:7C:6D:B6:E3:84:CD:CC:D5:20:C7:20:A2:64:F9:7C:96:60:FD:1E
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6646213EE805994FEDACB94EE5C62D5717080000
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     398465
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:46:21:3e:e8:05:99:4f:ed:ac:b9:4e:e5:c6:2d:57:17:08:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=A07C6DB6E384CDCCD520C720A264F97C9660FD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:8d:b4:48:4b:87:be:17:8e:ff:8e:6d:cf:
                    9b:3d:03:fd:31:86:8f:2d:2b:b8:8c:08:79:73:46:
                    f9:a0:3c:ce:da:10:16:5a:e3:7a:40:96:3a:d2:5b:
                    7d:5c:9f:f2:a8:00:b6:86:c9:6a:f9:61:d1:af:84:
                    d7:1c:bd:10:a8:88:e2:04:d6:e2:fa:22:e0:c7:29:
                    bc:a4:75:59:d9:2a:da:1d:7a:bd:50:93:ef:d3:42:
                    64:05:9a:5b:84:47:8f:1a:34:f0:79:86:28:b1:1e:
                    ed:17:c3:78:b9:10:2f:0a:f3:23:77:e5:7c:a1:76:
                    87:eb:32:62:d7:cb:d2:d1:03:14:d5:14:c4:54:1b:
                    bb:86:33:f8:cd:b5:3e:da:1e:36:68:88:20:7c:62:
                    98:2a:1c:d8:6f:79:fe:0d:c9:89:c5:76:1d:82:0c:
                    19:f7:51:31:49:0e:75:aa:04:82:3f:f9:95:32:a6:
                    ee:48:c6:2b:a5:17:16:99:1f:92:4f:40:fc:ce:b9:
                    0a:3e:ca:13:30:08:df:8f:e9:c7:19:b3:81:67:9c:
                    ce:ea:cb:a5:f4:9b:e0:7a:a7:32:39:70:94:c7:37:
                    a2:a1:65:83:3d:bd:3f:23:96:78:e6:6b:b7:b1:0e:
                    97:4f:6f:e3:24:e1:3c:50:09:87:93:f8:ec:bd:fe:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7C:6D:B6:E3:84:CD:CC:D5:20:C7:20:A2:64:F9:7C:96:60:FD:1E
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:ad:21:01:0c:58:3a:53:f3:8c:55:1a:c9:29:59:dc:e3:
         45:89:05:95:55:5e:00:1b:52:18:a0:1f:ee:ce:f4:74:90:22:
         dd:ad:52:29:95:9a:25:9c:e0:64:bb:42:47:e1:8f:98:35:af:
         61:ea:d2:84:43:e8:ea:cc:6d:69:bc:4d:f0:81:bc:7e:c8:82:
         23:06:39:f6:cc:13:a0:06:bc:95:4a:bb:d1:74:ab:54:0c:40:
         88:98:d7:c7:2e:43:9b:56:7c:c9:d1:1b:43:50:1f:8c:ad:74:
         d1:f3:e4:e3:53:40:d3:74:7f:89:14:ad:27:91:83:54:c6:f9:
         4b:11:b2:61:ff:6e:4d:d6:5f:c5:c9:5b:e1:3a:fa:76:ad:b1:
         ac:e7:7b:0c:32:9f:6c:25:1f:2a:4c:e3:3e:1b:05:e2:79:90:
         17:64:ed:c2:8b:44:6d:10:a2:f8:a9:20:e7:2f:11:d8:a8:e7:
         33:c8:2b:cd:ae:ba:03:f5:9d:74:a3:68:b4:83:fe:5f:46:15:
         39:4a:f8:f8:54:94:81:5b:e2:b3:92:bb:af:5d:10:e3:85:28:
         12:3d:e8:e9:b7:49:e5:c1:d7:9c:45:34:5d:3c:ae:f2:5c:88:
         07:dd:fd:b5:d6:90:61:87:42:b8:86:9c:6b:3b:69:7c:7e:9b:
         28:01:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----