Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          P8k+yCvbud+jPAXSyUDdpK1z/EZYlJsm4icW1+YqX6Y=
Subject key identifier:   45:09:BC:91:6A:5F:BC:62:9F:55:11:3A:C8:C9:11:7F:CE:2A:7B:A2
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       511191F100ED0EC8B3B4B7D8CF3612F6C0A476BF
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     7018
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:11:91:f1:00:ed:0e:c8:b3:b4:b7:d8:cf:36:12:f6:c0:a4:76:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=4509BC916A5FBC629F55113AC8C9117FCE2A7BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:88:57:d9:fe:6d:ce:ca:80:79:39:42:1f:
                    c7:2f:13:a6:72:fd:33:87:c6:c7:54:e3:f3:3b:f2:
                    8b:ee:f5:37:43:8b:ce:2e:76:cf:ee:ef:57:37:f4:
                    46:20:0b:ec:a1:41:44:58:2c:aa:9d:70:ab:95:9c:
                    a6:a1:c7:c5:40:3c:fa:e8:aa:20:81:ab:9f:e2:5d:
                    cc:78:9c:07:d5:b8:8b:8f:d1:d4:9e:bc:a1:55:10:
                    f6:a7:8b:bd:1e:d1:59:89:73:68:06:43:59:e1:98:
                    01:7e:3f:c0:e7:63:08:6d:27:f7:57:27:9f:85:a2:
                    4a:a7:71:e2:7a:7a:d4:31:48:0b:cf:99:09:74:91:
                    20:9a:8a:97:8b:e1:56:83:f2:20:61:bc:90:ba:eb:
                    d0:d4:72:db:d0:7a:c1:79:88:4f:c5:0c:5c:35:44:
                    56:5f:be:7e:8e:bf:fd:22:0e:c7:7f:38:78:ab:39:
                    d8:2a:45:d9:7d:3e:90:78:85:8d:ca:1f:0e:7d:71:
                    99:d2:43:79:62:d0:7b:77:d8:ee:db:02:bc:f4:8b:
                    88:39:f8:a4:3e:0e:e6:93:fc:18:0b:07:e3:6a:ff:
                    3c:4c:45:19:bb:88:15:4d:8b:67:bb:73:04:d8:cf:
                    f3:a6:fb:d7:11:76:6c:43:2b:b7:38:3a:d9:7f:40:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:09:BC:91:6A:5F:BC:62:9F:55:11:3A:C8:C9:11:7F:CE:2A:7B:A2
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:b8:20:53:ae:b9:34:fe:cc:99:e3:94:96:35:6f:2a:8f:
         8a:06:40:e5:7c:b2:18:c7:b3:11:68:9b:8c:68:78:e8:1d:51:
         a1:ff:3c:18:8b:6a:b0:e8:12:e7:d2:8e:6a:23:e0:e0:64:b6:
         27:84:0e:56:8d:f8:6a:e6:0f:14:38:03:16:63:c2:fe:03:bb:
         e5:09:12:74:57:8b:3a:55:52:ee:1f:94:d3:6b:54:c3:c0:59:
         9d:8a:b0:d1:c2:3a:ab:df:ee:9d:f9:48:a1:7b:c4:38:6f:7c:
         8f:01:b3:65:29:b9:90:5f:b5:54:ee:92:8d:d9:71:f6:c9:e9:
         88:82:c6:96:03:8f:c0:35:b8:64:c0:b0:25:ab:e0:04:79:81:
         08:af:99:88:f6:28:c9:41:91:91:c6:cd:9a:fc:d4:6f:18:bb:
         3e:de:81:44:5c:b1:d5:e4:2a:84:67:e6:05:e1:6f:2d:56:35:
         a8:5c:89:9a:34:9b:98:df:d6:09:e3:c8:ab:c5:01:a6:94:ed:
         67:5b:32:3e:04:94:15:41:c7:7a:37:38:0a:8e:3b:3f:73:13:
         48:1c:5c:9a:00:16:1a:b5:f3:0d:65:b8:b7:78:b2:2a:d7:c9:
         d3:c7:a4:42:ed:cc:68:9e:cf:e1:71:0a:3d:4c:3e:fe:17:9d:
         36:b5:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----