Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          UF2qI5u5xkokJ0z2nS/ouMm2X1U9ztW5biaiAc0hvn8=
Subject key identifier:   FB:A4:9E:A0:9A:AA:B0:AE:67:D6:2E:B0:0F:C5:CF:B3:2A:92:BB:A7
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       63E9FD24F30B6771702AAC9F90123A886EB6828E
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 30 Oct 2023 12:03:53 +0000
ROA not before:           Mon 30 Oct 2023 11:58:53 +0000
ROA not after:            Mon 28 Oct 2024 12:03:53 +0000
asID:                     7018
IP address blocks:        216.247.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:fd:24:f3:0b:67:71:70:2a:ac:9f:90:12:3a:88:6e:b6:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:53 2023 GMT
            Not After : Oct 28 12:03:53 2024 GMT
        Subject: CN=FBA49EA09AAAB0AE67D62EB00FC5CFB32A92BBA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:6b:92:03:4f:0c:0c:bc:0c:90:07:3e:b9:
                    39:f0:a7:c6:f3:8f:8d:59:5a:d4:80:dd:e9:28:80:
                    12:0b:17:2d:9d:23:43:f0:63:cb:95:ec:1f:17:76:
                    5b:57:51:b3:db:16:2d:3d:43:e8:b6:27:df:6d:62:
                    cb:f8:88:0c:17:f5:c9:90:98:a0:ec:66:2c:7e:3e:
                    69:04:8e:3b:5d:b6:e6:f8:5c:35:6c:a3:70:39:27:
                    0a:de:7a:c2:07:7f:f9:a6:2e:59:17:76:1c:c0:eb:
                    12:4b:5e:a6:b1:2b:2e:4a:2b:dd:db:78:f0:9e:ce:
                    a8:f3:e1:2f:f4:77:41:55:1d:27:1e:b9:7e:53:b9:
                    85:13:5e:26:c1:9e:28:de:05:ef:c7:14:23:8c:46:
                    bc:c2:f8:16:dc:7d:f7:c3:87:ff:98:07:86:46:70:
                    62:5c:51:bb:ff:f1:04:1c:58:63:6c:4a:0f:39:7c:
                    a7:b1:f3:52:c5:03:26:5f:52:89:c0:cd:7f:56:f2:
                    29:39:d7:db:10:e6:05:c9:91:53:d3:d0:06:6f:45:
                    5d:45:dc:b9:53:c7:bd:ae:15:03:32:90:b6:d3:0d:
                    7c:31:2b:fd:ff:9b:40:dc:e6:12:ee:a8:c2:9b:76:
                    c7:b3:87:62:33:0c:41:0b:f4:01:a6:d0:33:6c:41:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:9E:A0:9A:AA:B0:AE:67:D6:2E:B0:0F:C5:CF:B3:2A:92:BB:A7
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:5a:7b:52:e4:f2:c5:fb:4c:1e:cd:40:38:26:61:a6:0f:95:
         c1:1c:48:50:a7:a4:1d:86:d5:bb:5e:17:6d:e2:fc:cc:93:5c:
         b1:4b:8e:31:e2:1b:a4:62:e1:64:ee:5c:bc:ef:f7:3e:11:3d:
         e7:f9:c3:92:c5:dd:a5:50:32:bb:48:97:c2:52:80:8a:d3:5f:
         01:2f:22:c9:16:96:69:67:1b:14:ea:33:16:1e:62:8d:d5:f8:
         0b:53:c1:34:8f:8e:3a:7c:5c:f6:7f:56:4a:49:3e:fd:c4:9d:
         3b:1b:7b:8f:16:49:8e:e7:26:59:a9:62:35:29:a7:bd:28:0d:
         ac:5a:0d:bc:cb:c8:95:1d:05:0f:d0:b2:b5:f6:46:71:9f:6c:
         aa:10:f6:07:b1:a6:6a:81:09:34:59:dd:6d:2d:6c:a7:ab:02:
         6f:3a:8a:0a:1a:04:2f:be:34:8d:76:2a:8e:86:26:cc:27:b1:
         db:e2:7c:4c:a3:91:d6:dc:64:1f:53:c7:11:51:b4:dc:9d:a0:
         45:1a:ba:46:a7:b2:52:a7:1c:3f:3f:18:c3:73:c1:2b:46:96:
         3e:14:3f:5f:89:4a:b6:26:97:d7:47:1e:46:87:41:2d:d6:3b:
         76:55:78:cd:de:78:44:d8:5a:54:f4:f4:12:14:11:f0:dc:21:
         18:40:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----