Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS398465.roa
File:                     AS398465.roa (raw, json)
Hash identifier:          eLGWdefyFEGQXPN/PesZZ/bqkRXDWjJL+Zr3hl5NP50=
Subject key identifier:   68:3F:AB:B9:21:75:6F:97:7B:6F:84:2B:C6:22:43:0B:B6:5D:69:55
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0EC8F81440C336B3B72AEA9E2DB592F5F99D9D7D
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS398465.roa
Signing time:             Sun 31 Mar 2024 16:22:25 +0000
ROA not before:           Sun 31 Mar 2024 16:17:25 +0000
ROA not after:            Sun 30 Mar 2025 16:22:25 +0000
asID:                     398465
IP address blocks:        140.99.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 17:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:f8:14:40:c3:36:b3:b7:2a:ea:9e:2d:b5:92:f5:f9:9d:9d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar 31 16:17:25 2024 GMT
            Not After : Mar 30 16:22:25 2025 GMT
        Subject: CN=683FABB921756F977B6F842BC622430BB65D6955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:fc:59:1f:fc:d2:8f:b0:32:cd:0c:3d:44:
                    f1:d0:7a:4f:9a:4c:8c:84:c1:dd:ee:91:d8:35:27:
                    6b:00:fe:98:99:bd:b1:6f:8e:dd:11:b7:f1:2c:37:
                    a3:b8:e4:42:73:e3:04:52:f2:a6:1c:24:00:8e:5d:
                    19:c2:7a:ec:e2:33:e4:77:86:c6:e2:f3:09:66:00:
                    a1:e1:dc:3f:71:03:61:a8:c2:39:ed:eb:cd:89:72:
                    86:01:2e:05:71:1e:b1:4f:3e:ff:41:57:e2:d1:c7:
                    da:d8:96:2c:9c:24:35:94:ff:0a:82:c7:fc:ef:1f:
                    6b:86:0e:36:3b:02:b7:1f:54:34:97:03:01:f5:29:
                    a9:fa:a7:ec:9a:a6:29:36:51:0e:63:1b:bf:1d:c3:
                    a1:0e:5e:b4:79:c7:05:99:47:d8:6f:0f:08:1f:bf:
                    93:26:8e:6b:f1:76:fa:7f:17:cc:8c:92:17:b8:9b:
                    11:e5:9c:83:12:27:dd:94:b2:33:08:8f:67:68:3c:
                    f5:67:fc:7f:c0:91:ce:ec:64:d1:4b:98:97:02:0a:
                    26:90:61:1d:a9:35:36:02:f1:29:35:bc:3e:bd:41:
                    21:be:b5:25:4f:3b:ba:35:7a:7e:35:93:1b:84:b0:
                    2d:b7:45:9b:0b:87:17:01:71:86:2d:b2:75:fc:b1:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:AB:B9:21:75:6F:97:7B:6F:84:2B:C6:22:43:0B:B6:5D:69:55
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS398465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:30:0a:c2:d0:6e:62:8a:6b:3e:23:e1:23:02:59:d5:bd:
         98:d2:92:15:65:e0:5f:da:14:41:65:78:eb:5d:47:a7:fc:f9:
         9e:51:0d:95:81:58:64:8b:27:61:e1:7a:0e:56:f3:f3:3d:4c:
         87:7a:3d:50:e7:c7:5f:dd:2d:86:80:b8:ee:16:40:8c:c3:42:
         b9:06:06:2c:89:9e:29:f1:ce:fb:64:b4:eb:3d:3b:e0:6e:7b:
         26:54:34:c2:ac:e4:29:a1:2b:f6:3b:8f:c9:25:68:61:47:46:
         d8:eb:1f:ec:ae:5c:9a:73:47:94:20:bc:0b:19:74:d6:b6:f0:
         94:fd:2d:f9:d7:66:65:17:99:9f:04:b5:65:fb:c9:6c:0f:9c:
         9b:a0:02:a7:e3:fb:03:0e:f4:2a:5a:d5:48:fd:db:25:66:0a:
         c2:f7:48:81:4c:5f:0f:7b:e5:99:31:1f:81:72:78:34:ef:28:
         ab:a3:54:a7:d4:d8:b2:f4:47:c9:12:cf:1a:96:0d:98:d6:5e:
         fa:07:9f:b4:e9:20:dd:de:ac:36:2a:76:bf:7c:9b:cf:f8:e7:
         04:e2:86:fb:77:44:4d:bd:1b:6e:f8:e6:be:01:47:ed:10:63:
         56:1c:43:8c:f8:74:91:49:db:b2:79:c1:91:a6:a9:3b:33:9c:
         bf:29:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----