Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212815.roa
File:                     AS212815.roa (raw, json)
Hash identifier:          tBAiUm9q8JJ72opVsoZkYm5eo/mAvOS09PX0f+kqGa8=
Subject key identifier:   D4:DF:35:FC:B4:F4:53:80:90:21:82:1C:DB:03:97:A5:D7:A6:C5:5C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       2AC61DFD03E1D7FD37AF875360DEF0AD262D2C71
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212815.roa
Signing time:             Thu 30 Nov 2023 20:04:10 +0000
ROA not before:           Thu 30 Nov 2023 19:59:10 +0000
ROA not after:            Thu 28 Nov 2024 20:04:10 +0000
asID:                     212815
IP address blocks:        98.142.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jan 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c6:1d:fd:03:e1:d7:fd:37:af:87:53:60:de:f0:ad:26:2d:2c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 30 19:59:10 2023 GMT
            Not After : Nov 28 20:04:10 2024 GMT
        Subject: CN=D4DF35FCB4F453809021821CDB0397A5D7A6C55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:7f:82:7a:c2:bf:60:6b:7f:fb:e8:fb:6c:
                    62:4b:09:7d:7a:8a:ae:bd:a1:a5:fd:39:72:66:52:
                    3f:28:86:40:db:2e:89:a9:8a:bb:ca:fa:36:6c:82:
                    db:e4:ef:10:71:f0:89:ba:62:7c:6f:5a:1a:a1:e7:
                    d3:25:44:23:f9:9e:96:ad:53:9f:e2:24:75:34:ff:
                    da:b6:6a:b1:1b:7d:d4:19:a4:6b:90:a5:96:20:0e:
                    17:7d:3c:9a:fc:e7:5b:9d:9e:58:b6:ff:23:77:38:
                    2a:67:e5:7e:4e:6e:b6:16:e3:53:4f:c2:d6:df:4a:
                    4a:f5:0e:d7:1c:0a:03:c7:d2:af:f0:67:7e:b4:b9:
                    55:a3:44:c4:07:54:37:65:77:ec:bc:ca:be:b8:18:
                    6d:5b:c8:30:c9:c0:56:9b:72:26:6f:4e:20:8b:fa:
                    32:92:7e:4b:f0:bd:3b:eb:0c:5b:16:b2:98:6b:56:
                    e8:bd:88:1f:74:49:eb:57:85:94:9b:63:93:d4:a8:
                    9e:f7:8f:3b:d6:a7:d8:c6:8c:0d:79:ed:c9:d0:82:
                    38:22:aa:06:7e:16:32:1c:a8:39:6d:a5:38:9b:48:
                    d2:1b:b9:1a:84:4a:79:df:80:5d:ac:1c:f6:d2:f2:
                    44:18:ca:9e:3b:75:d3:6d:e5:17:a0:88:a1:c4:70:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DF:35:FC:B4:F4:53:80:90:21:82:1C:DB:03:97:A5:D7:A6:C5:5C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:9a:eb:f6:41:0b:3b:a7:c1:69:1e:9d:44:d8:af:2c:69:6c:
         84:b3:22:ba:c7:03:18:7f:14:05:91:f5:b3:53:13:b3:f0:9d:
         38:55:d6:a6:b6:69:72:5e:36:a9:37:20:af:d0:0b:f9:a0:e8:
         71:9a:4f:31:30:fa:5a:60:31:3d:91:c0:a1:dc:d0:cd:a9:c1:
         c6:d5:4b:8e:b5:04:d8:03:16:d2:b3:28:e9:fa:52:ce:ba:fe:
         0c:0d:54:c3:b1:a9:59:1b:5b:84:6c:a0:5a:be:82:ea:ac:17:
         c8:6c:42:03:a8:4d:ba:63:1f:82:4b:41:79:d1:00:bb:35:25:
         a3:10:72:b3:ec:a0:e8:d6:79:50:ff:a3:c3:90:e4:a3:08:77:
         07:2b:db:a0:6f:8a:d7:55:ee:4a:22:52:86:d0:fb:e6:ad:0f:
         60:bf:ca:1f:0f:8c:53:2a:dd:dc:3e:d9:18:27:e3:fb:18:a2:
         88:5c:fa:b8:94:6d:7d:61:ee:65:23:91:24:e8:38:48:91:dc:
         bd:d5:fc:e9:5c:7f:d8:f2:69:1c:61:a3:13:3b:02:1c:d1:fa:
         da:06:fb:53:8e:26:bb:4d:96:34:f1:0d:97:aa:91:02:82:61:
         2c:a9:88:c1:17:c8:f6:47:40:8c:69:87:bc:82:f5:37:4e:9b:
         e8:6b:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----