Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7849.roa
File:                     AS7849.roa (raw, json)
Hash identifier:          QUsFj1khWfxag70DMZm43jKK2pbOxJdet5O3jz10wsA=
Subject key identifier:   B9:51:21:2F:50:B8:40:34:7D:4B:C1:7D:3C:25:86:B9:22:81:40:EB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3C62270AFF7FEA311BEEA157832F35E43882EDA4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7849.roa
Signing time:             Sun 11 Feb 2024 00:01:14 +0000
ROA not before:           Sat 10 Feb 2024 23:56:14 +0000
ROA not after:            Sun 09 Feb 2025 00:01:14 +0000
asID:                     7849
IP address blocks:        98.142.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:62:27:0a:ff:7f:ea:31:1b:ee:a1:57:83:2f:35:e4:38:82:ed:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 10 23:56:14 2024 GMT
            Not After : Feb  9 00:01:14 2025 GMT
        Subject: CN=B951212F50B840347D4BC17D3C2586B9228140EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:37:57:e2:52:ed:77:20:a7:41:77:93:19:
                    7f:eb:18:b0:d0:46:85:69:bf:88:60:98:79:76:e0:
                    b8:4e:be:45:be:2a:1b:59:0e:ff:29:50:6b:ab:d5:
                    db:ec:58:c5:e4:bc:f8:f2:9c:25:dd:8c:39:70:3d:
                    20:6f:14:a2:d2:c0:da:6b:d4:05:4d:3a:99:9d:95:
                    85:41:60:81:e2:9e:a1:f2:4e:37:7b:3a:63:03:a2:
                    82:94:e3:2e:3f:0b:bd:8b:05:a1:72:58:14:ea:0e:
                    43:6d:e6:47:46:3d:1c:3d:10:88:3d:fc:c4:d6:1f:
                    5d:14:ed:a2:db:9e:e0:08:62:de:1d:92:db:f0:a9:
                    2b:94:8c:39:ac:5c:49:50:de:4f:be:2c:6a:a0:ea:
                    6b:04:d7:ca:31:45:d3:1a:cb:c0:74:92:24:fa:f8:
                    49:24:41:4c:d4:ae:55:9a:e1:f0:29:61:e5:7c:c2:
                    d3:c6:77:2d:db:90:27:b6:66:1b:d2:96:15:73:e8:
                    35:9d:f2:40:96:08:b2:15:a2:56:0c:bf:dc:eb:55:
                    8c:38:af:6d:a0:00:f3:ed:70:8b:f2:16:16:5a:cc:
                    3e:f2:b2:23:54:94:93:63:e9:73:17:ad:2a:00:c4:
                    d4:45:34:8b:28:d8:dc:24:71:c9:ef:d0:98:91:41:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:51:21:2F:50:B8:40:34:7D:4B:C1:7D:3C:25:86:B9:22:81:40:EB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7849.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:09:a0:06:1d:12:c5:12:93:ec:f5:12:6b:51:ca:43:0e:
         be:32:73:f6:89:13:03:c3:d9:43:03:fc:5a:aa:18:be:90:0a:
         a7:c4:86:8a:df:21:46:55:b3:48:e2:0c:e5:4a:3d:1d:74:00:
         c2:d9:8b:c7:24:b7:8e:c9:fe:0e:0a:e0:ba:dc:62:8f:55:99:
         a7:3a:54:d3:6e:ed:8a:98:be:4c:6d:61:69:00:26:e3:0e:2d:
         7b:b4:9f:40:79:6a:6d:52:2e:1d:6d:2e:16:90:99:93:75:30:
         7f:c0:bd:d3:a7:2a:d6:c4:6a:85:d8:6e:b1:d4:0e:ef:56:80:
         0f:d1:02:29:3a:07:93:2d:07:98:87:6f:d9:b3:29:bd:b8:b8:
         5c:d6:ea:b6:4d:cc:28:67:9d:76:c3:b8:0d:8e:ee:55:67:a5:
         c0:2b:8a:53:dd:bd:e8:fd:20:36:c6:0e:4d:38:4e:18:15:47:
         3a:7f:18:d8:fc:ac:31:fe:95:bc:4e:75:04:20:08:f8:a2:8a:
         45:9b:71:a7:25:23:c3:22:9b:55:6f:30:7f:66:04:00:d3:33:
         f2:e3:9c:1e:7a:35:7a:78:6a:f0:5a:a3:38:fe:05:1b:1e:e9:
         01:97:8f:9a:50:12:5f:be:2c:b4:b2:c4:01:94:ca:40:9c:bd:
         33:13:26:71
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUPGInCv9/6jEb7qFXgy815DiC7aQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMjEwMjM1NjE0WhcNMjUwMjA5MDAwMTE0
WjAzMTEwLwYDVQQDEyhCOTUxMjEyRjUwQjg0MDM0N0Q0QkMxN0QzQzI1ODZCOTIy
ODE0MEVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcA3V+JS7Xcg
p0F3kxl/6xiw0EaFab+IYJh5duC4Tr5FviobWQ7/KVBrq9Xb7FjF5Lz48pwl3Yw5
cD0gbxSi0sDaa9QFTTqZnZWFQWCB4p6h8k43ezpjA6KClOMuPwu9iwWhclgU6g5D
beZHRj0cPRCIPfzE1h9dFO2i257gCGLeHZLb8KkrlIw5rFxJUN5PvixqoOprBNfK
MUXTGsvAdJIk+vhJJEFM1K5VmuHwKWHlfMLTxnct25AntmYb0pYVc+g1nfJAlgiy
FaJWDL/c61WMOK9toADz7XCL8hYWWsw+8rIjVJSTY+lzF60qAMTURTSLKNjcJHHJ
79CYkUGF0QIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFLlRIS9QuEA0fUvBfTwlhrki
gUDrMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzc4NDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABijvIwDQYJKoZIhvcNAQELBQADggEB
AFCPCaAGHRLFEpPs9RJrUcpDDr4yc/aJEwPD2UMD/FqqGL6QCqfEhorfIUZVs0ji
DOVKPR10AMLZi8ckt47J/g4K4LrcYo9Vmac6VNNu7YqYvkxtYWkAJuMOLXu0n0B5
am1SLh1tLhaQmZN1MH/AvdOnKtbEaoXYbrHUDu9WgA/RAik6B5MtB5iHb9mzKb24
uFzW6rZNzChnnXbDuA2O7lVnpcArilPdvej9IDbGDk04ThgVRzp/GNj8rDH+lbxO
dQQgCPiiikWbcaclI8Mim1VvMH9mBADTM/LjnB56NXp4avBaozj+BRse6QGXj5pQ
El++LLSyxAGUykCcvTMTJnE=
-----END CERTIFICATE-----