Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS198652.roa
File:                     AS198652.roa (raw, json)
Hash identifier:          SPWIG3MqAj0hC110onq/p29Q7C3Sew2iwVS+2supmWw=
Subject key identifier:   7F:B4:DF:ED:74:68:AB:EC:C0:69:BF:E2:DD:1B:A0:E5:64:0D:49:B9
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       12EA3E7338A9940020328B63277B54A2FED76EB3
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS198652.roa
Signing time:             Thu 22 Jun 2023 13:57:41 +0000
ROA not before:           Thu 22 Jun 2023 13:52:41 +0000
ROA not after:            Thu 20 Jun 2024 13:57:41 +0000
asID:                     198652
IP address blocks:        216.246.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jul 2023 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ea:3e:73:38:a9:94:00:20:32:8b:63:27:7b:54:a2:fe:d7:6e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jun 22 13:52:41 2023 GMT
            Not After : Jun 20 13:57:41 2024 GMT
        Subject: CN=7FB4DFED7468ABECC069BFE2DD1BA0E5640D49B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:0a:97:5e:f0:0c:84:d5:47:d2:f7:e4:80:
                    33:0d:3b:95:3e:30:76:a5:d0:1c:22:d5:00:47:2e:
                    bc:27:84:4f:47:95:10:62:07:8d:cd:4d:af:4f:d9:
                    93:6e:18:c3:26:88:4f:39:4a:9d:c2:8a:91:d2:b9:
                    c1:7b:74:9b:92:07:b9:8e:63:1f:ac:86:df:84:4f:
                    3c:3f:7b:4a:80:c1:4a:e3:4d:f8:5f:b0:c0:c5:79:
                    2b:59:ad:08:7e:9e:90:ed:a4:45:51:a4:6a:d9:5a:
                    32:3d:b2:11:79:b7:c8:50:c8:fa:a6:83:aa:9c:43:
                    32:55:97:58:41:c2:4c:f4:b1:ef:ec:c5:5f:fb:45:
                    73:b1:ac:c3:0e:4f:d1:35:0f:ac:60:2a:b6:e7:ce:
                    0f:b7:a5:87:a6:17:bb:8a:96:15:96:06:06:22:72:
                    f1:4b:88:31:7f:5b:64:5a:81:86:bc:7c:1d:df:ac:
                    83:cb:37:6e:53:6b:a8:fd:4b:36:85:38:79:b3:34:
                    e6:5d:45:33:63:28:88:64:e2:1d:b0:05:e3:5b:10:
                    70:b4:d3:15:b1:f2:8e:a8:31:1a:18:5f:d6:16:dc:
                    3a:37:e7:0b:42:27:11:25:76:3c:86:7d:d1:60:fe:
                    61:e1:72:ab:a3:54:6c:45:7a:a1:82:c1:7b:12:38:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:DF:ED:74:68:AB:EC:C0:69:BF:E2:DD:1B:A0:E5:64:0D:49:B9
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS198652.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:72:7b:cd:e0:dd:53:01:de:08:8f:98:df:98:c9:b4:06:be:
         6e:9f:85:22:20:0e:32:9f:71:90:91:fa:78:14:e2:71:37:17:
         37:cb:31:31:62:e0:d9:91:8e:54:16:60:92:08:ba:a6:d7:4b:
         c8:83:e7:4d:66:27:98:b7:80:0c:56:65:56:82:ee:92:93:23:
         3c:e0:6d:bc:2c:da:2d:86:95:05:48:a9:d8:3f:08:5b:3d:ba:
         1d:0b:5c:4e:2a:1b:2a:88:57:ef:fe:14:ce:33:e0:44:1c:c8:
         92:79:20:a1:ec:4e:de:74:f8:b0:05:e0:24:26:95:3e:db:c7:
         94:63:b6:8c:1e:72:8e:71:07:65:0d:e2:f4:0e:6b:5d:1c:a5:
         5d:9b:1d:8f:55:68:b8:93:1f:4e:88:51:5a:4e:8e:5f:8f:9e:
         d2:ad:97:ff:22:62:10:1b:e2:ba:0c:57:67:cf:94:ed:6d:fd:
         33:bd:f6:38:55:ad:cb:15:ea:6b:5c:52:6f:97:62:84:fc:e0:
         96:5d:d8:87:c9:67:03:fd:4a:b9:4c:5e:2a:69:07:62:03:e5:
         04:c4:8d:b0:a1:27:aa:bd:60:97:e5:53:b6:de:8b:35:85:d4:
         a5:12:e1:a5:26:44:0b:89:ba:81:97:12:64:f1:33:37:0c:eb:
         81:fe:af:4e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUEuo+cziplAAgMotjJ3tUov7XbrMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNjIyMTM1MjQxWhcNMjQwNjIwMTM1NzQx
WjAzMTEwLwYDVQQDEyg3RkI0REZFRDc0NjhBQkVDQzA2OUJGRTJERDFCQTBFNTY0
MEQ0OUI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSYKl17wDITV
R9L35IAzDTuVPjB2pdAcItUARy68J4RPR5UQYgeNzU2vT9mTbhjDJohPOUqdwoqR
0rnBe3Sbkge5jmMfrIbfhE88P3tKgMFK4034X7DAxXkrWa0Ifp6Q7aRFUaRq2Voy
PbIRebfIUMj6poOqnEMyVZdYQcJM9LHv7MVf+0VzsazDDk/RNQ+sYCq2584Pt6WH
phe7ipYVlgYGInLxS4gxf1tkWoGGvHwd36yDyzduU2uo/Us2hTh5szTmXUUzYyiI
ZOIdsAXjWxBwtNMVsfKOqDEaGF/WFtw6N+cLQicRJXY8hn3RYP5h4XKro1RsRXqh
gsF7EjgqkwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFH+03+10aKvswGm/4t0boOVk
DUm5MB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZjNmU3ZmQ4
ZDM2NjAvMC9BUzE5ODY1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj2FTANBgkqhkiG9w0BAQsFAAOC
AQEAunJ7zeDdUwHeCI+Y35jJtAa+bp+FIiAOMp9xkJH6eBTicTcXN8sxMWLg2ZGO
VBZgkgi6ptdLyIPnTWYnmLeADFZlVoLukpMjPOBtvCzaLYaVBUip2D8IWz26HQtc
TiobKohX7/4UzjPgRBzIknkgoexO3nT4sAXgJCaVPtvHlGO2jB5yjnEHZQ3i9A5r
XRylXZsdj1VouJMfTohRWk6OX4+e0q2X/yJiEBviugxXZ8+U7W39M732OFWtyxXq
a1xSb5dihPzgll3Yh8lnA/1KuUxeKmkHYgPlBMSNsKEnqr1gl+VTtt6LNYXUpRLh
pSZEC4m6gZcSZPEzNwzrgf6vTg==
-----END CERTIFICATE-----