Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS396355.roa
File:                     AS396355.roa (raw, json)
Hash identifier:          RK1l6mDoVUEzi/YuRvZcYswuKAzQckY2wVP87NSFwx0=
Subject key identifier:   45:A2:FE:8B:78:C7:D7:07:BD:6B:8B:2A:02:3A:A0:55:EE:95:B0:2A
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       422ECE2CBEFF73850F3D408A97955F3154B8EE1D
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS396355.roa
Signing time:             Fri 25 Aug 2023 10:37:06 +0000
ROA not before:           Fri 25 Aug 2023 10:32:06 +0000
ROA not after:            Fri 23 Aug 2024 10:37:06 +0000
asID:                     396355
IP address blocks:        216.246.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Sep 2023 08:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2e:ce:2c:be:ff:73:85:0f:3d:40:8a:97:95:5f:31:54:b8:ee:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Aug 25 10:32:06 2023 GMT
            Not After : Aug 23 10:37:06 2024 GMT
        Subject: CN=45A2FE8B78C7D707BD6B8B2A023AA055EE95B02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:8e:3d:6f:5b:18:2b:b5:a6:0d:a5:f2:de:
                    79:e2:86:e2:53:06:30:1b:ee:8d:8b:50:bf:03:bd:
                    78:23:99:ef:b4:3f:86:b8:bb:9c:10:c7:e2:1d:0c:
                    08:45:4d:50:83:32:27:47:b1:52:72:51:36:07:a6:
                    db:e4:c1:b8:36:32:ae:a3:52:d2:39:3b:a9:87:b0:
                    7e:00:ed:6d:10:bf:18:f7:03:31:a1:83:b2:b4:e4:
                    64:e6:1e:3d:07:6f:1d:2e:67:c1:cc:80:2a:08:0a:
                    18:6a:91:0a:3f:84:46:24:0c:a8:4f:aa:e8:c7:fb:
                    91:22:aa:80:c2:a6:21:69:2b:83:6b:c4:9b:ee:62:
                    08:50:b2:9e:c5:11:43:5c:dd:32:7a:30:57:10:85:
                    03:e3:a0:1a:6c:e4:63:71:6b:aa:27:a7:fc:6b:af:
                    10:b6:ec:a2:ce:96:ba:45:5a:2c:eb:58:e0:91:b1:
                    5e:d4:14:3e:c5:57:9c:44:cd:dc:72:30:11:42:d5:
                    ae:a4:09:8d:2d:6c:13:eb:9c:9b:fb:72:8d:5b:44:
                    d5:ef:aa:5a:d7:db:5b:63:76:0b:33:a4:18:10:ea:
                    25:60:f2:5c:b7:01:66:20:c6:8d:7e:66:f9:a2:ba:
                    a5:b6:d6:cc:20:75:99:33:01:a4:ac:e7:00:54:b0:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:FE:8B:78:C7:D7:07:BD:6B:8B:2A:02:3A:A0:55:EE:95:B0:2A
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS396355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:b1:98:cd:a4:cc:83:c4:9f:64:9b:61:f5:81:e8:a8:99:
         3a:2e:cd:8b:40:ff:df:ee:58:c8:de:fe:e5:3e:e0:fb:c2:39:
         ff:13:e8:d6:1e:91:7b:9f:5c:0c:c7:54:b0:e1:1e:f3:18:f7:
         89:06:22:5e:f7:77:5b:dc:5d:a7:02:88:20:4c:9b:8c:33:70:
         92:5d:fc:ee:76:05:d2:d4:6c:50:81:90:29:8c:84:8d:22:93:
         0e:07:41:b7:da:a3:97:b2:44:d1:3e:b7:4d:31:6e:63:e8:67:
         d2:64:23:df:ff:b5:2c:a5:43:68:1e:e8:17:70:48:53:5a:83:
         af:db:eb:c0:8d:11:33:bf:69:72:04:d0:82:e3:e3:44:95:b7:
         61:7e:74:2c:10:f1:03:f4:a9:c8:29:d9:2c:fa:29:ea:fc:f8:
         5e:54:b7:ed:9e:d5:c2:ad:d9:f4:94:83:c2:b9:ba:f4:c2:a0:
         20:91:2c:f3:db:c7:28:99:a5:40:0f:0f:bb:0e:60:57:fb:1f:
         47:4c:b7:50:17:8a:ef:c5:ee:84:39:42:05:b6:04:3f:51:0f:
         f8:f6:ee:91:e9:6a:e4:d1:80:be:e5:c4:01:dc:79:ca:99:88:
         d4:f4:50:20:54:87:16:4d:4d:04:bf:74:bb:bb:ad:72:7c:0e:
         72:ad:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----