Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS43260.roa
File:                     AS43260.roa (raw, json)
Hash identifier:          wpsdAh1IGHVasCoRzrDB+iX4DoaZ5Nj+53r7Emdf8AQ=
Subject key identifier:   1D:D4:8B:92:0A:E4:AD:F2:98:66:65:A7:67:E4:D6:CC:19:1C:36:20
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       2F2AE00B6E11EAAA56F2A81D5EE430CA3C7F7AE2
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS43260.roa
Signing time:             Thu 14 Sep 2023 14:00:05 +0000
ROA not before:           Thu 14 Sep 2023 13:55:05 +0000
ROA not after:            Thu 12 Sep 2024 14:00:05 +0000
asID:                     43260
IP address blocks:        66.225.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Nov 2023 18:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2a:e0:0b:6e:11:ea:aa:56:f2:a8:1d:5e:e4:30:ca:3c:7f:7a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Sep 14 13:55:05 2023 GMT
            Not After : Sep 12 14:00:05 2024 GMT
        Subject: CN=1DD48B920AE4ADF2986665A767E4D6CC191C3620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:65:32:31:57:1b:6c:7c:74:1e:2d:64:f9:
                    22:3b:3f:57:cd:bf:b3:38:cc:35:0e:f0:1a:39:7c:
                    7a:43:8d:db:76:03:0f:60:fa:19:4f:05:d8:71:d5:
                    95:0b:6d:78:07:fe:a1:0c:86:53:4e:6f:99:52:76:
                    0f:9f:d3:46:3b:b4:e6:87:60:28:81:31:7f:ce:ec:
                    0e:5b:56:15:ba:02:97:e0:b9:d1:02:e6:bd:5e:ea:
                    d2:02:42:f7:82:a7:2a:6d:0c:9e:a4:3a:8c:28:90:
                    bd:86:3d:ba:ba:ee:ac:a8:93:40:00:10:14:21:72:
                    12:83:94:a9:0f:68:21:fd:5c:4d:f0:88:8c:c0:67:
                    15:1f:8e:1e:3f:e2:19:12:7d:13:ab:7a:22:a5:10:
                    d7:20:0d:ff:00:fa:0e:d4:81:d8:37:6e:5b:5e:29:
                    75:06:3d:d6:48:2b:a8:68:4f:a0:95:9f:4e:74:44:
                    50:01:58:35:3a:a2:cf:6f:bf:04:97:de:0f:4b:8c:
                    f7:5b:0d:76:4e:70:40:b1:24:63:f4:c6:5a:e5:f6:
                    4d:f3:61:8c:63:af:54:46:6b:1c:73:ba:cb:fd:73:
                    26:d4:66:34:44:70:0d:19:55:30:0a:c7:89:b6:5d:
                    73:b3:0d:1c:1d:10:4f:86:1c:95:83:32:3f:07:b5:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:8B:92:0A:E4:AD:F2:98:66:65:A7:67:E4:D6:CC:19:1C:36:20
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS43260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:7a:89:e1:fc:3b:10:0e:b7:75:21:4c:fd:07:44:e9:e2:77:
         1f:45:b2:49:e1:df:02:3b:ca:3c:b4:7e:90:0c:4a:cd:ed:fa:
         b8:73:ec:67:c9:0b:88:a5:2b:aa:4b:ef:c5:fa:af:ee:de:09:
         7c:fa:78:83:7a:05:65:01:73:9c:71:d4:63:23:0a:54:16:fa:
         0d:9b:6f:59:21:d5:eb:19:55:2e:ca:d8:e5:da:9b:2e:00:16:
         ab:a2:3b:6d:32:6e:dc:e7:9e:b0:1c:5b:fd:42:65:c8:1a:a3:
         af:50:e2:c1:42:c2:38:7e:52:5d:91:2f:ee:dc:7b:a5:74:0a:
         dc:d7:e9:18:80:85:35:3f:60:73:52:49:b8:06:34:a4:f8:b5:
         b9:f8:2b:7b:c6:27:01:96:f8:d9:88:3c:28:f0:de:b6:f7:9e:
         5b:c5:1f:24:30:75:6d:5e:24:07:c1:02:9b:64:a7:ac:b2:76:
         4a:da:5a:4d:a4:0a:31:9b:c2:30:1f:f9:49:50:50:52:ef:6a:
         f6:ae:07:a6:0f:c9:03:39:dc:4d:8f:eb:dd:3c:2a:48:0b:0a:
         32:d4:a7:3d:3d:fa:bb:3a:cd:74:5e:e5:d1:d2:bc:f4:25:94:
         3c:99:47:1d:45:70:8c:2d:58:97:22:cf:e2:40:41:33:ae:bf:
         e6:5f:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----