Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130362e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3130362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          O5/HMLltHLRbIOlrAbFdQ/D8W3cqDU/z+keJ1aOFZwo=
Subject key identifier:   92:52:D1:04:BC:02:C7:24:57:C4:F7:EA:BA:18:2B:55:E4:EB:76:15
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       388208AD826F077B399759B40C2778DC4C63F100
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130362e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:40:23 +0000
ROA not before:           Thu 02 Nov 2023 11:35:23 +0000
ROA not after:            Thu 31 Oct 2024 11:40:23 +0000
asID:                     5650
IP address blocks:        172.108.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:82:08:ad:82:6f:07:7b:39:97:59:b4:0c:27:78:dc:4c:63:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:35:23 2023 GMT
            Not After : Oct 31 11:40:23 2024 GMT
        Subject: CN=9252D104BC02C72457C4F7EABA182B55E4EB7615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:4f:08:47:e1:c8:1f:b0:ac:15:d3:24:45:
                    27:17:06:39:59:1d:ce:78:0d:5e:7b:c9:24:47:50:
                    23:13:3a:19:0e:2a:8d:bc:35:c6:c9:f6:b1:d1:83:
                    fa:77:26:18:5b:b9:8e:66:6b:f7:a4:75:e1:fa:d4:
                    54:dc:55:84:9e:6f:7d:c9:90:7f:ae:74:2b:a5:d2:
                    57:eb:c8:4d:5e:87:a0:60:0d:13:35:a7:d8:96:b2:
                    aa:44:14:f9:46:6f:cc:a3:e8:0c:5f:42:c4:71:62:
                    b3:b6:d2:43:e5:bf:64:57:c4:50:1e:49:56:53:24:
                    8b:d4:e2:ae:7b:0f:ab:b0:87:18:2d:81:a7:c9:1d:
                    f7:1b:b3:c8:f6:ad:5f:98:b3:5d:6c:5a:ae:55:71:
                    a5:21:91:a8:a2:db:de:03:54:fa:c6:ce:98:4c:6a:
                    d6:96:1f:b6:8d:ae:80:e1:62:b2:c7:dd:5a:43:04:
                    c4:99:45:59:fa:d6:02:9b:10:9b:bb:6d:d8:c0:f0:
                    e2:07:f2:e5:38:11:40:4c:00:a3:49:b6:7e:92:b1:
                    f5:80:52:a6:7c:93:51:08:fd:24:d6:c5:5b:96:a8:
                    77:9c:19:c4:33:ab:59:3c:75:0d:24:db:77:05:4b:
                    c9:90:f9:02:63:71:0b:7d:3b:18:5a:9c:a7:4a:40:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:52:D1:04:BC:02:C7:24:57:C4:F7:EA:BA:18:2B:55:E4:EB:76:15
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130362e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:c1:68:3c:1a:60:4a:a7:e3:9c:3a:cd:9b:f1:a6:0c:0c:
         48:29:5e:39:4b:75:d4:ee:3d:98:d0:35:3e:4a:d1:b5:10:8b:
         b4:9f:c5:95:3e:56:af:11:2a:b1:00:e0:d6:17:41:0b:4c:dc:
         48:cf:8f:6f:47:e5:01:1b:1b:ca:ff:a8:25:27:13:fc:1b:8c:
         ca:43:37:76:86:4d:47:88:2f:70:74:c9:16:0d:e1:7f:ca:ff:
         a9:ad:46:a7:54:a9:64:2a:1c:ac:7a:ce:0c:42:14:66:16:24:
         65:74:d3:ba:d7:c5:00:c1:52:42:6c:df:39:86:2c:c9:e0:68:
         00:b1:08:bd:b5:f4:7a:6d:b5:d1:52:82:3e:a5:1a:0b:a1:34:
         b6:9b:5d:25:6d:20:f0:06:c5:89:b3:91:12:93:02:f5:16:b3:
         b9:6e:0e:39:71:c8:56:5c:7e:9e:6e:04:37:58:02:c3:91:76:
         65:ae:a1:00:99:c0:aa:9b:0a:5b:ce:96:51:c3:80:09:78:1a:
         c4:3b:c9:ff:ff:d2:74:f7:66:c9:9d:ad:69:67:9c:19:8c:b6:
         dc:da:c6:c2:78:5e:83:cd:45:7d:99:47:0e:b8:81:86:fc:c3:
         51:00:45:cf:91:b5:3b:c6:ba:b7:65:ea:8a:98:1b:a9:32:bf:
         6c:58:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----