Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          eIOq7dmyf5kbu/W1bWlW4q9h3FlWWcr1YBAI17eg72o=
Subject key identifier:   01:7E:1A:24:1C:26:CB:69:A3:39:CA:66:09:98:14:A2:91:60:31:EF
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       2EEBA4B925EBF2FD59876D19A0EF66EB67A2DFC9
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:42:25 +0000
ROA not before:           Thu 02 Nov 2023 11:37:25 +0000
ROA not after:            Thu 31 Oct 2024 11:42:25 +0000
asID:                     5650
IP address blocks:        172.108.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 05:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:eb:a4:b9:25:eb:f2:fd:59:87:6d:19:a0:ef:66:eb:67:a2:df:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Nov  2 11:37:25 2023 GMT
            Not After : Oct 31 11:42:25 2024 GMT
        Subject: CN=017E1A241C26CB69A339CA66099814A2916031EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:48:31:a4:a8:c4:ff:5e:b7:3e:d8:ef:16:
                    29:c4:64:5f:c6:8d:61:8a:29:1c:cd:af:b8:71:7e:
                    ac:44:af:e6:7b:90:ae:c7:cf:ef:7e:bb:59:05:d0:
                    9f:81:9f:50:10:e1:db:89:bd:c1:f6:56:77:f9:e6:
                    33:b1:c9:f6:f7:97:7f:5a:c0:2d:c3:48:0c:2d:2e:
                    a1:2d:76:ef:aa:7a:b7:06:25:d1:b5:e6:b0:84:ae:
                    10:53:f6:a7:32:f2:b0:84:34:13:f4:0a:8f:f7:74:
                    13:61:52:20:21:e7:0e:1b:8a:ee:81:9a:0c:c9:b6:
                    f0:70:8c:06:3f:1b:bb:a0:fd:2f:17:fd:4b:61:18:
                    ff:2e:45:26:d0:99:7a:e6:dc:79:0a:a1:c0:09:cd:
                    0b:3e:a3:39:b3:45:55:fa:02:ee:84:e7:06:92:de:
                    51:cb:ae:8a:90:bd:bb:1f:ef:47:ce:bd:3f:22:44:
                    b0:24:5a:21:6a:56:ce:94:a5:6e:e8:15:cb:92:86:
                    b7:9f:e8:0f:67:1e:ba:e9:98:e4:23:df:ff:69:a6:
                    3c:0b:5b:fb:6a:1e:c8:43:c2:ea:bd:df:f1:30:62:
                    18:3b:43:5b:b5:9d:de:4a:27:88:fb:b1:65:6b:bb:
                    4b:3d:74:5d:79:b0:69:a6:d7:d0:80:0d:f5:e7:68:
                    d2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7E:1A:24:1C:26:CB:69:A3:39:CA:66:09:98:14:A2:91:60:31:EF
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:84:87:1d:04:3d:16:7d:92:29:0b:dc:b7:99:e7:cc:aa:
         84:a4:5b:c1:a6:80:88:4e:30:16:3a:7e:b3:6e:9a:3b:be:1c:
         5a:da:76:88:1d:80:5e:1c:3e:d9:11:e7:aa:0c:fc:41:71:6d:
         bb:9f:ef:4c:b3:d9:db:e5:57:7c:e7:34:89:08:fa:55:09:7a:
         b1:2f:d6:20:59:2e:35:4a:bd:e0:cd:01:52:52:99:9f:25:f6:
         a5:aa:68:ca:83:d4:8a:e7:46:35:5d:14:fd:3a:bb:4b:8e:28:
         da:2b:d8:8f:b3:6f:49:88:df:70:fe:5e:ff:b6:6c:45:b9:e7:
         fb:ac:10:bb:45:15:45:12:04:cd:7b:41:df:00:7a:8c:55:4a:
         61:96:54:11:e3:53:76:91:b1:af:ed:4b:86:b2:bc:f8:23:d5:
         11:c0:39:af:c6:cb:2c:6a:22:b7:70:8c:93:2d:07:45:de:92:
         15:d4:43:66:a5:86:38:ca:70:27:3e:94:36:fe:d4:08:da:6c:
         40:bd:6b:4b:46:91:ea:89:1d:89:a2:1b:c5:7e:8e:1b:cf:56:
         40:8d:27:16:f1:60:56:cf:b4:b2:c3:f3:ed:7f:a3:92:e9:72:
         d2:d6:30:d9:76:72:97:e2:e2:2e:80:ec:10:9a:6e:d6:6b:84:
         25:d8:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----