Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3233203d3e20323132343737.roa
File:                     3230342e31302e31382e302f32332d3233203d3e20323132343737.roa (raw, json)
Hash identifier:          RLu0TG756EUJY+KeC9pjKNqq6UlIkJI/fjxR8BLksJk=
Subject key identifier:   3A:25:A0:18:1D:10:AA:73:B4:93:40:B7:87:C1:C3:D0:98:44:C5:9C
Certificate issuer:       /CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
Certificate serial:       6332B2E78C3C96C7C0EAAFCA5183C35E5A7624A4
Authority key identifier: 3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3233203d3e20323132343737.roa
Signing time:             Sat 02 Sep 2023 23:56:10 +0000
ROA not before:           Sat 02 Sep 2023 23:51:10 +0000
ROA not after:            Sat 31 Aug 2024 23:56:10 +0000
asID:                     212477
IP address blocks:        204.10.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 07 Sep 2023 15:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:32:b2:e7:8c:3c:96:c7:c0:ea:af:ca:51:83:c3:5e:5a:76:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
        Validity
            Not Before: Sep  2 23:51:10 2023 GMT
            Not After : Aug 31 23:56:10 2024 GMT
        Subject: CN=3A25A0181D10AA73B49340B787C1C3D09844C59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:6a:0b:56:31:9e:f9:61:f7:90:06:3c:4e:
                    2b:c8:30:b8:2b:f8:f3:0f:dd:04:ee:ab:cc:67:76:
                    5d:1b:2e:b4:1f:52:b6:a3:76:95:9e:12:4f:fa:54:
                    81:1f:30:0f:2a:78:a9:ad:9d:03:4d:98:28:02:a3:
                    99:b6:4f:7c:f8:2d:a9:d1:3a:94:4b:2e:2d:fa:64:
                    35:d9:23:85:54:b7:c7:24:af:06:2c:48:4c:db:1b:
                    ce:5f:79:a4:6e:4c:50:ab:00:55:1a:76:f1:24:cd:
                    60:9c:f7:f0:91:d6:22:a2:f0:dd:89:22:f9:81:ec:
                    55:cc:3d:a1:ef:be:b7:53:1f:4d:ab:9d:22:8e:6d:
                    c6:da:cc:69:fd:69:ef:2b:8a:7c:5f:d3:d8:e0:88:
                    fc:c3:f1:80:73:68:43:b1:76:82:0f:df:b1:b8:08:
                    7b:ac:06:9b:ae:45:65:2b:de:05:a4:70:50:49:62:
                    b6:2f:61:76:04:9d:9b:01:aa:eb:07:5d:b5:9e:36:
                    33:f5:c0:e4:b5:22:be:40:f5:09:f3:33:fc:73:b0:
                    1e:a1:5a:53:a9:49:b0:fe:5f:1b:9f:61:1b:92:56:
                    b0:3a:fe:cb:d1:b8:f7:b0:76:ea:08:f5:ef:a2:16:
                    37:37:b1:93:11:d7:7d:bf:cf:09:86:b6:4b:2f:cf:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:25:A0:18:1D:10:AA:73:B4:93:40:B7:87:C1:C3:D0:98:44:C5:9C
            X509v3 Authority Key Identifier:
                keyid:3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3233203d3e20323132343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:1e:dd:f6:17:8a:de:75:2a:de:6a:12:33:00:46:eb:64:
         f8:94:09:a8:51:37:a5:1d:9d:63:4c:8c:d7:d1:0c:39:b1:44:
         e0:c2:85:3d:b5:ec:e4:b8:85:f4:04:99:de:f4:b9:3f:f9:32:
         c7:5b:d8:11:e0:12:bf:f7:74:b9:37:f1:0b:f7:49:a3:5d:a2:
         74:e4:4e:c9:5d:15:cb:82:8e:1c:d8:56:82:ea:04:39:bf:30:
         82:41:d4:12:f2:00:44:55:c6:2c:a9:c1:72:6d:6d:9d:ca:4a:
         f3:ae:c3:a4:6a:c8:a6:f1:bd:2a:19:81:0c:bd:64:59:f9:d9:
         a1:aa:26:22:ad:5b:f4:3e:5e:38:44:47:c0:02:25:d2:2a:e3:
         ab:6b:64:51:d0:94:1a:cf:c0:5b:32:a5:a6:87:cd:63:d5:3a:
         cf:f5:f9:d1:e5:32:ad:fc:ba:21:4a:02:6e:90:5c:16:ac:fa:
         c6:d4:61:da:1b:24:5c:d1:19:3f:ae:29:a0:d0:03:ab:cb:36:
         d6:3c:b0:93:9b:83:f6:e4:dd:9c:3a:ae:7d:fe:f9:44:a4:a6:
         5b:48:f4:23:a4:e9:18:b2:9f:dc:e5:c2:29:ae:35:46:36:af:
         ac:3b:e7:4c:b0:0b:1e:1c:88:59:5f:a3:37:a8:b4:58:92:8d:
         93:a0:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----