Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          eUUpPGyfaKwELJ9gZZppcghRT6WwaZtv5LRoek366RU=
Subject key identifier:   80:08:6D:EF:68:08:FB:50:42:A0:9C:42:9C:FD:48:C0:C8:45:C1:3D
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       3DCB397E391E1DE49A384E679A2151F01F1A2242
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa
Signing time:             Mon 26 Feb 2024 12:08:46 +0000
ROA not before:           Mon 26 Feb 2024 12:03:46 +0000
ROA not after:            Mon 24 Feb 2025 12:08:46 +0000
asID:                     48581
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 11:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cb:39:7e:39:1e:1d:e4:9a:38:4e:67:9a:21:51:f0:1f:1a:22:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:46 2024 GMT
            Not After : Feb 24 12:08:46 2025 GMT
        Subject: CN=80086DEF6808FB5042A09C429CFD48C0C845C13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:27:a6:a2:8f:3e:4c:03:d4:69:af:53:47:07:
                    be:ec:19:c8:34:eb:77:ce:8a:aa:d5:e2:80:87:e7:
                    6f:8e:6b:96:73:21:f7:a5:c2:a7:49:f9:b3:89:82:
                    11:95:cf:a2:5f:e9:41:1c:3a:99:73:58:65:c2:d9:
                    99:3b:9b:2e:2f:b0:5a:56:1e:84:03:e0:81:9a:3c:
                    96:41:85:e9:2c:b2:a5:38:e7:de:67:0a:5a:56:ab:
                    bb:94:77:67:a8:93:b9:a9:f9:35:c1:34:0a:5e:7f:
                    c1:f9:7f:17:50:ae:8d:2c:c5:a6:17:8a:9f:3a:2c:
                    97:22:71:ec:29:91:90:82:f8:16:ab:87:bc:6a:ea:
                    d1:be:ce:2a:e1:59:10:45:35:b4:e8:aa:4b:d6:85:
                    78:b3:22:f8:3f:09:b2:ac:32:b4:b5:d2:c8:0f:99:
                    d6:e3:4a:ab:c0:b7:b2:55:d4:5f:6c:b4:61:1e:47:
                    32:08:00:b5:83:b0:4c:02:5b:d3:1d:9b:e9:53:cb:
                    05:67:d5:53:24:af:57:4a:42:d0:c2:a1:a3:46:54:
                    17:05:8a:b2:e9:91:87:ec:19:d2:96:50:33:ff:56:
                    58:30:56:13:a7:fa:93:36:7c:3a:50:a4:23:62:56:
                    b6:d5:e7:ca:76:e5:26:e5:d3:b4:b8:28:72:e0:28:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:08:6D:EF:68:08:FB:50:42:A0:9C:42:9C:FD:48:C0:C8:45:C1:3D
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:ea:b1:49:b6:ba:6a:01:35:57:76:22:5d:ef:d8:b8:1b:
         44:fb:80:a2:b5:62:9f:27:de:31:d8:24:3d:7e:57:53:6d:03:
         2a:ad:1c:b1:f7:b8:2e:a4:71:17:10:0e:ce:f2:3d:e8:c7:73:
         de:bc:c9:ab:4a:15:58:b5:a2:72:89:97:37:8f:78:4a:a9:96:
         49:cb:8f:d5:04:12:fd:69:f9:e8:a0:b2:da:1e:85:60:a1:3e:
         8a:1e:56:40:2e:2c:83:3b:fe:2a:f4:eb:de:e0:62:89:d0:4e:
         85:dc:e9:9d:b3:9c:d2:ce:cd:8d:80:bf:35:4e:c6:5e:d8:6d:
         81:82:ce:2d:3a:5d:b9:a6:bd:62:b5:d4:34:62:3b:a8:08:72:
         97:d0:26:cf:8d:01:92:fc:f6:aa:b0:a5:e0:00:e1:6d:04:7f:
         26:f5:d4:6a:34:a1:03:1c:08:ce:03:b7:cc:ac:8d:96:10:47:
         e7:90:c8:ef:41:4c:af:bc:c4:81:d3:72:76:55:55:24:b7:35:
         fe:5f:1a:d7:59:db:a4:43:93:07:f2:15:b7:6c:c6:97:6a:5e:
         4b:64:1e:3a:f9:57:1b:88:a3:bb:17:1f:de:4e:3d:0f:b2:51:
         77:e6:37:80:4b:96:4e:61:4b:8a:a5:c9:72:e2:36:dc:c2:1e:
         05:a1:11:ac
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUPcs5fjkeHeSaOE5nmiFR8B8aIkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyODQzNzg4Nzc3QTQzMjczMzIyMDk2NTEwRUExMDg4
MEU3RTVFQTAeFw0yNDAyMjYxMjAzNDZaFw0yNTAyMjQxMjA4NDZaMDMxMTAvBgNV
BAMTKDgwMDg2REVGNjgwOEZCNTA0MkEwOUM0MjlDRkQ0OEMwQzg0NUMxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyJ6aijz5MA9Rpr1NHB77sGcg0
63fOiqrV4oCH52+Oa5ZzIfelwqdJ+bOJghGVz6Jf6UEcOplzWGXC2Zk7my4vsFpW
HoQD4IGaPJZBhekssqU4595nClpWq7uUd2eok7mp+TXBNApef8H5fxdQro0sxaYX
ip86LJcicewpkZCC+Barh7xq6tG+zirhWRBFNbToqkvWhXizIvg/CbKsMrS10sgP
mdbjSqvAt7JV1F9stGEeRzIIALWDsEwCW9Mdm+lTywVn1VMkr1dKQtDCoaNGVBcF
irLpkYfsGdKWUDP/VlgwVhOn+pM2fDpQpCNiVrbV58p25Sbl07S4KHLgKJv1AgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQUgAht72gI+1BCoJxCnP1IwMhFwT0wHwYDVR0j
BBgwFoAUiShDeId3pDJzMiCWUQ6hCIDn5eowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMi84OTI4NDM3ODg3
NzdBNDMyNzMzMjIwOTY1MTBFQTEwODgwRTdFNUVBLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj
YWUzZi8wLzg5Mjg0Mzc4ODc3N0E0MzI3MzMyMjA5NjUxMEVBMTA4ODBFN0U1RUEu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkw
YzlmZWVjMTI0OWUvMi8zMjYxMzAzNzNhMzUzNDYzMzAzYTY2NjY2NTY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzODM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMD/7jAN
BgkqhkiG9w0BAQsFAAOCAQEAJ8PqsUm2umoBNVd2Il3v2LgbRPuAorVinyfeMdgk
PX5XU20DKq0csfe4LqRxFxAOzvI96Mdz3rzJq0oVWLWicomXN494SqmWScuP1QQS
/Wn56KCy2h6FYKE+ih5WQC4sgzv+KvTr3uBiidBOhdzpnbOc0s7NjYC/NU7GXtht
gYLOLTpduaa9YrXUNGI7qAhyl9Amz40Bkvz2qrCl4ADhbQR/JvXUajShAxwIzgO3
zKyNlhBH55DI70FMr7zEgdNydlVVJLc1/l8a11nbpEOTB/IVt2zGl2peS2QeOvlX
G4ijuxcf3k49D7JRd+Y3gEuWTmFLiqXJcuI23MIeBaERrA==
-----END CERTIFICATE-----