Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          tn4NoLfstUh7hib4bFP0lLvJ9+ZeAIV9oaaAFiKqNjQ=
Subject key identifier:   C7:DB:80:F8:4F:0F:9D:9E:06:17:9B:7E:6B:20:47:E0:5F:50:9D:ED
Certificate issuer:       /CN=892843788777A43273322096510EA10880E7E5EA
Certificate serial:       65C8D8684332756A24158C775EB042C2978550AC
Authority key identifier: 89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 26 Feb 2024 12:08:47 +0000
ROA not before:           Mon 26 Feb 2024 12:03:47 +0000
ROA not after:            Mon 24 Feb 2025 12:08:47 +0000
asID:                     50224
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 11:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:d8:68:43:32:75:6a:24:15:8c:77:5e:b0:42:c2:97:85:50:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892843788777A43273322096510EA10880E7E5EA
        Validity
            Not Before: Feb 26 12:03:47 2024 GMT
            Not After : Feb 24 12:08:47 2025 GMT
        Subject: CN=C7DB80F84F0F9D9E06179B7E6B2047E05F509DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:ce:66:84:76:20:9f:17:f5:6c:22:5e:a3:
                    b8:94:2d:be:27:b5:50:7d:82:13:a2:0a:b7:e8:8b:
                    a3:74:f6:9e:6b:34:01:37:0c:cf:bc:27:d0:09:6d:
                    a4:a5:8e:8e:23:7a:5a:7e:9d:33:f5:6c:dd:da:a4:
                    5b:f3:8d:1d:1a:3d:07:48:ac:d1:43:53:13:7e:37:
                    04:5c:9a:b0:be:ac:68:39:2b:7f:04:f4:14:be:e6:
                    8f:71:53:5b:bb:3e:c6:b9:f2:d7:63:8d:89:de:4b:
                    36:6f:74:1d:c9:27:a0:01:e2:76:e3:dc:05:ae:e2:
                    9d:36:c5:ba:ba:f5:16:48:12:1d:45:07:92:1a:4c:
                    24:df:d4:f5:7a:10:71:cf:24:79:8c:81:4a:99:9c:
                    7a:df:c0:5c:f3:e8:93:90:95:39:a9:fe:09:80:93:
                    74:61:e3:ca:44:0a:77:be:2f:5b:eb:22:9e:03:97:
                    90:71:47:50:9d:20:37:4c:71:1b:c5:7b:a8:01:16:
                    98:23:ea:08:b5:19:ed:5d:1e:9d:9e:56:94:3b:75:
                    65:dc:1e:57:4f:a8:dc:15:02:0d:c2:e3:30:15:92:
                    38:4c:9e:57:0d:5e:4b:95:93:a5:47:ae:15:72:0a:
                    a6:32:42:0c:ec:73:89:13:f6:ae:fc:3f:b7:67:01:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:80:F8:4F:0F:9D:9E:06:17:9B:7E:6B:20:47:E0:5F:50:9D:ED
            X509v3 Authority Key Identifier:
                keyid:89:28:43:78:87:77:A4:32:73:32:20:96:51:0E:A1:08:80:E7:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/892843788777A43273322096510EA10880E7E5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/892843788777A43273322096510EA10880E7E5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/2/326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:23:15:15:12:38:71:1a:6e:24:43:24:5b:54:fa:00:df:de:
         ea:e4:e7:0d:c0:b5:ab:cc:d3:40:26:e0:dc:da:36:ce:6c:7a:
         77:31:2b:af:17:f1:0d:8a:00:3e:6c:c1:b2:5d:a9:93:dc:1d:
         89:18:a6:83:32:df:22:40:cc:9c:48:a7:22:d0:50:0b:b3:7f:
         70:13:06:5b:ff:25:5b:d6:6c:c9:ac:b4:42:70:32:3e:e4:f1:
         4e:e2:7a:0c:77:3e:bc:62:ab:ad:c0:34:4a:db:76:a5:99:0b:
         22:48:e8:16:dd:43:95:66:96:d7:32:8a:c8:fe:73:f3:4c:0f:
         e3:9c:37:69:f7:8f:b8:13:b8:09:8b:c8:56:70:f9:f7:61:26:
         fe:94:d8:bf:c2:ce:2d:f6:b0:01:5a:11:56:ad:24:57:cc:13:
         87:3f:42:fd:74:68:91:fb:5e:5c:b8:cb:e5:a9:38:42:b3:20:
         1b:2d:fe:89:0a:d8:3f:09:fc:fa:81:04:db:5a:d3:94:cc:40:
         1a:39:6d:32:94:77:c5:4a:ca:fe:71:e5:5d:f6:6c:de:a3:e8:
         ad:2c:db:75:e0:cd:3e:fb:4e:f0:05:0d:78:19:91:09:34:f0:
         36:8a:7e:4f:7c:1a:65:83:e4:bf:1e:6f:1f:fa:8d:81:32:af:
         e8:da:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----