Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa
File:                     326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          rC5UDY0t+ClNgG/TkswJcm6o9uibP/15Cz1Dnhk6kfs=
Subject key identifier:   22:A6:E7:96:70:D8:FB:8B:AD:5A:AB:DA:AC:28:E3:EB:75:E2:E2:8E
Certificate issuer:       /CN=412292C0E24D8885B4760BC708F9E477870D9C70
Certificate serial:       7B142296E44BBB3A38CA7E210A27ABC37F00093C
Authority key identifier: 41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 26 Feb 2024 12:08:50 +0000
ROA not before:           Mon 26 Feb 2024 12:03:50 +0000
ROA not after:            Mon 24 Feb 2025 12:08:50 +0000
asID:                     50224
IP address blocks:        2a07:54c0:ffee::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Apr 2024 11:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:14:22:96:e4:4b:bb:3a:38:ca:7e:21:0a:27:ab:c3:7f:00:09:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412292C0E24D8885B4760BC708F9E477870D9C70
        Validity
            Not Before: Feb 26 12:03:50 2024 GMT
            Not After : Feb 24 12:08:50 2025 GMT
        Subject: CN=22A6E79670D8FB8BAD5AABDAAC28E3EB75E2E28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:24:77:d8:94:aa:8b:b9:63:1c:3b:e6:38:
                    be:c4:a6:a7:fe:c6:5b:f2:2e:47:20:30:d5:b9:a5:
                    58:69:4a:5d:6a:37:c3:6b:20:de:be:0d:41:82:75:
                    12:ac:5d:92:a2:5d:e6:18:39:b5:15:2b:71:c7:08:
                    8e:60:c3:78:73:df:88:9a:fd:71:24:50:c4:d7:6f:
                    c5:83:b5:26:22:98:31:e1:b9:ca:b2:a6:28:2f:52:
                    e2:26:c1:d9:4b:cc:c6:5f:89:d6:a9:b5:96:99:c4:
                    78:86:88:5c:5e:56:e3:a7:8f:4c:ef:43:c5:c8:c3:
                    d5:07:5c:64:e8:0e:1d:00:3c:c5:4c:55:e2:31:e7:
                    02:7b:48:97:91:2a:08:d1:4d:a2:6a:ec:cf:92:ac:
                    18:e5:be:ab:b3:ff:c3:d4:43:fd:11:92:6a:67:11:
                    b8:3c:88:a6:14:aa:37:18:90:21:72:fc:3c:7f:af:
                    46:31:e1:37:75:86:16:98:92:fd:68:2d:f0:43:07:
                    6d:d6:38:19:88:9e:34:be:17:d6:88:dc:34:88:d2:
                    fd:7a:8b:34:ba:ca:05:71:51:9c:42:9c:7d:d6:6a:
                    a4:93:f1:01:97:71:cd:0f:d0:f2:df:b6:f6:14:5e:
                    5f:c9:5e:11:55:90:9a:ff:fe:0e:15:e7:b7:fd:8d:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:E7:96:70:D8:FB:8B:AD:5A:AB:DA:AC:28:E3:EB:75:E2:E2:8E
            X509v3 Authority Key Identifier:
                keyid:41:22:92:C0:E2:4D:88:85:B4:76:0B:C7:08:F9:E4:77:87:0D:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/412292C0E24D8885B4760BC708F9E477870D9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/412292C0E24D8885B4760BC708F9E477870D9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/326130373a353463303a666665653a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:e9:20:7a:5c:26:45:fd:88:a1:28:6f:f6:04:7a:d0:45:
         86:9b:ac:2e:7d:9e:53:ee:5e:33:11:35:82:4a:b7:7e:c0:1a:
         6f:02:f9:72:dd:b8:26:d5:e7:39:ec:02:f5:b2:1d:10:e3:3f:
         11:b9:cc:51:a3:b5:34:cb:8d:ae:25:d0:41:18:b6:4f:55:21:
         38:9a:60:47:1a:a5:2f:fd:c8:e1:c1:b9:90:3e:22:b6:4e:63:
         53:61:5c:46:a4:ba:09:72:e1:88:46:d0:ac:21:d2:7d:c4:2e:
         ae:98:33:18:cc:45:04:82:6d:b7:fe:63:74:a8:fc:0a:37:54:
         58:83:c1:d1:6b:51:53:79:fb:c4:32:bc:f4:a2:73:99:9c:35:
         43:80:30:88:d7:a8:ca:17:61:ba:8d:7f:1e:3f:18:d3:b6:e4:
         1b:2e:ab:8a:84:be:0b:e2:fc:8d:cf:45:dd:52:18:6b:7d:0a:
         77:d5:b9:94:9b:57:e0:51:cd:ba:c4:30:a1:a7:b6:07:bc:85:
         7d:ad:d6:23:55:d6:cd:dd:55:23:47:e8:ab:56:3f:36:38:a8:
         0b:d8:32:76:e9:a4:32:15:36:11:53:92:c5:76:4b:41:a5:ca:
         26:1e:6d:b7:f3:1d:d7:c8:ee:b6:97:98:0f:85:c5:0d:77:0f:
         b6:72:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----