Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203433363431.roa
File:                     3136322e3231382e32372e302f32342d3234203d3e203433363431.roa (raw, json)
Hash identifier:          rV3LsL/IpVd3Hxt54Rj8kD3THqBWNG/FSJ9Khw6ey1Y=
Subject key identifier:   FA:B1:90:F1:A7:D0:A5:D2:84:C8:9E:C8:FA:44:2C:BD:55:98:15:9F
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       32B8A89D1C0F7921F90CEF6B63C76EFBD5AB77FF
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203433363431.roa
Signing time:             Wed 17 Jan 2024 17:30:31 +0000
ROA not before:           Wed 17 Jan 2024 17:25:31 +0000
ROA not after:            Wed 15 Jan 2025 17:30:31 +0000
asID:                     43641
IP address blocks:        162.218.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b8:a8:9d:1c:0f:79:21:f9:0c:ef:6b:63:c7:6e:fb:d5:ab:77:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jan 17 17:25:31 2024 GMT
            Not After : Jan 15 17:30:31 2025 GMT
        Subject: CN=FAB190F1A7D0A5D284C89EC8FA442CBD5598159F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:5d:c9:ad:06:5e:32:c3:f6:06:ab:26:df:
                    ea:ff:18:a2:60:58:5e:69:e4:c6:3c:d0:3f:f1:4e:
                    43:fc:0e:08:bf:20:1d:04:af:dd:e3:76:ed:cf:81:
                    23:1a:4d:c1:62:c4:64:fc:f4:63:7c:8e:ff:58:3e:
                    cc:74:60:2d:3a:3f:b4:b4:7b:ae:0a:8f:33:9b:31:
                    b6:f9:3d:d6:15:03:54:c1:fd:92:7d:c5:76:53:73:
                    af:43:41:38:2a:54:94:5e:c3:82:3f:78:f4:e3:bb:
                    8b:bd:63:ec:51:e7:3c:de:6f:20:3c:f9:a8:50:e6:
                    71:a9:b0:20:d8:89:10:ac:a7:5d:43:9f:09:ee:cb:
                    e5:28:fc:0b:09:b1:a7:6e:e0:e4:4d:3e:ae:b6:73:
                    97:27:e9:7a:78:9f:49:d1:bd:92:bf:40:bf:4f:15:
                    cc:8c:82:a4:db:c2:ed:ce:d6:fb:5f:9a:3e:d1:67:
                    44:0c:41:42:61:46:a6:17:a4:ec:c7:0f:c9:96:1a:
                    c2:92:8f:48:b6:d4:72:39:2b:d7:e9:96:3b:d0:4d:
                    ae:a4:e6:f1:9b:c0:9d:ca:89:85:29:00:72:7f:1e:
                    61:15:9c:e2:2f:79:ae:5e:6e:c5:5c:90:7c:4e:08:
                    df:8d:a7:ac:fb:1a:d3:89:47:54:e6:ab:f2:a3:96:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B1:90:F1:A7:D0:A5:D2:84:C8:9E:C8:FA:44:2C:BD:55:98:15:9F
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203433363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:df:4a:d5:88:55:41:12:6d:96:2f:0c:b2:a9:5a:1e:b5:14:
         6c:cd:a2:d0:70:18:41:99:d1:d5:6f:18:c2:8e:83:15:3c:29:
         93:51:f8:2f:f2:46:c5:4c:0d:aa:d5:41:86:07:cc:b5:4b:c0:
         20:8f:10:d4:f6:df:9b:21:44:0d:42:25:44:88:b8:d5:4f:cb:
         88:74:25:6e:1e:70:f2:05:27:ad:f4:7e:fc:10:00:27:1e:c4:
         bf:47:67:35:44:f7:26:5a:8b:6c:81:67:cd:d8:ac:d3:ad:e6:
         d9:54:85:66:dd:be:53:3c:ce:84:97:7c:6f:4d:7d:6c:2f:7e:
         64:3e:e1:92:2a:98:c2:2f:c3:f8:c7:d4:49:60:1e:d7:41:35:
         45:dd:35:42:a7:a3:39:3a:08:2e:4d:17:9a:06:f2:48:7c:24:
         68:c3:20:41:8f:3b:90:dc:c0:97:c0:b5:5c:39:bd:24:51:8e:
         53:8b:fc:ae:30:a7:26:28:31:96:9b:6d:21:91:77:57:21:d2:
         37:d8:7c:39:28:7d:a6:99:85:ee:9e:7d:0e:1d:98:78:57:f3:
         bc:bc:43:e6:bb:b1:35:1e:32:6c:05:06:e2:00:4c:35:bc:a4:
         09:0a:65:fc:29:59:df:b5:cd:7f:99:b6:b6:77:5c:b8:98:25:
         ca:d0:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----