Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203537313536.roa
File:                     32332e3136322e3130342e302f32342d3234203d3e203537313536.roa (raw, json)
Hash identifier:          H4EjvF1YL1KwrjQUdgMpHnUQ0zlG0M9ro8z7mHQn9S4=
Subject key identifier:   D7:17:96:29:73:7E:B0:6B:3C:38:31:6C:4E:C2:BC:8E:B5:92:5F:97
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       1C70C00BBFC8B318813ECBC01A23472D7140F5A3
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203537313536.roa
Signing time:             Sat 12 Oct 2024 23:14:54 +0000
ROA not before:           Sat 12 Oct 2024 23:09:54 +0000
ROA not after:            Sat 11 Oct 2025 23:14:54 +0000
asID:                     57156
IP address blocks:        23.162.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 13:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:70:c0:0b:bf:c8:b3:18:81:3e:cb:c0:1a:23:47:2d:71:40:f5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Oct 12 23:09:54 2024 GMT
            Not After : Oct 11 23:14:54 2025 GMT
        Subject: CN=D7179629737EB06B3C38316C4EC2BC8EB5925F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:95:77:4f:c9:bf:dd:3b:8f:42:19:37:ad:
                    54:e7:ca:19:2e:a3:c0:c2:0a:a1:d8:fd:6a:3d:7e:
                    2a:7b:fb:dc:27:f1:d4:0a:7b:87:18:bb:6c:df:46:
                    2c:00:8f:13:58:4f:85:52:1e:67:f4:e6:de:c8:b2:
                    43:cd:1e:74:91:06:20:24:d5:12:0b:ef:21:9a:b6:
                    ff:fb:39:08:db:a3:3a:75:47:ab:e7:b3:5b:9c:8b:
                    1a:c5:0e:51:ae:23:21:36:13:97:69:48:b9:9c:11:
                    6f:27:6c:2f:7f:5a:e0:60:71:03:4d:b2:16:b8:1b:
                    79:d3:d0:b1:86:91:e4:1e:e6:db:ae:ac:65:59:39:
                    d7:41:fe:d1:16:20:9a:9a:c9:b0:f6:46:40:b1:07:
                    7f:b4:b6:6c:46:aa:83:84:10:f0:43:a4:52:e4:11:
                    f1:e2:93:90:b7:aa:6e:84:48:b5:4d:ae:1c:4c:e7:
                    2a:de:27:26:6b:cf:ed:c5:58:9c:6d:23:37:ba:b9:
                    fc:0a:80:2d:06:9f:37:a4:1f:2a:bc:8d:d9:d5:b0:
                    6a:46:4a:15:28:a5:3e:e6:8e:6a:03:20:35:d6:f3:
                    79:c3:49:f7:42:24:12:d8:9d:6a:52:e0:c4:ad:80:
                    ba:2e:50:3d:d4:93:a9:5a:fb:18:90:5b:75:28:ba:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:17:96:29:73:7E:B0:6B:3C:38:31:6C:4E:C2:BC:8E:B5:92:5F:97
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:a2:00:1b:74:de:9d:49:e4:6d:62:b0:ee:66:c2:36:d5:
         81:69:bc:c9:58:23:83:63:ac:09:5b:4d:be:2e:fb:fe:64:f8:
         9c:a8:00:2f:a7:cd:3d:ab:fb:58:0b:56:9e:46:a2:00:a9:a9:
         9a:3b:24:31:50:e4:f5:ce:50:b8:91:37:38:44:7e:da:94:aa:
         8f:4a:c8:96:47:47:92:10:2e:7a:a5:6f:88:82:41:fb:99:3e:
         cd:dc:89:18:1c:8f:09:ae:95:fa:3b:17:7f:4e:a2:06:82:a1:
         7a:e2:7a:77:aa:74:bc:fd:5e:56:7a:3e:6b:29:5f:45:ac:48:
         ec:5f:af:fe:c7:69:23:c1:2d:f1:9d:1f:4e:10:6f:12:bb:98:
         8c:51:59:d3:4c:b8:71:51:6d:f8:7d:68:be:ae:00:ad:df:b3:
         e5:dc:20:ce:17:5b:d4:34:74:1e:27:a5:c6:08:a9:56:11:f4:
         35:b6:29:a6:8a:f3:79:65:2e:c3:c2:de:6c:ed:b1:ce:ef:47:
         76:6f:af:46:3a:59:ab:86:7e:bd:7d:43:e3:bf:21:47:a0:ee:
         40:a8:ab:e4:67:4e:aa:18:5f:26:3a:51:b1:bf:84:7c:b6:f6:
         e0:1e:21:ff:ee:be:fc:32:a3:9f:81:9c:eb:c8:e5:1a:54:6e:
         20:0b:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----