Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e2037303138.roa
File:                     3231362e3135312e3136302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          kc+HCva45iVQrkIcg6NU43/MTaoQmQFwN5NZvpL1eEE=
Subject key identifier:   DE:50:74:C7:A5:88:5B:4B:CB:EA:43:B6:92:70:03:5B:F9:50:02:DA
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       4EDF6F8508C0D6514D0E0869227066810B8F6864
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 13 Aug 2024 19:06:30 +0000
ROA not before:           Tue 13 Aug 2024 19:01:30 +0000
ROA not after:            Tue 12 Aug 2025 19:06:30 +0000
asID:                     7018
IP address blocks:        216.151.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 10:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:df:6f:85:08:c0:d6:51:4d:0e:08:69:22:70:66:81:0b:8f:68:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Aug 13 19:01:30 2024 GMT
            Not After : Aug 12 19:06:30 2025 GMT
        Subject: CN=DE5074C7A5885B4BCBEA43B69270035BF95002DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:c6:46:16:95:18:7b:be:49:02:d5:51:6c:
                    61:ca:0b:ee:b4:49:f8:49:fd:1b:15:97:73:11:ed:
                    66:50:73:fb:ef:74:ed:c1:59:0a:ae:ae:45:eb:e2:
                    f4:b6:23:e6:e5:42:32:8d:26:f3:de:c3:cd:f7:1d:
                    9a:8c:44:e3:24:48:b7:a5:e3:ea:b9:86:15:a7:69:
                    09:61:17:72:06:6e:c1:28:dd:e2:20:74:a7:c2:16:
                    9a:1f:b4:66:f0:f2:1b:e3:d8:80:e1:7b:d1:99:c8:
                    e3:be:d5:03:db:2c:2a:09:47:36:df:23:a3:5a:5e:
                    49:6b:a3:3a:8c:7c:03:19:20:c2:e0:5e:53:14:b4:
                    6c:c5:55:2e:05:ca:ed:8c:b8:eb:0d:81:d4:84:07:
                    42:51:56:f4:85:48:14:e9:33:05:4e:4b:c9:31:3a:
                    79:f7:bd:3d:f8:cc:74:0b:38:60:75:ca:3e:02:c5:
                    13:4e:f1:53:47:fe:d5:1a:84:91:34:b4:9a:4c:12:
                    fe:87:26:e0:4f:42:31:6c:d2:0a:ca:2d:4b:e8:f8:
                    56:b4:92:a1:d4:04:a2:b8:9a:bc:ad:e8:74:28:e8:
                    98:c0:15:8d:a5:1d:5f:8d:39:56:ae:68:c2:2e:d1:
                    73:f0:be:ec:78:a6:a3:0b:37:47:7a:13:60:b1:f0:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:50:74:C7:A5:88:5B:4B:CB:EA:43:B6:92:70:03:5B:F9:50:02:DA
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:b7:95:ee:46:57:ab:cd:12:c6:d7:d8:9f:c4:e5:29:db:
         b8:2f:a8:e6:a2:8d:98:8e:5d:cb:be:7c:3d:df:a1:aa:e9:92:
         af:4d:b0:ed:67:e5:e4:3b:c7:08:e1:75:1a:58:24:bc:ad:37:
         31:0c:98:4f:93:30:1d:f4:ce:ba:17:28:c3:55:71:82:b8:bd:
         4c:28:5b:7a:a8:21:73:04:2d:aa:c9:c4:54:3a:58:51:f8:04:
         6c:31:28:b5:d3:84:1c:ee:8e:ee:9e:f6:1d:c6:bf:e1:d1:1d:
         a3:f5:dd:1e:6a:1f:1a:d7:2a:e4:79:53:02:a5:f9:48:b5:8d:
         8b:7e:2b:ad:76:98:7e:f5:da:b2:df:cc:8c:99:70:3e:9e:b2:
         b2:6b:2d:3d:d1:72:b5:28:a7:a8:0a:b5:04:f8:8e:96:2e:6e:
         bb:fb:e0:b5:c3:54:93:02:02:1e:9d:22:3e:ba:9e:c3:e3:20:
         98:dc:4b:10:d9:af:c3:82:78:57:7f:b3:9e:2c:8e:d9:63:c6:
         bb:2c:3d:3d:0d:34:f3:1a:90:0d:71:24:57:53:ba:47:f0:9c:
         48:e7:6f:d5:e8:58:f5:5f:45:5a:f2:92:84:78:58:07:43:09:
         e4:ca:71:fa:c4:9f:e6:72:4c:bb:3b:46:1a:ed:88:a5:cf:f7:
         55:f5:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----