Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e2037303239.roa
File:                     3231362e3135312e3136302e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          AxqnkqFdm3gro2b3aFdgnulhGDAcxv2GuFsvN0qr/R4=
Subject key identifier:   4F:33:08:FB:DF:2B:09:90:57:14:AB:07:D5:DC:1A:90:A0:DB:8E:1F
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       5C1F9D9985FA4A912F0577BC7AD4D293F0B33DA8
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 13 Aug 2024 13:37:46 +0000
ROA not before:           Tue 13 Aug 2024 13:32:46 +0000
ROA not after:            Tue 12 Aug 2025 13:37:46 +0000
asID:                     7029
IP address blocks:        216.151.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 19:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1f:9d:99:85:fa:4a:91:2f:05:77:bc:7a:d4:d2:93:f0:b3:3d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Aug 13 13:32:46 2024 GMT
            Not After : Aug 12 13:37:46 2025 GMT
        Subject: CN=4F3308FBDF2B09905714AB07D5DC1A90A0DB8E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:89:33:6a:b1:f0:da:d8:b7:bc:a5:ea:fb:
                    6d:dc:6c:ee:c1:59:2c:0d:53:74:6f:89:a1:5f:14:
                    d9:c6:ce:3a:02:10:ba:98:d9:dd:9e:52:93:35:c0:
                    fd:5e:a7:a8:7f:24:71:55:e0:5b:a1:74:c6:3d:20:
                    ae:ff:95:eb:c2:a5:d6:d2:40:9f:23:8d:4f:77:1d:
                    7f:ab:bb:87:ec:cc:ba:d0:9e:d8:f8:29:66:91:2e:
                    15:77:ca:64:63:4f:77:e7:e6:d5:db:d5:83:7e:10:
                    b9:1e:c2:cf:7f:50:fe:d2:34:90:23:7d:23:94:62:
                    2c:c5:93:49:1e:48:8e:da:37:b6:8d:fa:3d:03:88:
                    3f:7a:bb:ab:39:8c:03:0b:74:67:14:27:cc:dd:42:
                    4a:c0:a6:99:37:02:d8:98:18:68:f6:dd:b7:58:9b:
                    ed:8c:d7:11:87:eb:c9:a2:ab:16:24:9d:9b:f6:fe:
                    bb:78:b0:d4:fb:bb:95:73:97:66:a1:bc:50:90:bf:
                    d2:47:ba:3b:3e:2a:30:e3:7c:e1:78:f9:c9:ef:cd:
                    4b:87:97:2f:4c:54:70:28:64:76:0d:26:c2:b7:8f:
                    b0:b8:62:51:89:a1:99:3e:84:e0:e1:02:34:bb:1f:
                    90:e6:fc:71:4f:3c:70:09:ad:c6:62:ee:4a:b0:76:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:33:08:FB:DF:2B:09:90:57:14:AB:07:D5:DC:1A:90:A0:DB:8E:1F
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:35:8f:8e:9c:30:07:22:8e:8b:d0:f4:03:a8:c2:df:17:eb:
         c4:5a:ef:d2:25:50:33:90:21:1d:88:17:9f:8f:03:73:77:bd:
         99:41:b3:70:68:a6:f1:f8:f8:20:b9:45:a1:eb:85:cb:84:36:
         41:1f:11:24:b8:0f:c8:a5:07:31:e0:72:63:cf:5c:e6:49:09:
         12:24:7f:17:4d:25:e6:47:de:8d:84:a4:03:ec:b7:00:53:f3:
         7c:c7:88:ed:9c:62:3e:37:d2:c5:51:4a:1b:77:c5:e7:b3:53:
         0f:7f:b7:71:5e:fc:e8:ba:ba:8b:5b:9c:6b:63:11:53:2b:b3:
         37:47:74:9f:fa:ef:ca:eb:8e:c0:f1:22:21:23:25:47:5c:d2:
         45:3a:5f:75:3c:ec:a2:6d:15:80:f6:e5:15:ab:6c:e6:88:32:
         34:b8:06:d0:61:14:45:9c:06:ea:c4:f3:32:b1:08:d2:67:90:
         27:b1:e4:26:4c:8e:8d:e3:f5:22:70:73:61:44:21:3f:53:ba:
         d9:4e:95:94:10:66:6f:9b:fc:b1:1a:b3:1c:60:32:cd:9f:de:
         e6:6d:ac:c3:35:07:64:60:0c:03:4c:48:63:aa:f3:6f:b4:87:
         b4:3c:c5:f8:f5:34:ad:7d:9f:43:f7:de:74:f5:8a:fb:fb:2e:
         c1:12:cc:9f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUXB+dmYX6SpEvBXe8etTSk/CzPagwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjQwODEzMTMzMjQ2WhcNMjUwODEyMTMzNzQ2
WjAzMTEwLwYDVQQDEyg0RjMzMDhGQkRGMkIwOTkwNTcxNEFCMDdENURDMUE5MEEw
REI4RTFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls6JM2qx8NrY
t7yl6vtt3GzuwVksDVN0b4mhXxTZxs46AhC6mNndnlKTNcD9XqeofyRxVeBboXTG
PSCu/5XrwqXW0kCfI41Pdx1/q7uH7My60J7Y+ClmkS4Vd8pkY0935+bV29WDfhC5
HsLPf1D+0jSQI30jlGIsxZNJHkiO2je2jfo9A4g/erurOYwDC3RnFCfM3UJKwKaZ
NwLYmBho9t23WJvtjNcRh+vJoqsWJJ2b9v67eLDU+7uVc5dmobxQkL/SR7o7Piow
43zhePnJ781Lh5cvTFRwKGR2DSbCt4+wuGJRiaGZPoTg4QI0ux+Q5vxxTzxwCa3G
Yu5KsHaSMQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFE8zCPvfKwmQVxSrB9XcGpCg
244fMB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNzMwMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANiXoDANBgkqhkiG9w0BAQsF
AAOCAQEAljWPjpwwByKOi9D0A6jC3xfrxFrv0iVQM5AhHYgXn48Dc3e9mUGzcGim
8fj4ILlFoeuFy4Q2QR8RJLgPyKUHMeByY89c5kkJEiR/F00l5kfejYSkA+y3AFPz
fMeI7ZxiPjfSxVFKG3fF57NTD3+3cV786Lq6i1uca2MRUyuzN0d0n/rvyuuOwPEi
ISMlR1zSRTpfdTzsom0VgPblFats5ogyNLgG0GEURZwG6sTzMrEI0meQJ7HkJkyO
jeP1InBzYUQhP1O62U6VlBBmb5v8sRqzHGAyzZ/e5m2swzUHZGAMA0xIY6rzb7SH
tDzF+PU0rX2fQ/fedPWK+/suwRLMnw==
-----END CERTIFICATE-----