Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20383334.roa
File:                     3231362e3135312e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          oIwfbCiCygvPUK5JC0SZbLkASO2Ozer1H+M3cpPEAiQ=
Subject key identifier:   41:1E:C0:2D:34:C8:66:C1:65:C9:70:4F:7E:B3:07:53:D1:CF:9E:01
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       625E7D991409DD461F7C66B4F66DFBAE254918EB
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20383334.roa
Signing time:             Thu 12 Sep 2024 10:42:08 +0000
ROA not before:           Thu 12 Sep 2024 10:37:08 +0000
ROA not after:            Thu 11 Sep 2025 10:42:08 +0000
asID:                     834
IP address blocks:        216.151.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 09:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5e:7d:99:14:09:dd:46:1f:7c:66:b4:f6:6d:fb:ae:25:49:18:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Sep 12 10:37:08 2024 GMT
            Not After : Sep 11 10:42:08 2025 GMT
        Subject: CN=411EC02D34C866C165C9704F7EB30753D1CF9E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:80:9b:22:53:8d:82:7d:2a:9d:e5:3b:80:
                    c9:42:47:76:b3:3c:33:cf:fc:6f:0a:38:eb:8a:88:
                    01:5e:3b:13:87:50:57:79:93:ff:a1:49:d5:88:f8:
                    4c:6c:d8:3d:3b:e4:2c:6f:4c:51:83:3e:1a:2a:6c:
                    47:01:e5:ba:4a:3a:4a:90:a5:2b:d8:e7:52:b2:9d:
                    e8:4b:21:35:d3:18:f0:56:27:62:01:00:45:d0:3d:
                    d8:4c:a4:8c:33:51:3b:88:99:0d:32:d0:70:c6:01:
                    cd:b6:cb:7f:d0:f5:a6:e3:70:50:99:ed:71:dd:0f:
                    23:75:32:38:ec:89:30:18:11:95:f7:65:26:d1:40:
                    71:17:8d:e4:e2:d1:57:16:08:74:38:47:da:25:a9:
                    fe:82:e4:5a:3e:8a:7f:e4:b8:c9:07:e5:57:b5:0d:
                    68:ea:de:48:04:88:54:dc:9c:22:4b:69:bf:15:62:
                    78:c0:26:4b:f0:21:59:92:75:8b:23:f2:8f:63:d2:
                    4d:a4:c4:53:78:19:a7:6c:9b:0c:53:38:ce:16:86:
                    9f:42:8f:72:00:44:40:30:79:d6:e7:ea:bd:a8:0a:
                    2c:b5:f5:bf:ab:c8:6a:07:70:e1:af:d1:af:d8:f9:
                    de:7a:d1:cc:36:3f:ea:94:19:44:7a:ac:1d:ba:b1:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:C0:2D:34:C8:66:C1:65:C9:70:4F:7E:B3:07:53:D1:CF:9E:01
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:a8:75:33:1a:b6:3b:14:b2:13:47:ae:a7:be:09:37:81:
         be:be:45:2a:54:e2:ba:70:4d:d6:90:e1:a4:34:44:aa:9e:5e:
         4d:38:cf:69:88:45:a4:c9:1d:6b:ce:e5:60:72:b8:f9:c1:25:
         06:81:02:e1:ba:b3:bc:21:63:e8:d4:3d:62:73:24:f4:49:65:
         4e:10:d4:c9:a0:51:2d:45:b6:f1:48:50:f8:dd:ab:94:98:b2:
         de:7a:8c:7a:74:f0:81:e5:43:9c:b6:01:29:88:7f:1a:00:f6:
         5e:10:92:c4:84:3a:48:48:00:45:db:68:82:ca:8c:09:aa:eb:
         64:85:ba:6e:eb:e5:c8:a0:09:72:f8:5f:11:c7:ef:b9:06:00:
         db:d2:63:12:60:f9:63:a1:bf:e3:16:aa:02:ef:b6:9f:86:10:
         a2:98:bc:f4:e7:41:b5:c0:b6:3c:ab:19:bc:01:9d:25:aa:86:
         74:ad:72:26:c9:a2:a9:52:07:cb:39:f1:62:db:57:c9:a1:4a:
         fb:af:95:b4:c6:95:f7:59:31:0a:67:7a:ba:33:87:39:b8:92:
         58:68:63:ca:63:b2:07:12:ce:2c:1f:00:ed:9a:82:0d:cc:f2:
         7f:e8:68:df:44:fe:0f:08:5d:9c:cc:05:b1:42:52:07:e6:6b:
         06:43:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----