Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20383334.roa
File:                     3231362e3135312e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          JViQScOLsd4zGG9R6DxXljeW+wVuvWnLHBYXA3rAYTs=
Subject key identifier:   96:4B:7F:0C:59:65:6B:89:73:BC:FA:AA:1B:CA:6C:D1:BC:33:E7:B3
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       30313F4FC022871F26182C8A60EF1480386B0F19
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20383334.roa
Signing time:             Sat 27 Jul 2024 00:02:47 +0000
ROA not before:           Fri 26 Jul 2024 23:57:47 +0000
ROA not after:            Sat 26 Jul 2025 00:02:47 +0000
asID:                     834
IP address blocks:        216.151.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 14:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:31:3f:4f:c0:22:87:1f:26:18:2c:8a:60:ef:14:80:38:6b:0f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jul 26 23:57:47 2024 GMT
            Not After : Jul 26 00:02:47 2025 GMT
        Subject: CN=964B7F0C59656B8973BCFAAA1BCA6CD1BC33E7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:b9:e9:13:0e:31:2c:74:c6:7a:4e:07:39:
                    7e:dd:54:12:c5:20:fb:44:ab:d7:d5:2e:5c:45:7d:
                    b6:f6:e4:07:b8:3c:11:c5:d3:61:96:71:27:74:11:
                    4e:7b:71:e3:0e:f7:fe:cc:4c:47:7b:08:7a:62:07:
                    69:e1:f7:f3:4c:82:bf:f4:a6:8b:e2:61:f3:37:71:
                    de:dc:42:4a:e7:73:9f:10:13:9b:cb:1e:71:73:da:
                    0e:99:b4:3b:94:8f:d2:1f:ce:0d:a5:8f:fe:f6:a0:
                    49:51:cf:5e:cc:08:ea:e4:4f:34:cd:87:65:71:bb:
                    f5:4a:3c:2d:19:f4:c4:3f:23:74:0e:48:9e:82:d7:
                    a3:67:c8:f8:af:13:cd:07:51:a6:de:96:d6:46:6f:
                    a1:fd:41:1a:7b:a6:1f:70:e0:4d:e7:7c:27:43:84:
                    6a:df:59:39:96:7f:9f:88:a8:3d:c4:3c:82:d6:b3:
                    c8:15:3b:4b:88:ed:3f:76:27:53:57:e9:16:ea:78:
                    c7:0b:15:92:9f:5e:e6:62:31:b9:33:63:65:b2:75:
                    a8:38:d8:67:1a:12:52:6c:d7:03:d2:46:9d:c3:eb:
                    fe:47:36:59:51:cf:e2:44:92:d5:19:74:01:5e:72:
                    df:1c:94:13:d8:0d:bb:c5:4e:73:22:65:31:4c:7e:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4B:7F:0C:59:65:6B:89:73:BC:FA:AA:1B:CA:6C:D1:BC:33:E7:B3
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:82:68:99:a3:54:74:57:d1:7c:93:08:26:80:05:90:fc:51:
         76:3d:58:ab:7e:ed:ce:2c:4c:5b:b7:63:ac:bb:2d:a8:3c:38:
         fa:7a:2f:f6:28:2c:aa:09:69:91:06:93:cc:62:2c:58:f7:46:
         f4:fc:1c:e7:fe:3d:a5:f5:2b:89:f7:af:a2:90:0b:f2:78:fd:
         5c:fb:a3:86:d5:51:b8:d2:2b:0a:12:92:b2:3a:b6:15:5a:3d:
         90:6c:10:4e:53:5f:4d:74:af:74:3f:b1:2c:23:09:8f:41:b5:
         e5:60:33:c1:4c:8b:08:e0:0c:89:4d:0f:ca:07:4b:70:10:ad:
         e9:bd:06:55:f7:80:64:92:b0:7d:bd:d8:f2:3d:b1:74:e0:6a:
         ac:da:f9:8e:22:a2:ab:78:b6:aa:1f:37:e9:0b:b0:39:ea:98:
         cf:bc:4e:8d:37:95:87:c9:64:e9:9c:0f:65:12:46:c2:0c:0d:
         0a:b8:6d:fd:42:6d:8e:4d:00:f4:a7:cf:b5:be:fc:ed:60:7b:
         75:b1:93:1d:4c:da:18:19:29:4e:82:31:7e:49:2e:7b:8c:4d:
         17:4b:68:cd:d1:56:85:2a:8e:64:8f:0e:e3:ec:b5:f3:6e:71:
         96:ab:bb:01:35:e7:90:19:52:92:d9:72:bb:59:5d:c1:fa:c2:
         ae:5b:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----