Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e203231383539.roa
File:                     3231362e3135312e3136382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          l4Y2TddoUFz49HRZTTimzJQEoG2CgDLBXmQ1OPkdYZE=
Subject key identifier:   73:CF:A5:D6:11:1D:A1:50:13:EA:6F:87:1A:EE:15:3E:25:70:7A:96
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       1506E23B138FC7E3AEE3ACF9CDB6475EC064D7B4
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e203231383539.roa
Signing time:             Sat 29 Jun 2024 14:49:04 +0000
ROA not before:           Sat 29 Jun 2024 14:44:04 +0000
ROA not after:            Sat 28 Jun 2025 14:49:04 +0000
asID:                     21859
IP address blocks:        216.151.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 00:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:06:e2:3b:13:8f:c7:e3:ae:e3:ac:f9:cd:b6:47:5e:c0:64:d7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jun 29 14:44:04 2024 GMT
            Not After : Jun 28 14:49:04 2025 GMT
        Subject: CN=73CFA5D6111DA15013EA6F871AEE153E25707A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:76:85:49:23:b1:f7:f8:ef:65:2e:db:2f:
                    cf:f2:bb:86:ae:70:a3:cb:f2:b9:a2:97:86:11:6d:
                    70:20:41:65:59:3a:cb:1a:9f:3b:9b:91:64:53:06:
                    f1:5e:f5:eb:c8:18:7c:72:b2:90:dc:55:57:df:23:
                    93:1b:97:7f:2a:ea:09:2d:dc:28:84:6b:b0:0b:71:
                    0e:6f:f3:56:d2:cd:83:c3:73:50:02:e5:91:a6:37:
                    e0:f7:00:60:28:64:d3:59:9b:56:0b:07:72:8e:a5:
                    c4:3c:df:98:58:9f:70:f7:72:19:b5:af:12:f4:85:
                    01:f6:f5:63:f3:7e:3e:91:aa:b5:68:f9:53:8f:d1:
                    dc:60:ff:ca:0c:d2:9c:8a:4c:97:d4:c1:4d:e8:0e:
                    99:30:42:e6:4d:36:ae:21:0e:b2:89:cc:76:0e:78:
                    63:05:23:d4:c0:39:9a:13:03:0c:d9:4c:fb:9f:9a:
                    ad:0e:44:5f:eb:57:38:34:55:a1:ec:b8:9d:8e:3c:
                    f3:36:35:d3:23:be:c8:dd:80:60:99:4e:af:8e:01:
                    63:cb:48:de:06:e7:c3:ed:d4:b6:be:a0:fe:63:29:
                    7f:07:ab:ca:54:d1:71:54:e6:4a:23:ac:df:69:ee:
                    ca:b7:9a:f0:72:1e:70:e1:a0:b7:97:93:53:85:a6:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CF:A5:D6:11:1D:A1:50:13:EA:6F:87:1A:EE:15:3E:25:70:7A:96
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:fc:69:d1:92:41:39:59:d8:a6:f3:a9:5a:69:37:6b:61:
         d9:fa:0b:3a:8b:8d:91:6c:75:25:11:0c:4c:e7:d9:6c:99:94:
         cb:83:ee:fa:6c:d3:43:61:67:04:e5:4c:f1:47:00:c4:da:1c:
         b7:5c:44:62:b9:1c:7b:71:96:eb:9e:80:67:cd:37:03:31:3b:
         55:b3:1a:eb:d1:51:26:38:f0:ce:21:75:8a:80:b6:ca:ab:50:
         25:4a:bf:45:b5:3c:1f:06:96:15:db:fd:9e:77:06:02:1e:36:
         d6:0e:83:ed:da:93:21:b3:fd:3c:01:dd:1e:ec:44:dc:8d:d8:
         e6:0d:04:c7:92:e4:c7:11:d5:3c:13:15:a3:b0:68:07:ba:76:
         42:0e:5f:c5:f9:24:2c:a2:a9:9f:eb:52:bb:58:94:99:86:41:
         c8:83:d5:7b:1c:9b:ca:2c:b2:76:e7:84:db:24:f6:8c:00:74:
         91:cd:b6:59:6b:8f:c9:23:9c:df:7d:96:9e:9f:7c:a7:54:4b:
         40:c7:bf:72:d3:17:b3:48:55:e1:72:4a:ed:81:eb:5a:01:74:
         cc:e0:60:94:8b:94:6d:47:c5:a6:eb:09:3f:5c:9c:e0:63:07:
         76:38:d8:d1:1a:1f:19:18:da:d0:a8:10:cb:9f:1d:e4:db:10:
         52:c2:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----