Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3131322e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          9aBqH8aG3f9yaxpr4El+L38LQgNi2Ntp9JphTvB69S0=
Subject key identifier:   D4:E0:40:39:E6:FB:DA:46:A2:B1:1B:C5:15:19:42:BE:C8:7E:02:3D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7EA5E9F872B32E1A4052E8226EB12C84C3D246A6
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 30 Oct 2023 12:03:57 +0000
ROA not before:           Mon 30 Oct 2023 11:58:57 +0000
ROA not after:            Mon 28 Oct 2024 12:03:57 +0000
asID:                     17216
IP address blocks:        198.37.112.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 10:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a5:e9:f8:72:b3:2e:1a:40:52:e8:22:6e:b1:2c:84:c3:d2:46:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:58:57 2023 GMT
            Not After : Oct 28 12:03:57 2024 GMT
        Subject: CN=D4E04039E6FBDA46A2B11BC5151942BEC87E023D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:91:10:fd:da:4d:26:c3:4c:83:30:e0:8b:
                    d9:12:3a:0f:be:28:f2:06:58:cb:fe:9e:de:da:11:
                    f2:ad:6a:9b:95:0f:e4:c7:44:b1:63:bc:3f:7c:c7:
                    24:d2:9f:e3:34:36:78:7a:c4:34:da:6b:08:94:4d:
                    9d:6e:f3:b2:7d:2f:e5:49:95:3e:22:13:88:ed:4b:
                    d1:7f:a1:6d:ea:96:79:49:c9:6d:de:76:f5:58:47:
                    04:a0:dc:9d:ca:23:b4:6a:32:be:5b:38:6a:1c:6f:
                    74:55:43:f6:ec:23:e2:43:f3:bb:33:25:ba:55:48:
                    a4:06:0c:43:c2:be:fe:00:78:4b:0e:1c:c3:4f:bc:
                    29:57:92:4c:38:4a:15:c8:5e:2e:6f:65:0d:68:0a:
                    f3:64:6a:5a:3d:de:2a:4b:d2:fa:d5:a7:12:2c:10:
                    46:c5:b0:2d:a7:b1:f6:f0:21:7f:66:de:f1:03:06:
                    af:e8:ab:8e:15:55:00:0e:83:3a:f0:82:de:92:5c:
                    43:d0:68:a8:a4:3f:cd:72:26:8f:04:be:ea:a4:d3:
                    2f:11:41:88:c6:0d:cf:c0:00:17:87:7e:21:23:f5:
                    d8:04:71:04:53:ba:9f:da:96:bf:c5:cf:ed:66:de:
                    b8:0b:a4:6c:66:6b:75:34:28:8a:b7:f5:e9:04:12:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:40:39:E6:FB:DA:46:A2:B1:1B:C5:15:19:42:BE:C8:7E:02:3D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:68:7e:d1:d3:31:da:83:74:f2:b1:91:ef:ee:30:72:6e:51:
         4f:23:b6:f7:90:47:ae:d8:91:99:a8:8a:ee:31:1e:be:a5:92:
         49:52:86:92:f8:fc:d7:fc:2a:df:9b:6d:a4:89:0d:33:9c:7a:
         60:15:29:06:6b:3d:dc:0d:b9:75:e1:35:44:30:c6:3c:6d:79:
         a5:d8:46:df:8e:c2:6d:c5:59:ed:66:23:d1:54:08:9b:ec:39:
         28:62:2d:5c:fd:fe:b6:4f:f9:7e:c5:52:ee:43:af:be:96:40:
         87:2b:f5:32:be:ea:79:d3:30:b0:5c:a1:cd:ec:d6:16:fe:b3:
         ba:ee:ba:6c:56:22:04:ac:b3:89:b9:4d:b8:61:04:58:04:76:
         a0:6f:9f:09:85:5a:b2:d7:47:6b:a0:c9:bc:5e:82:87:73:71:
         34:67:14:42:fb:15:f3:50:8a:fb:ca:98:a4:7c:c4:27:01:23:
         2a:89:a6:70:ed:dd:1f:e3:66:86:b3:8f:d9:06:63:22:69:ec:
         75:54:ef:0c:d6:ab:92:ed:08:bf:8e:86:d5:53:ac:66:38:6b:
         bf:93:38:74:0a:43:ae:bd:f1:1c:92:5e:9c:eb:75:0e:91:9d:
         19:b9:87:5a:6f:97:f6:69:e7:0a:b0:ee:e5:23:4c:4a:9e:41:
         65:64:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----