Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3132302e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          a2lumIgfKofF0MhrjfAKhVqUfDuqf70sBUI7hR+h6Ho=
Subject key identifier:   D5:F2:74:EA:6A:3F:3B:BF:8D:6B:58:48:B7:9B:EC:65:E7:A8:B0:70
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1809AE0BEFDAF173B00D7A328A6E647204C4C035
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 30 Oct 2023 12:04:04 +0000
ROA not before:           Mon 30 Oct 2023 11:59:04 +0000
ROA not after:            Mon 28 Oct 2024 12:04:04 +0000
asID:                     17216
IP address blocks:        198.37.120.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 10:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:09:ae:0b:ef:da:f1:73:b0:0d:7a:32:8a:6e:64:72:04:c4:c0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:04 2023 GMT
            Not After : Oct 28 12:04:04 2024 GMT
        Subject: CN=D5F274EA6A3F3BBF8D6B5848B79BEC65E7A8B070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:29:b1:c4:19:76:4a:eb:74:56:0f:29:97:
                    b0:8d:2b:ea:46:dc:06:a6:63:74:13:63:73:3d:c5:
                    70:77:ba:cf:94:53:64:ce:ce:51:fc:8d:32:a4:62:
                    82:c4:ab:08:69:1f:d3:78:a9:84:fe:26:60:9b:77:
                    9a:5d:d0:d9:0d:b8:ad:d6:b7:37:e0:2d:b4:b0:e7:
                    2f:fb:66:5b:85:14:48:a3:bd:77:1d:57:e1:7b:f7:
                    93:4c:98:8c:20:ea:34:44:22:a6:f6:b6:bb:f8:84:
                    b0:68:9a:e4:d1:5d:42:8e:95:70:df:53:08:94:9c:
                    95:68:7e:c1:d1:e3:1c:e2:6e:a2:65:ab:35:c3:bc:
                    66:18:be:0b:a3:98:c7:ca:31:0a:4d:15:77:64:4f:
                    25:7d:17:78:a8:fc:fd:87:c0:06:cd:cb:ca:2c:bd:
                    c8:ef:53:d2:8c:a3:ed:00:e0:6c:cd:9e:d0:02:bb:
                    95:a9:0d:06:a6:2e:39:e7:15:2f:f5:ae:2e:c5:23:
                    9b:35:79:95:ee:36:37:df:0f:39:23:5a:e7:89:7d:
                    41:d0:f3:dc:00:85:20:a9:96:b0:45:89:e3:a6:58:
                    e5:2a:cb:6a:81:97:d7:9c:42:74:33:8d:16:e7:37:
                    63:4b:4e:84:1e:66:a7:61:2a:f4:fd:9d:c8:e0:a2:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F2:74:EA:6A:3F:3B:BF:8D:6B:58:48:B7:9B:EC:65:E7:A8:B0:70
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3132302e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:76:f4:23:17:22:b2:f9:31:aa:8d:bb:a6:a0:19:e2:97:40:
         db:db:dc:97:71:cb:95:79:6f:53:ab:70:7a:29:31:9b:fe:4f:
         9d:99:3a:95:65:3f:25:c3:62:c0:7a:6f:f6:fe:27:60:8c:13:
         dc:c8:99:fa:dd:6c:bf:f7:d3:90:60:66:4b:5d:7b:ec:84:85:
         29:54:a8:39:ce:f2:bf:c0:b7:ff:9f:70:7f:d5:9a:be:dd:d4:
         68:fc:53:ec:4b:b7:16:57:12:48:37:13:ee:9f:06:b3:fb:98:
         7d:74:2f:a0:45:fa:b5:b3:f6:04:66:ec:6c:1b:b6:a7:e1:0c:
         38:26:0f:a8:3b:0a:34:c5:d4:c7:41:48:07:34:57:bc:6c:1d:
         f4:b4:ae:d8:11:5c:a2:36:4d:4f:ba:fa:85:55:d7:90:8d:cd:
         a0:26:86:b5:9e:39:84:8e:b9:d9:fa:29:07:dd:d1:2d:c1:32:
         ed:2e:86:fb:c7:a6:12:40:e0:28:6e:41:2e:53:01:cc:73:f3:
         37:3d:ec:aa:9e:3f:51:a8:b6:9c:fe:7e:75:bf:52:27:04:de:
         d6:1b:d8:21:dd:d2:84:79:86:41:20:c2:af:4c:9b:f6:f9:32:
         e4:23:7e:0b:49:2a:7e:5a:95:a8:12:b5:24:25:29:b0:da:1b:
         ef:e4:4a:4a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUGAmuC+/a8XOwDXoyim5kcgTEwDUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMDMwMTE1OTA0WhcNMjQxMDI4MTIwNDA0
WjAzMTEwLwYDVQQDEyhENUYyNzRFQTZBM0YzQkJGOEQ2QjU4NDhCNzlCRUM2NUU3
QThCMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiUpscQZdkrr
dFYPKZewjSvqRtwGpmN0E2NzPcVwd7rPlFNkzs5R/I0ypGKCxKsIaR/TeKmE/iZg
m3eaXdDZDbit1rc34C20sOcv+2ZbhRRIo713HVfhe/eTTJiMIOo0RCKm9ra7+ISw
aJrk0V1CjpVw31MIlJyVaH7B0eMc4m6iZas1w7xmGL4Lo5jHyjEKTRV3ZE8lfRd4
qPz9h8AGzcvKLL3I71PSjKPtAOBszZ7QAruVqQ0Gpi455xUv9a4uxSObNXmV7jY3
3w85I1rniX1B0PPcAIUgqZawRYnjpljlKstqgZfXnEJ0M40W5zdjS06EHmanYSr0
/Z3I4KKcCwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNXydOpqPzu/jWtYSLeb7GXn
qLBwMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMjMwMmUzMDJmMzIzMTJkMzIz
NDIwM2QzZTIwMzEzNzMyMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8YleDANBgkqhkiG9w0BAQsF
AAOCAQEAUHb0Ixcisvkxqo27pqAZ4pdA29vcl3HLlXlvU6tweikxm/5PnZk6lWU/
JcNiwHpv9v4nYIwT3MiZ+t1sv/fTkGBmS1177ISFKVSoOc7yv8C3/59wf9Wavt3U
aPxT7Eu3FlcSSDcT7p8Gs/uYfXQvoEX6tbP2BGbsbBu2p+EMOCYPqDsKNMXUx0FI
BzRXvGwd9LSu2BFcojZNT7r6hVXXkI3NoCaGtZ45hI652fopB93RLcEy7S6G+8em
EkDgKG5BLlMBzHPzNz3sqp4/Uai2nP5+db9SJwTe1hvYId3ShHmGQSDCr0yb9vky
5CN+C0kqflqVqBK1JCUpsNob7+RKSg==
-----END CERTIFICATE-----