Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa (raw, json)
Hash identifier:          bADHilNcfKPhclM/JDMoPtFso0DnPlu4oc55zyos6P4=
Subject key identifier:   8F:29:E5:C5:E4:C5:11:4A:D6:71:20:1E:8C:31:5D:21:24:A1:30:0A
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       7E054A5826799A1B0FD537AF99ED0A1DE560B0E2
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa
Signing time:             Tue 03 Jan 2023 02:07:03 +0000
ROA not before:           Tue 03 Jan 2023 02:02:03 +0000
ROA not after:            Tue 02 Jan 2024 02:07:03 +0000
asID:                     200975
IP address blocks:        128.254.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:05:4a:58:26:79:9a:1b:0f:d5:37:af:99:ed:0a:1d:e5:60:b0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jan  3 02:02:03 2023 GMT
            Not After : Jan  2 02:07:03 2024 GMT
        Subject: CN=8F29E5C5E4C5114AD671201E8C315D2124A1300A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:2b:66:3e:b8:fd:0f:f9:1d:73:03:0c:50:
                    52:bc:4e:3a:8a:26:5c:c6:0b:fb:10:d2:95:0d:3c:
                    b6:54:98:9c:9a:33:ba:ff:eb:63:35:bf:0c:46:bb:
                    13:70:fe:00:0d:08:25:e2:fb:f3:fc:7c:9d:14:4d:
                    06:12:dd:88:88:2d:af:3e:2e:b6:fb:b8:64:97:e6:
                    32:ec:3f:c9:a6:68:42:e9:f6:28:2e:a8:d0:e3:d8:
                    47:fc:7e:0c:bf:76:b4:20:6d:e6:96:fa:5c:37:9d:
                    4a:64:ee:5b:70:3d:ff:b7:5e:12:89:ae:1e:3b:d4:
                    ca:21:d7:f0:62:4f:9b:6a:2d:01:b8:03:49:eb:80:
                    e6:1a:58:4e:6c:07:d9:69:7a:d5:c0:31:28:98:bd:
                    8d:50:78:5a:30:66:41:04:70:69:04:a4:fd:a1:7d:
                    60:f7:be:17:59:6c:e0:ed:e7:b5:de:3c:38:ba:37:
                    81:b7:f9:88:3e:b3:fa:ea:9d:b6:35:ba:88:e6:dc:
                    b3:cc:8c:f3:41:cd:c6:39:ac:58:da:a9:78:9f:df:
                    a3:dd:f2:f3:c7:df:eb:f1:e1:4d:a0:2f:c5:dd:94:
                    9f:e6:cb:5e:f8:a8:b3:36:21:71:d0:40:98:ab:60:
                    a8:79:52:c6:d2:3c:a5:9f:db:ea:f1:cd:77:1c:d1:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:E5:C5:E4:C5:11:4A:D6:71:20:1E:8C:31:5D:21:24:A1:30:0A
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b0:f0:b4:6b:2d:f5:87:6f:42:2d:09:53:b0:ea:b6:72:10:
         01:f1:eb:90:8c:69:11:45:4e:72:9f:6f:be:1a:21:5e:02:ad:
         62:6a:09:77:c9:71:18:3c:f2:ba:57:da:90:ba:33:eb:06:6c:
         e1:9b:5d:bd:cb:c9:ed:43:e2:b3:97:ad:cf:dc:3d:bf:0d:8a:
         ff:8d:d2:37:ae:79:9f:3d:e4:bc:18:12:2e:ab:86:8c:e7:e0:
         a7:e2:9a:2e:ec:6d:ae:df:a6:40:37:6a:89:24:7d:ed:06:7d:
         01:7d:8f:40:14:f7:50:f7:9a:80:51:65:77:33:6f:11:8f:e9:
         19:60:ce:48:b4:f3:d9:4e:68:90:18:40:58:58:09:dd:82:80:
         06:84:f9:02:35:1a:74:0c:7e:5a:40:ae:b9:ce:8e:c3:cb:7f:
         b5:0f:89:3d:91:5b:0d:ce:c6:2f:8e:8e:06:fa:e1:ed:e6:62:
         21:95:4d:cf:e5:50:ad:35:b7:df:63:97:64:eb:6e:e7:49:fd:
         3e:04:5b:7f:c1:94:d7:37:ae:9f:1a:1c:fd:2b:1e:72:52:e9:
         29:98:6e:f8:3c:dd:8f:42:2a:85:35:a3:44:ed:d6:d4:89:01:
         7f:65:a5:7b:5d:97:64:fe:b2:0b:9f:f0:01:de:6f:ad:0c:d5:
         7e:a5:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----