Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323035383438.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20323035383438.roa (raw, json)
Hash identifier:          YY6nhfYGHsgu7ddbaMIwLrVjvwx/kZnVVlrPVWn8vSc=
Subject key identifier:   A4:A6:B9:1E:7F:92:A9:33:E1:56:CF:9D:46:9C:E1:BD:C2:0D:75:CF
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       38B6977C26044AE8F8B51603F6B1B918431891BA
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323035383438.roa
Signing time:             Mon 06 Feb 2023 22:12:32 +0000
ROA not before:           Mon 06 Feb 2023 22:07:32 +0000
ROA not after:            Mon 05 Feb 2024 22:12:32 +0000
asID:                     205848
IP address blocks:        128.254.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:97:7c:26:04:4a:e8:f8:b5:16:03:f6:b1:b9:18:43:18:91:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Feb  6 22:07:32 2023 GMT
            Not After : Feb  5 22:12:32 2024 GMT
        Subject: CN=A4A6B91E7F92A933E156CF9D469CE1BDC20D75CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:80:d0:bf:00:da:c1:c8:33:a1:92:34:39:
                    96:d7:c4:88:49:29:75:21:1a:8e:26:59:42:bd:94:
                    d7:69:81:05:60:5b:27:f0:95:fe:78:d4:bb:b0:1f:
                    2f:39:e1:ff:52:23:e1:cc:4a:90:dd:85:e5:31:a8:
                    ed:95:61:24:4f:b1:9b:10:a0:ee:82:a8:d2:a8:56:
                    8c:cd:70:03:3b:f7:32:03:c3:75:3f:5d:1a:6b:d4:
                    dc:47:d8:b0:9e:69:4d:0a:e6:26:49:01:77:61:11:
                    60:7d:50:41:c8:fb:eb:94:55:a7:55:67:1f:8e:d6:
                    95:09:d6:e3:25:2e:1c:f5:0b:1d:ea:d1:74:d9:57:
                    77:ae:6f:ce:d6:bd:7c:5c:3e:76:b6:9f:14:76:12:
                    42:ed:68:65:aa:aa:61:f8:c3:bd:48:45:f5:a5:3d:
                    9b:5b:e9:29:bb:84:a1:6e:6e:69:b9:d7:b4:6d:1e:
                    7e:91:bc:7e:2a:46:b9:dd:88:4b:f8:78:a1:5d:bd:
                    b1:c9:77:f2:64:c4:0e:db:1d:18:4f:e1:1d:ba:43:
                    ba:51:ef:8f:8b:4f:01:5b:7e:37:62:66:2e:aa:41:
                    7f:3b:70:e0:63:19:2b:27:4b:6b:d3:5b:81:9b:e2:
                    bc:04:56:99:d9:91:b8:e3:54:57:4f:28:0f:e6:11:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A6:B9:1E:7F:92:A9:33:E1:56:CF:9D:46:9C:E1:BD:C2:0D:75:CF
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:63:e7:32:1a:5d:cf:50:54:cb:de:91:10:1d:4d:4f:45:6e:
         1e:3b:aa:67:f8:6f:b5:85:36:b4:84:91:0f:e5:09:38:9c:3a:
         61:ed:46:0f:f3:1c:18:b2:90:5a:fa:a9:79:06:59:e5:75:aa:
         6e:ea:93:ef:d5:c8:52:0f:d1:dd:b5:fd:0c:be:ff:98:0b:33:
         18:96:90:be:8e:f3:a6:91:0b:13:15:b4:b7:fb:9f:96:22:bb:
         c4:eb:61:b8:ce:22:79:15:56:9d:76:8b:1e:21:29:e9:64:bd:
         a0:a7:13:e8:71:1e:0a:fd:5d:29:91:94:d4:ec:5e:3f:1a:7c:
         31:73:5d:49:a5:9e:a5:c1:92:11:16:28:69:50:96:09:b9:1b:
         c4:fb:58:9d:18:91:cb:d2:d2:25:80:67:41:f9:9d:f3:73:eb:
         8e:00:8f:39:e7:00:96:09:c4:a9:8b:d2:8f:f8:75:dc:e7:53:
         65:ae:fb:3a:63:27:db:c1:73:07:d7:96:4b:72:24:46:b3:9b:
         fc:db:66:0b:e8:46:67:09:1f:62:ae:58:c2:a1:55:5a:ae:95:
         03:45:b0:d1:84:51:36:d0:b6:ac:e3:d2:55:de:0c:cf:45:e0:
         0a:5f:cf:65:e2:40:64:c9:70:fa:f7:fb:b1:42:7e:96:e2:67:
         66:18:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----