Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e203233343730.roa
File:                     3231362e37332e3135382e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          FIw8vU4xffRaFtFadx/zjwHfnxW2Bd8oBS8CS16BKcs=
Subject key identifier:   26:76:C4:DA:C5:E2:E6:92:1E:9B:3A:10:A3:65:DB:2A:66:E1:F0:99
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       4287DE9C1E85338076456F5FDFAE2433C5E130A3
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     23470
IP address blocks:        216.73.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 09:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:87:de:9c:1e:85:33:80:76:45:6f:5f:df:ae:24:33:c5:e1:30:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=2676C4DAC5E2E6921E9B3A10A365DB2A66E1F099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:0a:75:5a:f0:f5:0e:4e:33:b9:2c:a8:dd:
                    6d:bd:42:9d:f8:64:76:96:c5:10:c1:40:b1:f6:94:
                    8c:8b:21:4e:c4:cd:2f:3d:00:a6:5c:43:0a:84:e5:
                    17:e9:c2:f3:fa:d6:bc:c2:24:06:6a:60:8d:6e:9b:
                    82:1d:03:0c:cd:04:d8:3b:15:45:e8:f6:44:71:21:
                    2c:e0:49:73:ac:b0:61:8e:ca:58:44:61:74:dc:fc:
                    ff:4f:7f:ae:2a:e4:4c:3c:59:0a:49:85:6b:23:24:
                    d6:00:4c:b6:58:fd:91:21:1e:e0:f3:78:ab:73:e0:
                    03:18:d3:c6:7d:9c:6e:61:41:7c:17:9a:1b:c8:b9:
                    fe:f4:09:54:65:e1:78:85:38:af:c1:e7:e4:3d:d0:
                    b8:5d:8c:72:81:ff:d9:e9:b8:89:b9:d0:6e:02:51:
                    e0:ce:26:16:fe:49:69:bb:1d:87:b9:63:40:81:6d:
                    b4:de:4c:66:98:ae:a9:2b:e6:03:3d:29:4f:d1:3b:
                    39:ff:91:ae:5b:d8:c7:71:a9:61:20:9e:60:14:3b:
                    b1:5e:3f:e4:07:de:89:32:e1:37:8c:c2:43:9a:44:
                    61:98:86:31:66:92:d3:a2:bd:b5:d9:44:bc:aa:54:
                    98:5c:6d:cb:67:d5:4e:72:5c:58:fe:dd:83:9a:c5:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:C4:DA:C5:E2:E6:92:1E:9B:3A:10:A3:65:DB:2A:66:E1:F0:99
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:97:ea:d4:a9:9e:81:2e:a7:d5:f1:1d:20:ee:5b:64:7d:0e:
         ca:9a:f9:19:d2:65:1d:0f:3a:9c:67:52:9e:65:e8:0d:03:01:
         13:d9:7a:11:91:09:91:fa:89:44:e3:b6:3a:b1:38:9b:40:58:
         3c:60:4b:c0:62:75:04:a5:bb:9c:14:0d:44:da:2a:fc:24:1c:
         6f:3f:b2:e6:6e:ab:e3:33:b6:ab:21:3c:b7:92:20:ed:1a:08:
         db:ee:69:c0:4d:12:11:03:d1:6a:f8:29:4e:ab:62:79:d7:3b:
         9e:81:ed:71:79:65:5b:5c:20:fe:92:98:22:5c:28:45:25:60:
         a9:58:c8:a3:2d:ea:7f:7f:a9:dc:7b:df:40:c0:bf:0a:95:42:
         30:6a:86:fc:8f:6c:65:a4:41:92:62:19:a0:f5:b6:70:05:17:
         df:9d:3f:ab:62:32:86:26:84:5e:04:6d:d8:d5:d6:0f:a5:78:
         5d:56:ec:d0:b6:5e:eb:f3:63:46:18:da:e4:cd:b3:4c:73:b0:
         47:0c:aa:93:59:fd:e1:61:56:15:1d:3c:f4:f2:e1:98:9d:bc:
         bc:7b:bc:de:76:ed:d4:88:d8:3e:0c:7e:ad:4d:7a:e3:de:6c:
         24:ab:ba:a3:6e:89:56:47:1c:23:02:d1:ff:44:12:12:a5:ac:
         8f:1c:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----