Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa
File:                     3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier:          MwiPkxIaq2XZyxbgZElL071+XhxBULDPLpXT5p83cts=
Subject key identifier:   51:34:7A:57:50:4F:92:BC:13:77:0F:EE:0F:6B:24:48:98:A6:2D:0B
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       1359231E1DA85F35FF2E21A3DD548B740E5B8754
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa
Signing time:             Sun 31 Mar 2024 16:13:00 +0000
ROA not before:           Sun 31 Mar 2024 16:08:00 +0000
ROA not after:            Sun 30 Mar 2025 16:13:00 +0000
asID:                     400866
IP address blocks:        209.87.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:59:23:1e:1d:a8:5f:35:ff:2e:21:a3:dd:54:8b:74:0e:5b:87:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Mar 31 16:08:00 2024 GMT
            Not After : Mar 30 16:13:00 2025 GMT
        Subject: CN=51347A57504F92BC13770FEE0F6B244898A62D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:c0:93:fa:33:62:2a:3f:7e:2f:10:d9:06:
                    9c:2f:13:df:69:c7:f5:a8:6e:b3:cf:5c:fb:ff:d0:
                    25:65:3d:db:09:5b:ce:d1:90:de:de:bf:81:9e:bb:
                    f4:ca:92:fa:dd:8a:15:9d:9c:ae:80:07:8a:8c:a5:
                    72:04:b2:36:fd:ec:53:c5:07:d9:a8:d3:a3:34:6f:
                    63:bd:99:93:62:af:5e:43:d3:d6:77:17:78:9c:61:
                    94:b0:a4:df:3b:0d:1a:b7:2b:ff:46:6e:cd:ce:bc:
                    b6:a3:8e:e6:5c:10:3a:c3:69:ed:10:0e:e6:d7:7f:
                    f9:43:3d:a1:24:9f:f2:d4:18:f0:cd:f1:91:61:62:
                    e6:2a:d7:86:eb:da:d2:e2:58:b0:ba:b0:b2:54:a1:
                    93:69:a3:55:6a:18:c3:08:2f:29:4c:0a:4d:6f:43:
                    a6:04:8e:51:a5:dc:f4:46:e1:de:dc:95:a2:11:80:
                    bd:1d:fb:fa:42:9f:ee:24:2e:a0:0e:cd:02:66:b8:
                    a1:ee:2c:9e:4c:88:1b:8f:b1:3d:d1:39:bc:3b:ba:
                    91:df:f9:07:b1:42:21:e4:86:72:d5:63:7a:51:bd:
                    21:41:fe:93:c0:88:77:db:a1:c8:2a:a5:68:36:07:
                    ae:3a:c6:33:aa:a7:b6:0b:93:39:f7:3f:5a:89:73:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:34:7A:57:50:4F:92:BC:13:77:0F:EE:0F:6B:24:48:98:A6:2D:0B
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20343030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:94:1e:12:22:39:fa:6b:ce:66:5f:f0:7c:5e:cd:c0:3f:
         cc:68:ab:3a:b8:da:ab:39:9d:0c:ff:1a:1e:0f:22:1b:e2:47:
         82:31:1b:5d:23:6d:ac:80:fc:ee:5b:6b:eb:30:89:c6:a7:cc:
         47:e5:92:5f:01:a5:53:1c:3f:e3:06:6d:97:86:07:61:26:e2:
         15:0a:68:b8:78:ce:91:13:03:f9:4d:91:43:64:2a:0a:da:82:
         3d:72:ca:81:5e:52:94:4c:f8:ef:53:f0:bc:66:f5:76:21:1d:
         24:f2:83:f3:42:16:13:3d:a3:59:c5:0e:ec:17:79:40:c4:d1:
         a3:c9:52:4e:5b:d4:71:86:3f:86:5e:4a:7a:94:b0:2c:16:ec:
         db:37:69:b4:ed:17:79:36:a7:42:67:d9:13:3f:ee:de:0f:3d:
         02:bd:b2:5d:5a:d5:60:c0:95:bb:25:98:d2:42:23:57:f4:fd:
         f8:30:d9:fb:bc:6c:d4:34:60:9b:fe:52:03:bf:42:1a:df:7f:
         2c:9c:48:c1:5f:50:a8:b6:bc:95:05:7e:4a:f5:90:f2:f1:34:
         cf:ed:3d:49:13:36:bf:ec:d1:72:b3:b7:68:4a:4b:17:32:cd:
         47:76:5e:69:bd:35:70:93:0f:cb:d4:51:3d:fb:c8:2f:1c:d7:
         7d:6c:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----