Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233302e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          nk6dRFG16mKD8nr9IDYcUwZuxnJhjyPxxKJnzVX4Ask=
Subject key identifier:   64:0E:3B:ED:CE:44:FF:24:C1:C9:DA:B0:C2:5E:5E:DC:D1:3E:5D:81
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       6FAECA5D1337829B0D73C1B070171890D56CA66B
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 11:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ae:ca:5d:13:37:82:9b:0d:73:c1:b0:70:17:18:90:d5:6c:a6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=640E3BEDCE44FF24C1C9DAB0C25E5EDCD13E5D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:14:61:c6:30:52:f3:be:37:45:4b:e6:3f:
                    14:78:01:4b:d6:fc:3c:a1:eb:44:d7:49:fe:63:14:
                    d9:3a:e3:1a:77:5b:67:f4:f5:05:2f:44:5e:6d:88:
                    36:7f:d7:a6:cd:d5:df:ca:6f:a4:48:ad:41:d2:d0:
                    1c:fc:f0:a7:71:a1:02:52:29:37:3e:a2:4f:24:9f:
                    1d:a9:dc:88:07:ba:e5:12:5a:13:4a:bb:fb:15:40:
                    3a:33:42:d7:3f:d1:4f:1b:35:ce:d1:15:a1:55:2d:
                    14:6a:47:60:4a:93:57:a4:91:b9:ee:11:91:cc:06:
                    39:c3:77:39:a5:d9:9f:48:3a:c5:03:ae:5b:c8:ed:
                    b2:c4:58:4b:ae:dc:1a:7e:16:e6:7f:1f:e0:e5:3a:
                    3b:65:14:97:81:ee:01:ce:e2:70:de:1b:b5:18:3c:
                    61:bb:31:e7:75:f0:66:b9:66:16:14:8e:37:9c:3a:
                    4c:5d:cb:3a:ef:56:be:47:8d:be:bc:e7:ec:9f:31:
                    ec:c6:38:4b:0f:fa:7b:4c:a4:db:ea:41:4a:ed:38:
                    6d:5e:c2:9f:9c:f3:e4:cc:99:71:c7:e4:7d:22:11:
                    11:55:e1:d0:d2:cc:1b:d0:e1:d2:48:89:a5:04:d4:
                    02:4a:79:31:e4:7a:f9:78:ef:fb:ca:62:28:b9:53:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:3B:ED:CE:44:FF:24:C1:C9:DA:B0:C2:5E:5E:DC:D1:3E:5D:81
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:67:bc:ad:04:bf:63:02:72:65:57:a1:a4:86:8b:e2:40:
         69:e8:47:fd:c5:26:f7:4d:65:1d:11:3a:0d:6a:8a:d5:4e:8a:
         4f:75:e1:19:f2:5b:e3:43:9c:50:ec:bf:0a:84:38:6e:ec:63:
         b1:17:d2:a6:23:2a:ae:4c:6a:6a:5b:2e:9d:d2:27:ba:9c:36:
         2c:4a:80:91:0d:b8:a5:7c:db:50:d3:a1:f2:20:79:26:fc:33:
         ad:f8:c3:dc:ae:7f:77:72:d9:82:1d:9f:47:94:89:80:b0:fe:
         c8:e5:e5:2e:dc:be:00:b6:44:32:07:4a:d7:66:44:64:d9:56:
         f1:ce:82:e8:4e:43:0f:30:6e:64:5f:5b:d6:ef:4d:eb:a5:4c:
         a1:1c:aa:c1:ae:c8:ba:35:30:5d:5b:3e:11:58:48:9c:7c:45:
         ee:34:0f:34:de:b4:d3:e1:dc:95:34:bb:f8:ba:6e:88:60:aa:
         53:3b:b6:f7:ef:30:2c:8b:3c:46:4b:9c:c9:f2:03:ab:c8:2f:
         ca:05:e7:00:44:84:37:5c:2f:b1:4d:c1:23:9e:07:fb:9a:78:
         52:68:f3:9a:c5:31:d2:d0:e4:78:d1:54:b9:28:c7:04:18:35:
         46:36:d8:5d:a3:33:d0:c8:4c:99:c4:6c:10:56:86:d3:e1:b4:
         eb:54:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----