Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3233203d3e20323132323338.roa
File:                     3137332e3234372e3233382e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier:          wUjkE3jGk3zrlTWnz11N9GWzaQmWNJPuvlgPsYFI5M0=
Subject key identifier:   47:0E:0C:D3:3E:BB:F0:B0:0A:13:45:A5:D8:3A:03:E7:72:A3:A8:96
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       0F39D73C0922E457305ABE1392DCC88693FF64E1
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3233203d3e20323132323338.roa
Signing time:             Wed 14 Aug 2024 01:25:37 +0000
ROA not before:           Wed 14 Aug 2024 01:20:37 +0000
ROA not after:            Wed 13 Aug 2025 01:25:37 +0000
asID:                     212238
IP address blocks:        173.247.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 15 Sep 2024 05:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:39:d7:3c:09:22:e4:57:30:5a:be:13:92:dc:c8:86:93:ff:64:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Aug 14 01:20:37 2024 GMT
            Not After : Aug 13 01:25:37 2025 GMT
        Subject: CN=470E0CD33EBBF0B00A1345A5D83A03E772A3A896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:79:e5:d6:91:6c:bb:ee:44:2d:38:3c:f4:
                    da:21:f7:a1:d5:47:7b:68:cc:83:5e:99:05:73:fb:
                    93:15:ad:87:39:b1:a4:53:ca:68:90:d3:16:c5:82:
                    a1:7b:a1:b2:a9:dc:13:c9:66:54:43:65:db:8b:01:
                    4f:89:ae:5f:17:1d:19:ec:8d:40:b9:65:9d:95:49:
                    a9:8a:c6:90:23:0b:6b:65:1d:49:86:77:4a:8b:06:
                    d0:ed:7b:18:de:16:f9:c7:70:0a:30:18:e8:6e:30:
                    dc:53:9c:f5:fc:73:3b:5f:3b:11:86:1e:d5:3c:25:
                    4f:8d:4d:8c:14:ef:9c:43:3a:ed:b5:15:8f:d7:1f:
                    8e:2b:63:6f:fb:5e:b8:83:a3:81:20:2e:16:0f:1b:
                    a0:4e:3b:bf:b9:2d:9d:b6:bf:31:6d:83:9c:4c:a1:
                    b6:5d:4b:b7:7b:51:ce:74:25:03:87:53:ac:3c:3f:
                    ad:b1:99:6e:a7:f1:95:19:2c:f2:e1:7a:0d:0c:f9:
                    e9:dc:bc:3d:db:36:fa:d9:94:22:28:07:6a:08:3d:
                    5e:d2:fb:35:83:65:42:9b:c2:33:cd:d9:9a:7a:db:
                    85:ff:ce:f8:28:5e:1d:be:8b:fe:d2:4a:04:4e:72:
                    a4:f0:79:5e:50:05:02:36:ec:81:67:b8:c0:ee:dd:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0E:0C:D3:3E:BB:F0:B0:0A:13:45:A5:D8:3A:03:E7:72:A3:A8:96
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233382e302f32332d3233203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:60:bd:3b:2e:7f:ae:2c:92:7f:d7:a9:cf:4c:dd:98:b0:e3:
         c5:9e:9a:e2:94:8c:1f:29:54:52:48:e0:2b:86:03:4e:57:4f:
         c3:c8:e2:ac:cf:14:4e:b5:32:08:db:47:74:6d:ce:76:a7:27:
         2b:ab:38:ab:e3:e6:83:56:df:fc:30:c7:92:03:1f:1c:dc:d1:
         5f:81:ca:ef:a7:ec:8e:d8:cb:ec:d6:71:1a:b1:d4:ef:cf:72:
         c7:91:aa:97:71:da:be:f5:ee:b1:db:84:c8:b7:fc:79:7c:eb:
         d8:0c:22:e0:70:c6:88:e7:9b:6b:41:15:1a:5a:cb:42:63:68:
         01:57:5b:ae:04:9e:5d:cb:9a:be:ca:01:4c:ca:a7:b0:e6:8c:
         1e:1c:0a:19:0c:c5:64:af:83:b5:5f:6b:e0:7b:14:31:d5:e8:
         74:f0:49:f8:af:26:e3:72:4b:db:0c:e1:a6:ea:8a:1e:31:0f:
         de:ad:86:d6:86:c3:fd:62:c0:bd:39:21:c3:9b:80:05:78:5b:
         e8:c2:e0:ab:29:f8:bf:25:ed:86:0f:5f:83:f4:f0:d0:32:67:
         ae:ae:94:ac:26:b0:26:43:0b:3c:32:b3:b6:2c:71:16:aa:e8:
         a1:0e:50:9d:1b:27:76:9c:f9:65:0c:50:25:3c:78:81:4c:b4:
         d0:6b:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----