Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e2037303138.roa
File:                     37342e3132342e3232302e302f32322d3234203d3e2037303138.roa (raw, json)
Hash identifier:          tl7mSIl7OrXLnmnMPQd897Rzhlg2CmP44ti1CVNA73Q=
Subject key identifier:   22:52:A9:9F:4C:CA:93:0C:9D:5A:2A:E2:A7:2B:16:F0:FF:75:DD:79
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       27C8C007B7B41D13A8CBBE25A06BF9FC90088ED1
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e2037303138.roa
Signing time:             Thu 27 Jun 2024 03:15:28 +0000
ROA not before:           Thu 27 Jun 2024 03:10:28 +0000
ROA not after:            Thu 26 Jun 2025 03:15:28 +0000
asID:                     7018
IP address blocks:        74.124.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 18:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c8:c0:07:b7:b4:1d:13:a8:cb:be:25:a0:6b:f9:fc:90:08:8e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 27 03:10:28 2024 GMT
            Not After : Jun 26 03:15:28 2025 GMT
        Subject: CN=2252A99F4CCA930C9D5A2AE2A72B16F0FF75DD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:3a:0b:f9:0f:ee:57:1b:ed:00:e6:08:70:
                    2d:b5:95:96:70:3b:9d:73:10:c8:c3:3d:83:14:7e:
                    78:aa:3e:95:08:c7:c8:40:fa:a6:5a:8d:bf:c6:cb:
                    62:69:2b:4f:fb:b5:b5:fe:b5:86:2b:8f:1d:ca:06:
                    e4:6c:5f:80:da:2f:2b:a5:cf:75:7a:d2:e0:79:5c:
                    aa:22:28:c8:1e:b0:7a:8d:65:c4:d1:97:83:27:68:
                    22:6c:bf:f9:59:aa:4d:92:e2:bb:4d:25:81:24:e6:
                    e7:d9:e2:4c:90:d1:cf:fc:22:26:c5:3d:7c:8e:4a:
                    51:51:41:96:fe:71:8c:9c:1b:30:9c:47:02:f9:03:
                    be:f5:c5:37:d9:11:13:64:76:7b:aa:64:be:b0:4d:
                    97:40:ae:8c:3b:35:00:47:29:30:bf:d3:15:eb:5b:
                    4b:c9:29:f6:50:13:34:01:56:aa:07:5b:d6:69:e2:
                    d5:eb:96:3b:6d:87:ea:f1:58:4d:b1:39:92:61:91:
                    49:79:ff:91:13:ff:c1:96:74:90:d3:0c:e5:3b:9b:
                    ff:1a:95:4c:4d:69:ff:27:e3:b1:33:1b:a4:72:e9:
                    b8:e5:e5:bb:77:9f:f6:ea:e0:98:c2:be:e3:29:86:
                    67:60:20:f5:a8:11:d6:9c:7b:bc:87:e9:02:c5:9a:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:52:A9:9F:4C:CA:93:0C:9D:5A:2A:E2:A7:2B:16:F0:FF:75:DD:79
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3232302e302f32322d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:d1:33:79:78:66:c4:aa:36:f1:96:b0:db:bf:c6:bd:95:15:
         e4:cf:27:95:f3:48:95:74:ad:7c:74:a5:23:bd:23:b7:f2:4b:
         0b:8d:14:e4:ff:6c:47:3b:5e:5a:b9:a4:78:26:8a:29:e2:ac:
         97:6e:f9:77:75:24:e6:97:22:53:45:cf:45:e9:0d:d7:f4:a4:
         11:cd:ca:48:35:6d:ff:e2:91:a6:09:6b:75:c7:1e:71:4f:95:
         cd:38:b4:0b:fe:97:43:c1:3d:04:6a:09:3a:5b:2e:e6:a0:6c:
         63:a4:4b:c6:38:15:97:38:91:be:ff:c0:e6:c0:45:c1:f3:7a:
         7f:9c:16:a7:f6:f7:df:6b:4f:e8:64:27:63:9c:93:a0:36:bc:
         77:1f:c5:a1:ad:fb:fd:8f:e2:7d:d1:44:8d:8f:ee:c1:60:53:
         42:5d:4c:fa:68:7f:38:12:f5:a2:3c:33:61:65:aa:d1:66:df:
         ef:d8:a1:8f:a0:62:c2:06:86:b6:d6:e3:e9:23:78:e8:eb:6c:
         85:0d:aa:b0:33:0b:67:39:ef:7f:59:40:a6:29:b4:83:db:c2:
         6a:9d:71:26:29:ed:d6:d0:f7:42:e6:0c:98:0c:18:73:13:ff:
         a0:a7:4b:3d:d6:06:33:73:0e:a0:d5:44:9f:ff:43:1a:d0:c4:
         a1:fa:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----