Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313337353039.roa
File:                     3139322e3230382e322e302f32342d3234203d3e20313337353039.roa (raw, json)
Hash identifier:          iKAG/v19isqAMmDQlzfBq/LDhXD5VZHbtd/D56RxFJk=
Subject key identifier:   F0:64:04:64:E7:D2:F6:D7:CF:9A:21:F8:29:81:FC:EA:F3:C8:F5:B7
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       3DF95650D4369A095B7927E44FBDE02932C11903
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313337353039.roa
Signing time:             Fri 14 Jun 2024 16:16:48 +0000
ROA not before:           Fri 14 Jun 2024 16:11:48 +0000
ROA not after:            Fri 13 Jun 2025 16:16:48 +0000
asID:                     137509
IP address blocks:        192.208.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 10:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f9:56:50:d4:36:9a:09:5b:79:27:e4:4f:bd:e0:29:32:c1:19:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 14 16:11:48 2024 GMT
            Not After : Jun 13 16:16:48 2025 GMT
        Subject: CN=F0640464E7D2F6D7CF9A21F82981FCEAF3C8F5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:0b:e8:c6:8c:c2:2c:c4:91:71:4a:58:55:
                    e0:6a:af:8a:c4:f9:07:eb:fb:4b:6d:00:80:ff:dc:
                    dd:b2:06:ec:14:f3:b0:f3:32:66:83:46:92:f1:3b:
                    bc:96:1d:fe:7b:59:e0:34:9d:8d:14:60:11:19:1d:
                    f1:46:12:1c:09:3b:64:8b:3a:89:46:4e:a5:14:88:
                    ca:48:9a:14:c3:f6:74:99:f7:f8:b1:fa:e0:4d:c4:
                    5f:0d:c0:d8:05:0d:df:f5:f1:6e:bf:b0:f5:82:52:
                    e2:fa:d7:cd:c4:b3:00:71:6c:af:d6:b8:33:0a:ac:
                    ff:af:13:4f:c0:be:b7:66:06:f9:3f:bb:38:61:0a:
                    2f:76:72:06:f9:37:6c:d1:e5:0a:12:4c:b8:be:8b:
                    0a:ac:7e:92:8a:1d:5b:e3:25:cd:c1:ab:76:06:07:
                    74:2f:47:14:5a:d9:b8:72:89:4c:97:8f:c2:29:45:
                    9a:09:f3:3d:56:a7:80:4b:6b:4a:07:1e:d9:11:e2:
                    5f:01:41:18:af:7e:30:4b:82:43:55:cd:a1:fa:27:
                    c4:f1:df:4b:f5:00:ce:4e:f1:47:94:fd:07:05:43:
                    bf:33:17:65:1b:c7:25:0c:a5:c7:7f:f0:56:a1:91:
                    17:ce:a7:3c:b0:a8:bd:0e:1d:d0:15:21:19:ab:70:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:04:64:E7:D2:F6:D7:CF:9A:21:F8:29:81:FC:EA:F3:C8:F5:B7
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313337353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:36:6e:c6:95:ce:c6:e9:73:15:88:38:87:1c:89:3c:00:
         1d:37:96:a7:04:85:77:25:09:dc:d9:bb:0c:be:f5:8b:d1:23:
         3b:c8:93:65:f4:59:2f:5a:c2:0a:58:5a:1d:80:ba:3f:de:d4:
         77:0f:ca:11:03:5a:80:c2:82:ef:f7:8d:ec:3b:5f:01:11:88:
         ce:86:fe:1f:92:84:55:33:63:ad:91:51:8f:4a:5e:a9:31:96:
         f4:76:17:e9:07:66:8e:eb:b4:f9:54:d4:75:06:0f:f4:de:41:
         00:dd:47:58:63:36:e2:e8:36:6f:6a:df:fa:a4:b2:2b:45:9f:
         1f:49:5e:b3:71:7e:48:56:95:75:1a:7f:c0:49:35:41:83:d6:
         32:b8:1a:91:b9:fe:83:06:f8:b0:20:a0:39:a1:1f:fc:41:35:
         a4:d5:ed:c0:d3:62:8a:35:92:3c:f7:eb:ec:6e:28:63:81:e2:
         dc:ed:08:69:a0:86:a2:5b:73:c5:a7:bb:7c:a2:a1:0b:08:aa:
         21:37:aa:0f:64:dd:2b:e1:d9:ec:11:74:f7:c7:3c:00:75:e3:
         eb:0b:e6:4e:7d:84:3a:c4:86:f7:d9:f7:d0:dc:5e:68:d5:64:
         0e:cd:b1:d8:73:38:53:b0:f1:24:c4:b7:92:bd:63:ef:35:ed:
         bc:2d:d6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----