Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32322d3234203d3e20313939373037.roa
File:                     3139322e3230382e342e302f32322d3234203d3e20313939373037.roa (raw, json)
Hash identifier:          zo2YuA4MM7OkIxK8bKppOAtTkoAAAD6K2SFik3kf6ks=
Subject key identifier:   11:8C:C4:F2:3C:0C:6D:D0:DD:3B:6F:30:96:EF:32:47:E2:E3:D2:25
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       32B936295691D1D6A42E8B686C03CD03C8B8F014
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32322d3234203d3e20313939373037.roa
Signing time:             Sat 15 Jun 2024 04:11:10 +0000
ROA not before:           Sat 15 Jun 2024 04:06:10 +0000
ROA not after:            Sat 14 Jun 2025 04:11:10 +0000
asID:                     199707
IP address blocks:        192.208.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 00:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b9:36:29:56:91:d1:d6:a4:2e:8b:68:6c:03:cd:03:c8:b8:f0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 15 04:06:10 2024 GMT
            Not After : Jun 14 04:11:10 2025 GMT
        Subject: CN=118CC4F23C0C6DD0DD3B6F3096EF3247E2E3D225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:9b:19:92:48:4d:17:15:fc:98:2a:f5:16:
                    06:b5:6e:4d:d2:52:5d:30:e8:21:0d:e6:31:74:96:
                    03:6f:02:b2:ba:f7:1a:ea:20:e2:d4:46:13:15:66:
                    f9:53:b2:a4:29:d7:ce:bc:af:df:71:29:a3:e2:c3:
                    2d:e4:b0:a8:26:ea:95:03:4c:0d:f9:cf:fa:da:95:
                    99:62:44:78:9c:d7:d1:c6:0b:f3:84:fa:d7:ca:6e:
                    c6:3d:49:94:fd:67:5c:6e:41:89:f5:87:95:d7:38:
                    d9:32:08:a1:29:8e:e9:57:c5:53:05:5b:2f:1c:19:
                    b7:51:24:a1:fe:6d:71:e2:9f:13:60:8a:ef:32:97:
                    7b:31:c2:58:10:18:08:63:d1:8b:ef:09:da:21:d5:
                    01:4e:ab:9f:47:fa:b5:9a:6d:26:32:23:ac:4e:26:
                    e8:48:23:a2:0e:eb:5c:04:ce:84:43:42:b2:11:4e:
                    7f:d0:bb:15:6d:c3:b3:7e:b5:cd:aa:a4:3a:6e:59:
                    c8:2a:1e:74:8c:23:6c:65:ba:92:0c:7d:35:cf:a6:
                    61:df:5c:2a:3d:a2:70:50:ea:21:08:ac:5e:a4:33:
                    36:e6:8c:44:ad:0c:21:ad:02:36:35:27:bc:f8:a1:
                    1f:d5:f8:67:3f:92:bf:0d:80:2a:df:a9:6e:d3:89:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8C:C4:F2:3C:0C:6D:D0:DD:3B:6F:30:96:EF:32:47:E2:E3:D2:25
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32322d3234203d3e20313939373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:6e:9c:a8:a0:86:67:e7:6f:ec:d5:6f:01:c7:ec:96:81:
         32:d7:57:07:64:9d:c6:0a:8c:e4:35:cc:e7:7c:87:dc:c0:0e:
         c6:2a:ed:0d:81:0d:ae:26:a2:86:a5:d7:b5:6d:90:19:54:85:
         e5:df:16:6d:61:db:9c:6c:d7:d2:07:44:0b:62:6c:ba:cc:8c:
         ab:ce:0c:ca:b5:6c:52:d8:56:ff:7f:e4:16:27:6a:4d:d1:ce:
         40:eb:f9:8c:56:73:73:91:4b:2e:a9:14:00:df:d5:42:97:e5:
         ed:c7:89:aa:06:cf:0e:9a:e1:a9:8c:3c:d8:49:a8:3d:91:25:
         9e:e9:e5:10:8a:b8:06:4a:f1:fe:30:25:f9:07:41:48:8e:b7:
         f9:1a:e6:0c:fc:aa:8c:ad:29:10:d2:c7:e4:25:75:57:60:f5:
         5e:f4:bf:4d:3e:db:c3:07:18:5d:49:57:56:8a:99:af:22:ca:
         96:dd:78:52:ee:ef:50:db:ab:cf:b9:e4:83:db:b2:d1:84:57:
         4b:c2:8f:31:04:ea:47:d9:00:56:61:cf:b7:d8:a0:38:12:ab:
         37:4d:87:72:4d:e4:06:c4:05:fd:39:b5:4a:b4:87:1a:47:b7:
         4e:39:57:4f:10:b8:cd:2a:47:84:7b:85:3b:ed:99:ff:bd:69:
         74:29:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----