Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3137302e302f32342d3234203d3e20383334.roa
File:                     3139382e3137352e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          alka2gcgppT7JuKiR4SO2ZRzvMA7WJ0eEDb7idIwh9Q=
Subject key identifier:   83:23:B5:1A:C6:F4:F7:B8:3B:48:FD:E6:50:F9:9C:17:1A:69:87:F7
Certificate issuer:       /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial:       443428B695AC39471E79B2277E9D004B32ED19A4
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3137302e302f32342d3234203d3e20383334.roa
Signing time:             Tue 29 Oct 2024 09:07:35 +0000
ROA not before:           Tue 29 Oct 2024 09:02:35 +0000
ROA not after:            Tue 28 Oct 2025 09:07:35 +0000
asID:                     834
IP address blocks:        198.175.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Nov 2024 19:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:34:28:b6:95:ac:39:47:1e:79:b2:27:7e:9d:00:4b:32:ed:19:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
        Validity
            Not Before: Oct 29 09:02:35 2024 GMT
            Not After : Oct 28 09:07:35 2025 GMT
        Subject: CN=8323B51AC6F4F7B83B48FDE650F99C171A6987F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:64:96:c0:ea:af:c3:ee:6a:b5:4d:fe:ed:
                    5f:a2:fe:90:b6:40:89:bc:65:87:27:4e:ea:3b:d9:
                    85:30:1f:4d:bb:5d:f2:ad:3c:76:2f:53:05:d5:ec:
                    b6:41:18:d5:f0:96:8d:cf:39:ae:40:e7:75:92:6f:
                    0b:49:f4:01:ab:23:e6:19:81:1d:6f:f4:08:07:cb:
                    57:51:2a:19:62:26:19:a5:31:fa:36:60:d8:dc:a7:
                    69:ad:e0:40:ed:f6:38:a3:19:32:01:d1:02:5b:55:
                    b3:2e:3a:a1:58:e3:ea:a5:df:93:f3:87:ce:c3:ba:
                    9d:7e:14:a1:a2:d7:cc:13:0e:3b:43:88:1f:93:43:
                    8f:b7:84:bd:78:c6:53:54:80:40:42:bc:57:ae:2c:
                    96:97:e6:bc:cb:d4:4a:f1:93:c7:72:81:f7:62:1f:
                    5b:f0:a7:72:5b:a1:fa:09:b2:db:25:2c:59:c2:a6:
                    07:7d:50:c4:1f:5a:4d:ca:5d:96:fa:ce:12:c9:31:
                    51:37:0b:66:65:42:99:0b:9d:ca:ea:ca:46:5c:25:
                    a2:2b:a9:d5:41:ab:62:96:4f:99:83:22:78:f7:d7:
                    e0:e0:db:57:10:e7:78:a1:8e:fb:ec:40:3a:03:ec:
                    21:49:be:40:e1:f6:90:c3:04:86:8e:15:bd:18:df:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:B5:1A:C6:F4:F7:B8:3B:48:FD:E6:50:F9:9C:17:1A:69:87:F7
            X509v3 Authority Key Identifier:
                keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3137302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:56:00:f3:6b:a2:af:2d:0a:b0:80:57:03:59:d5:9e:da:89:
         21:0c:cf:8d:6b:eb:bd:92:76:4e:36:9e:4b:eb:58:b1:11:d3:
         c5:3c:cc:c0:aa:fd:17:3e:39:6d:a4:e1:c2:47:8f:a9:18:35:
         86:a7:71:87:28:61:2e:28:e7:d5:60:b5:ee:fd:40:3f:5b:7c:
         8e:82:8c:62:d6:55:13:3f:1c:35:ba:65:95:b6:b0:03:88:3c:
         9c:47:0e:b5:73:23:1c:a8:0e:c8:dd:3b:63:96:96:1c:dd:77:
         f8:60:47:fb:f8:1c:c5:62:3b:00:cb:0e:2e:23:9d:28:5a:db:
         de:1b:d0:36:23:14:15:f6:3d:66:4a:22:4c:19:cf:2c:f7:d3:
         97:f3:c8:c0:01:03:96:1d:f3:d5:da:7a:db:ba:cd:c4:3d:fd:
         cd:2f:90:e0:21:31:b7:e7:e7:8c:8f:86:c9:11:ae:ea:d7:f1:
         7e:0d:b7:e4:5b:a1:aa:2b:d5:93:33:40:03:97:9b:4f:82:38:
         93:82:4a:42:8b:a2:b2:3f:9e:1c:e9:1b:37:19:bf:d5:fa:c2:
         ab:3e:83:16:7b:e7:7b:00:41:3c:43:06:f0:c5:8e:37:87:4f:
         e5:ae:a5:ba:ae:09:3c:9b:5d:66:13:b5:7e:2a:a2:78:73:12:
         ea:9e:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----