Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32332d3234203d3e20383334.roa
File:                     3231362e3234362e39302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          iUT3kMFH4fW2utuaGkcZze8iFPYyl8s3nsO6yQ6XJis=
Subject key identifier:   9A:A5:C7:1B:C4:F2:23:D1:4B:DF:9E:AB:F4:69:9C:3B:2C:B0:84:1D
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       237E2CC48994876C1767D65E619446F75483312A
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32332d3234203d3e20383334.roa
Signing time:             Thu 20 Apr 2023 00:00:15 +0000
ROA not before:           Wed 19 Apr 2023 23:55:15 +0000
ROA not after:            Thu 18 Apr 2024 00:00:15 +0000
asID:                     834
IP address blocks:        216.246.90.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7e:2c:c4:89:94:87:6c:17:67:d6:5e:61:94:46:f7:54:83:31:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 19 23:55:15 2023 GMT
            Not After : Apr 18 00:00:15 2024 GMT
        Subject: CN=9AA5C71BC4F223D14BDF9EABF4699C3B2CB0841D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:62:2f:3f:63:59:3d:ac:b8:94:d8:a0:d2:
                    da:4d:98:fb:c6:86:b7:1a:3f:1c:45:74:73:9d:05:
                    8d:ff:02:ef:1e:7f:46:2a:fe:f1:79:ce:33:42:59:
                    c4:6c:45:93:a3:f5:c9:bc:f7:9c:72:8d:97:c4:71:
                    8c:ae:02:99:d8:b1:2d:b5:a1:8a:95:12:fa:5a:8e:
                    a0:39:92:01:09:a7:f0:72:ec:06:23:3b:86:2a:20:
                    d8:5c:9e:18:7f:e4:ef:0c:6b:81:48:6d:8e:91:9a:
                    45:8e:6a:6d:d8:1a:30:5a:a0:f7:2f:cb:b1:e1:2a:
                    07:44:ce:d2:35:a6:32:fb:66:f8:3f:f9:96:66:a9:
                    e7:d2:b7:8d:f8:94:a7:12:5a:57:7e:39:01:6f:64:
                    21:f6:5a:94:6e:bd:c0:10:01:97:94:fe:b7:ec:9d:
                    e3:48:4c:6a:a7:1d:87:b4:71:bc:17:3a:a9:ef:a0:
                    5b:7e:d9:ae:e2:9e:a6:c9:98:e7:6c:4f:c8:4f:b8:
                    51:28:60:38:a6:c3:09:f5:d4:b2:d7:8a:91:95:91:
                    be:1c:24:84:21:64:58:29:aa:03:34:61:64:62:20:
                    26:72:64:21:f7:0a:93:12:70:c0:62:e9:83:43:53:
                    ce:c2:3d:03:a7:39:50:a0:78:30:50:03:8b:74:ff:
                    40:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A5:C7:1B:C4:F2:23:D1:4B:DF:9E:AB:F4:69:9C:3B:2C:B0:84:1D
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e39302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:e2:3d:17:02:be:62:a8:c1:78:8c:b7:c6:30:3b:d2:c2:d5:
         72:40:ba:21:03:3a:d9:6c:15:57:6e:5f:e2:7e:c7:fc:63:6c:
         12:e4:ce:bd:70:62:7b:fd:79:53:5b:a4:6c:33:d3:35:7d:3e:
         f2:28:ed:26:30:76:3a:68:2d:4f:55:11:a1:69:4b:ca:70:68:
         9f:9d:c0:5d:c9:17:e3:24:6e:55:b5:cd:4d:dd:a6:d0:df:4d:
         5e:43:5e:af:88:ae:32:1f:41:12:d3:7e:f8:63:5e:40:f1:84:
         4b:d5:d3:5b:46:86:e6:fb:ed:67:1e:c4:73:30:d2:63:ac:7f:
         db:44:be:dc:93:cc:58:e9:23:d1:11:ab:33:89:3b:48:d4:bf:
         d6:8a:b4:da:7d:c9:b2:39:ec:6e:60:ae:ea:b9:91:4c:76:7f:
         1a:f6:64:9e:a3:98:3b:f1:6f:12:ed:7d:df:da:45:81:2e:0e:
         20:6e:69:31:d8:f5:8f:65:b9:9e:6c:04:dd:40:bc:d1:1b:4c:
         91:f8:97:e3:df:49:52:fa:ef:0e:91:a6:7f:38:64:15:37:88:
         de:07:0a:6d:8d:7d:be:a6:21:08:11:38:d2:4c:df:32:90:a3:
         d7:ce:3b:a3:f1:77:d7:27:63:65:d1:d5:e3:47:e6:83:3b:a4:
         96:bb:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----