Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e203330353137.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e203330353137.roa (raw, json)
Hash identifier:          MPq/EUaLDp1hi50nJbI1BsIvPdAq56LIAFSENIGv6Qg=
Subject key identifier:   D0:3F:81:05:27:C6:32:9B:33:E3:B1:B7:90:B2:40:39:DF:71:96:1A
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       469E5A374236EFA767B3C77AB758393FD4B1933C
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e203330353137.roa
Signing time:             Fri 22 Dec 2023 20:01:12 +0000
ROA not before:           Fri 22 Dec 2023 19:56:12 +0000
ROA not after:            Fri 20 Dec 2024 20:01:12 +0000
asID:                     30517
IP address blocks:        74.120.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 12:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9e:5a:37:42:36:ef:a7:67:b3:c7:7a:b7:58:39:3f:d4:b1:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Dec 22 19:56:12 2023 GMT
            Not After : Dec 20 20:01:12 2024 GMT
        Subject: CN=D03F810527C6329B33E3B1B790B24039DF71961A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:00:48:a7:7e:c7:67:d0:f1:cd:7b:c3:cd:
                    7d:a5:f0:25:52:d4:de:4e:c2:7f:db:ab:15:a9:d5:
                    9d:1f:f0:54:2e:33:9a:2f:c1:aa:d0:f3:46:ab:a3:
                    da:18:fa:51:ae:9d:41:8f:4c:99:f4:ca:08:c7:34:
                    b3:04:5d:15:6d:f9:8b:e5:ac:75:82:77:c2:28:89:
                    a2:c6:83:df:a5:74:c5:d1:42:dd:b5:38:22:ac:5c:
                    50:9b:1e:ca:bc:1d:fe:5b:af:2e:d1:1b:11:29:6e:
                    63:43:42:9a:3f:f9:9f:df:d8:67:eb:70:b8:3a:64:
                    28:7f:7f:89:de:70:d0:fa:88:05:16:6a:a2:1f:a6:
                    59:c0:48:e6:a3:77:bb:b4:ad:67:33:8a:ae:1c:7a:
                    07:f9:af:b8:a0:cb:b1:cd:87:82:11:22:f1:12:a5:
                    e2:68:4b:49:23:42:c5:b2:4d:aa:60:d8:00:97:47:
                    87:75:65:d6:ee:63:ae:64:82:ac:32:1c:43:be:0d:
                    27:34:57:43:42:7a:87:00:0c:be:38:98:5b:1c:c7:
                    27:c0:78:d6:7e:fa:4b:23:8a:4e:11:f7:99:20:ab:
                    75:6d:c9:4e:c3:9d:4d:b1:b2:c7:5b:a4:d1:5a:bb:
                    02:e6:dd:84:3e:12:4b:1e:ae:18:38:c3:07:be:04:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:81:05:27:C6:32:9B:33:E3:B1:B7:90:B2:40:39:DF:71:96:1A
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e203330353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:56:ef:be:9e:a2:d9:d3:a2:9c:b2:43:e8:93:fb:7a:ec:ca:
         d7:bb:28:9c:8f:28:8a:ea:40:2a:3e:cb:bd:4f:86:d6:ab:3a:
         39:4d:5a:7d:fd:c0:3f:d3:68:ac:7a:a8:14:d4:25:d4:9f:6d:
         ae:2d:03:70:9d:e2:54:ad:8a:46:3d:2e:7e:a3:db:81:e2:de:
         9b:c6:0d:00:b7:81:25:b9:bf:56:a1:d7:10:f7:a3:41:28:93:
         9e:bf:03:c4:7f:05:2e:45:ac:7f:59:74:12:d7:5d:1c:b0:20:
         6d:55:27:6b:ae:cf:84:9d:d4:b5:48:49:36:f9:c1:70:e3:bb:
         8e:28:38:e1:0a:e4:02:93:79:85:8f:1b:da:f1:de:6a:b9:c3:
         df:92:30:33:6a:be:93:20:ea:5e:99:14:e3:13:9a:07:ed:03:
         57:9d:b1:5b:72:3e:9b:62:8f:61:81:78:79:15:3c:77:d6:ad:
         b9:06:bd:07:d4:45:31:fa:96:ba:f3:07:bc:46:52:33:fe:47:
         ea:e1:31:7b:c0:5e:67:5d:e4:16:6b:24:51:b0:5f:74:f4:e0:
         4c:5f:15:2a:e0:38:94:21:f4:8b:4d:90:60:4f:0b:5e:dc:d7:
         7b:2a:7e:35:12:30:36:c3:76:a6:35:49:31:04:a6:c9:0a:25:
         89:19:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----