Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          bSp7YeS5bDqogMlx3sFCX0mgWRdXjXZkENSurmQIPv8=
Subject key identifier:   32:40:E1:9D:7C:8C:1F:B6:25:B3:98:26:C6:C7:CF:31:AA:52:77:EA
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       4AE6EA5192C8437D5990641DC4FF5AEB650C3C19
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20383334.roa
Signing time:             Fri 31 May 2024 00:03:01 +0000
ROA not before:           Thu 30 May 2024 23:58:01 +0000
ROA not after:            Fri 30 May 2025 00:03:01 +0000
asID:                     834
IP address blocks:        209.87.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 15:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e6:ea:51:92:c8:43:7d:59:90:64:1d:c4:ff:5a:eb:65:0c:3c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May 30 23:58:01 2024 GMT
            Not After : May 30 00:03:01 2025 GMT
        Subject: CN=3240E19D7C8C1FB625B39826C6C7CF31AA5277EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:f0:32:56:09:a5:fe:e0:df:d6:d2:80:20:
                    64:90:b1:49:7a:e9:be:6c:1a:18:5b:13:b0:ca:33:
                    d0:cc:99:db:da:9b:dd:85:c4:86:f6:b4:0c:b8:76:
                    5c:0d:e3:d3:d6:2f:cf:d8:4a:df:ec:44:d1:c7:9b:
                    c3:6b:29:d6:e8:5e:10:f7:e1:f8:04:f4:67:27:b0:
                    95:5a:68:96:98:26:63:b5:5e:06:f0:54:6e:7a:dd:
                    76:17:56:f5:0d:bd:94:d3:bf:41:f1:ff:1b:61:32:
                    af:2a:34:72:ca:bd:b4:8c:b1:7d:6b:53:b9:2b:4a:
                    62:c4:63:7e:6b:fe:4a:3f:b1:81:5b:95:31:b3:71:
                    4a:e8:3e:5e:bd:b4:94:11:0a:c7:0b:80:a4:88:13:
                    28:14:8c:7b:c5:4f:21:9e:5d:4b:de:e5:7e:2d:d4:
                    e4:ed:01:fd:61:98:f4:2b:52:27:77:d8:d2:da:88:
                    24:d7:a0:89:28:4b:c7:81:69:68:32:01:6c:cf:e0:
                    33:77:86:13:9f:63:d8:8f:5a:b3:23:00:cc:6f:a0:
                    7c:40:a3:d0:87:9b:de:9c:81:6b:24:aa:d5:d2:75:
                    c3:d6:af:1b:64:85:e6:57:77:a8:a8:ef:7e:11:19:
                    c8:68:cb:fd:3a:39:b9:c3:86:20:04:49:3d:3a:9b:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:E1:9D:7C:8C:1F:B6:25:B3:98:26:C6:C7:CF:31:AA:52:77:EA
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:58:4a:0f:79:fd:d8:f3:65:46:c2:eb:97:d2:41:36:17:8b:
         69:df:ed:ec:d7:20:aa:d4:a0:ab:65:5a:3b:2c:b7:17:50:7c:
         ee:e0:12:f9:96:58:04:5e:5f:c7:7f:4e:cd:07:e7:94:d2:92:
         cc:2a:34:b9:1c:ab:b8:c8:1e:7d:f2:d8:e6:f6:aa:e2:bc:14:
         78:d7:1f:bd:02:8b:76:d9:0d:41:fc:a3:fa:f4:91:75:33:2d:
         0d:da:b8:3b:4a:e0:5a:e3:1b:4c:6a:34:a1:f6:1b:8e:11:3d:
         64:37:aa:8e:bd:ad:3d:6a:77:13:b7:2e:8c:8c:81:e3:79:b3:
         6c:33:54:51:76:c8:a1:da:1b:cf:80:12:89:64:2d:68:e7:b9:
         d7:93:f1:d2:be:34:85:b5:67:3c:5a:06:a7:21:49:a4:94:d2:
         38:f7:c7:7b:a8:ca:47:6e:46:9f:9d:50:92:02:2d:ed:ef:6a:
         d8:ed:12:ee:7d:91:0e:69:42:0d:70:f3:5a:54:de:1b:06:81:
         e9:4c:f3:5d:71:15:f8:fa:54:31:39:0f:c1:5f:a7:7c:c2:bd:
         f3:69:da:49:30:56:3d:21:c6:99:c0:98:cc:df:2f:00:73:6c:
         b1:57:71:e9:c3:d0:27:77:5c:a6:a7:58:ee:c1:80:f8:df:0e:
         ce:86:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----