Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203539383935.roa
File:                     3230392e38372e3136392e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier:          RYbHlWUldyWDcSgshCDctlCE994FxwJMIFvmcrs9GcQ=
Subject key identifier:   42:0E:AF:37:E7:58:24:79:18:89:E8:E9:18:01:BD:DB:F9:4D:2B:EB
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       44F6578EF111682A3F24A3718949E193314E275C
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203539383935.roa
Signing time:             Sun 31 Mar 2024 21:58:55 +0000
ROA not before:           Sun 31 Mar 2024 21:53:55 +0000
ROA not after:            Sun 30 Mar 2025 21:58:55 +0000
asID:                     59895
IP address blocks:        209.87.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f6:57:8e:f1:11:68:2a:3f:24:a3:71:89:49:e1:93:31:4e:27:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Mar 31 21:53:55 2024 GMT
            Not After : Mar 30 21:58:55 2025 GMT
        Subject: CN=420EAF37E75824791889E8E91801BDDBF94D2BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:61:d7:00:fd:84:59:af:2e:01:89:d8:1c:
                    b9:43:90:ae:1b:f9:6c:c8:4b:9c:7a:fb:c5:b5:9b:
                    7e:2d:b9:d6:08:09:30:b1:cf:f3:38:6b:45:28:77:
                    65:fa:54:10:8d:07:f0:ba:b4:06:e5:a4:1a:74:4b:
                    07:70:66:3e:2b:93:45:d4:d4:3b:83:84:31:2d:5b:
                    8e:94:47:23:f5:42:3c:ae:dc:26:a0:8c:30:63:ea:
                    0b:4f:0c:c7:9f:38:98:97:58:70:f0:f7:7f:b4:4d:
                    50:e1:5b:e7:3c:49:1d:5b:19:4f:db:46:fa:e8:db:
                    41:76:b7:42:c0:aa:54:3f:71:ec:9f:fd:4a:05:f7:
                    13:44:e4:a6:de:dc:bd:44:c6:ea:12:49:37:40:64:
                    59:80:0c:8e:c2:49:91:6e:18:49:1b:7e:2c:f0:e4:
                    0a:ba:82:2c:78:d4:c8:23:c5:c9:f8:84:9a:d8:f8:
                    93:db:8b:fb:19:04:c0:08:55:b5:3a:a2:e8:3d:48:
                    d5:8e:99:9a:55:9c:fc:30:a1:e5:73:a5:d5:b0:fd:
                    e6:85:c8:f1:05:8b:4c:37:ef:e6:7c:da:29:40:70:
                    27:32:27:a1:a7:51:71:21:8c:d0:9a:cd:74:f4:a8:
                    8d:89:d5:83:96:18:f5:cc:db:4b:cc:52:b0:cf:75:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0E:AF:37:E7:58:24:79:18:89:E8:E9:18:01:BD:DB:F9:4D:2B:EB
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203539383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:0b:43:80:d6:37:10:62:e7:2c:fc:a3:34:7f:68:50:a5:
         52:c2:cc:87:8d:15:a2:cf:df:80:43:b3:ea:14:14:90:40:93:
         04:1c:b5:bc:91:e1:43:6b:69:05:65:2e:44:04:b4:d3:4d:f4:
         b0:61:83:de:86:f5:48:91:9e:15:3e:9f:91:e4:c8:aa:a9:43:
         c6:fe:b5:65:97:80:14:9f:2c:04:20:3f:80:e6:ec:57:79:a6:
         c1:a9:a3:3a:68:9c:9a:00:bd:3a:7d:30:1b:90:1a:0e:6e:ad:
         a1:eb:f2:42:13:22:96:53:04:fe:6f:f1:c4:1e:06:85:91:7a:
         89:aa:da:e6:b0:80:5f:e7:66:08:85:be:4c:c0:09:ec:35:de:
         0a:2e:7a:dd:be:ee:5f:a8:eb:7f:4c:06:2a:83:1c:fc:25:b6:
         36:2a:b1:d5:39:96:a3:6f:3b:a8:92:b3:d9:5d:84:10:0a:30:
         64:ec:8a:a5:07:24:20:0f:f6:66:b4:d1:79:74:5a:54:b5:f6:
         22:b5:64:a4:9a:4e:59:55:4c:51:ba:19:41:ee:f0:7c:83:63:
         cf:54:c4:bd:6b:0b:9f:37:e3:72:63:6f:ef:45:d6:d1:b5:50:
         fd:01:6c:3b:36:2b:bf:f6:8e:7a:d5:04:19:0c:67:bb:f4:8c:
         eb:64:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----