Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e20323034373239.roa
File:                     37342e3132342e3139362e302f32342d3234203d3e20323034373239.roa (raw, json)
Hash identifier:          BAFQwzD+38ObAcpuTk5YYQjL0U1NkMFGqPw1vsX4WxY=
Subject key identifier:   3B:C2:DC:82:A9:13:00:A7:F1:77:40:7C:84:10:7E:47:9D:1A:C1:8B
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       11F5C9AF4628DE19CD36B595EA76194295E5F570
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e20323034373239.roa
Signing time:             Mon 24 Jun 2024 02:09:17 +0000
ROA not before:           Mon 24 Jun 2024 02:04:17 +0000
ROA not after:            Mon 23 Jun 2025 02:09:17 +0000
asID:                     204729
IP address blocks:        74.124.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f5:c9:af:46:28:de:19:cd:36:b5:95:ea:76:19:42:95:e5:f5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 24 02:04:17 2024 GMT
            Not After : Jun 23 02:09:17 2025 GMT
        Subject: CN=3BC2DC82A91300A7F177407C84107E479D1AC18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:cf:7e:7d:89:a0:5f:46:85:ce:0d:63:7c:
                    e2:ec:a6:2e:69:aa:a3:1e:50:39:c0:44:a7:2b:a4:
                    ea:47:f0:39:ab:a0:13:e8:5c:93:be:a0:1a:79:75:
                    9d:cb:89:c0:33:1e:fb:3a:6a:83:b1:40:0b:44:5e:
                    7a:7a:01:ef:4f:1b:7a:77:ad:ec:f4:39:dc:36:d2:
                    8f:d2:48:79:bd:ed:03:71:66:f9:c8:0a:7c:54:72:
                    8d:63:ee:a8:9e:17:64:b5:ca:38:fc:7f:c6:99:b4:
                    af:f7:a0:d0:82:06:51:30:fe:1c:6f:9a:2c:4f:9f:
                    02:55:83:de:7c:8a:af:68:41:94:0c:93:a1:5b:d5:
                    7d:66:08:f2:8b:d5:a8:38:94:5a:45:40:b0:f8:79:
                    1f:ef:05:6b:1b:61:c0:2f:63:3f:8f:55:e7:ac:84:
                    23:d5:cf:bf:75:e6:45:11:21:0b:81:db:c6:96:20:
                    a0:65:bb:9f:d2:75:fc:3f:8b:67:07:67:b1:c3:d2:
                    cd:64:5b:6b:db:c3:88:bf:a3:e4:62:4a:f8:ea:80:
                    ea:0b:19:59:4c:06:0d:d3:7a:30:c7:09:de:cc:a1:
                    de:91:04:9b:38:f4:74:bf:ca:9f:1f:4d:d8:95:b0:
                    bd:75:11:c8:f8:60:cd:df:a8:10:c0:4c:11:e0:9a:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:DC:82:A9:13:00:A7:F1:77:40:7C:84:10:7E:47:9D:1A:C1:8B
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e20323034373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:84:7a:0c:ee:15:a8:4d:a6:a9:95:23:de:e8:5a:48:55:b0:
         3c:62:0d:9c:a2:9d:6a:6d:77:1a:82:25:f8:7f:5d:fb:6c:1c:
         1f:d8:00:44:2d:c9:4b:cc:56:89:c0:d4:da:88:f0:7c:2f:89:
         ab:40:f7:8b:83:3a:63:3c:78:d0:10:e7:cb:47:34:df:6d:62:
         d4:ef:27:c0:2e:72:d8:86:32:f5:e1:62:c6:a4:ff:50:73:f4:
         c0:b8:bc:72:2a:70:5b:e5:36:89:5d:aa:b8:40:4b:f2:0c:95:
         d7:f3:ba:0e:1f:3a:46:25:09:d5:b6:d8:5d:c2:aa:da:e7:54:
         8f:cc:f4:bc:34:c9:cd:17:71:d1:7a:8c:d1:b5:02:62:56:bf:
         3f:f4:12:e0:9c:f2:5d:69:61:ee:52:3e:e2:4e:50:c1:bb:9f:
         a7:98:7c:b4:4d:f3:86:c7:dc:e6:93:81:cc:c8:d9:6d:a7:d3:
         13:d6:1c:88:1b:ab:3c:4d:72:fc:97:58:b8:48:a6:88:9a:ec:
         ee:5a:fa:6a:ff:78:d8:1a:39:fd:21:27:f7:65:2b:08:9d:0b:
         e6:19:5d:ac:c2:17:aa:72:20:8f:34:3c:56:4b:14:a6:7d:3e:
         8a:76:cb:ef:36:97:2f:d2:e3:c5:ba:2e:11:80:6a:ef:93:23:
         74:21:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----