Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e203433363431.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e203433363431.roa (raw, json)
Hash identifier:          y2H/GoJadsVqvjIcGXVCU3gOsYeBD4H3SIyPi6ZqzDg=
Subject key identifier:   F5:61:F6:33:72:66:2E:4D:76:B9:CE:32:67:2A:57:55:98:84:C4:E9
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5C8113FB6F3F1EDD3DD529E85EACBD8C944B541A
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e203433363431.roa
Signing time:             Tue 25 Jul 2023 14:44:13 +0000
ROA not before:           Tue 25 Jul 2023 14:39:13 +0000
ROA not after:            Tue 23 Jul 2024 14:44:13 +0000
asID:                     43641
IP address blocks:        45.135.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Aug 2023 14:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:81:13:fb:6f:3f:1e:dd:3d:d5:29:e8:5e:ac:bd:8c:94:4b:54:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul 25 14:39:13 2023 GMT
            Not After : Jul 23 14:44:13 2024 GMT
        Subject: CN=F561F63372662E4D76B9CE32672A57559884C4E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:e2:bf:2c:98:98:7c:3b:c8:70:cd:80:c5:
                    ed:c1:ae:fa:12:a3:fe:bb:14:f3:23:30:49:58:6b:
                    b4:32:77:6b:44:e0:2e:ef:5e:cc:e4:b4:fa:5b:a5:
                    b0:01:bf:bc:5a:f5:64:d2:53:36:fe:73:29:c3:3b:
                    2c:c6:4e:bc:59:0c:61:86:eb:03:3d:7b:0f:b6:63:
                    d5:5b:50:af:66:10:04:09:8e:f2:f8:5f:b4:8c:b5:
                    53:dc:c4:54:c8:67:72:be:4c:d2:5b:dd:9d:31:d3:
                    06:dc:7b:35:2c:ee:d5:a7:33:01:9d:be:3a:86:29:
                    62:af:14:28:c0:25:7b:69:8a:69:01:2b:fb:d9:d1:
                    4c:98:2b:11:85:26:e4:2e:db:39:cc:99:60:78:03:
                    9a:d1:4c:44:8b:5b:65:87:a7:b2:76:5c:0e:7d:7e:
                    66:ad:11:7d:b8:1a:cc:d2:de:b7:97:2c:dc:9c:6f:
                    2f:d5:6f:2f:74:80:99:f3:89:11:ff:15:2d:89:b8:
                    df:62:82:00:3d:84:e7:d9:a7:35:d2:df:d2:ba:fe:
                    0b:c5:48:76:e9:26:a8:34:71:7a:93:8e:73:bf:e1:
                    f9:51:0c:8d:67:b5:68:29:92:15:0f:23:66:5c:c5:
                    47:d2:88:fa:f7:32:b5:84:f8:8b:8f:0a:f9:9c:a5:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:F6:33:72:66:2E:4D:76:B9:CE:32:67:2A:57:55:98:84:C4:E9
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e203433363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:47:6f:fc:f6:5f:9a:05:d6:b3:ca:72:58:27:05:1b:a5:
         36:42:8e:cb:71:e4:a7:ad:ef:4e:2a:4c:d5:3f:54:5a:27:af:
         56:de:d9:ee:26:36:da:d3:ff:bf:33:55:c1:21:4c:26:8b:8b:
         eb:2e:40:22:89:bd:f2:ad:75:89:a4:45:67:eb:08:bb:a2:40:
         8c:71:c1:10:63:93:77:fc:67:55:fc:a3:ac:60:66:88:b1:74:
         99:79:67:da:68:a9:77:b3:ed:35:a8:9b:3e:79:16:1c:2b:e3:
         fd:2c:74:3c:d5:7e:07:66:68:fc:07:df:52:ee:f3:04:d4:cd:
         4c:49:40:8f:b4:43:bd:6f:e4:f8:46:bc:69:fc:22:ff:4c:e4:
         f6:fc:f3:5a:b0:51:f0:e9:78:2f:69:3c:34:c3:be:81:97:f5:
         57:f0:b0:44:98:4f:3d:17:7d:74:d7:c5:d4:a6:b4:71:0c:28:
         bc:6d:4e:9c:b7:af:3c:af:4e:2d:68:47:63:01:f9:fb:ea:e0:
         c9:e7:c9:15:c3:14:d2:4f:41:3e:91:d6:6a:49:b2:7b:96:d8:
         75:62:f3:c7:d0:01:f2:ab:39:9a:1b:48:31:20:1d:34:e8:64:
         99:80:51:a0:1e:cb:1d:bf:c3:c0:bc:a3:bc:3c:aa:f5:36:ee:
         05:ca:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----