Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203631333137.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          vrYwjBZeniiKgtEVFmDGi420B4Fi+LgBKam/eHhE5ec=
Subject key identifier:   5A:2D:B6:2A:A8:01:94:78:7B:4D:7F:A2:8C:BB:58:2D:99:E3:03:0C
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       79B0E998D3A6DE8567FA40ED8B4BC9C95AAB1860
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 01 Dec 2022 21:18:35 +0000
ROA not before:           Thu 01 Dec 2022 21:13:35 +0000
ROA not after:            Thu 30 Nov 2023 21:18:35 +0000
asID:                     61317
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b0:e9:98:d3:a6:de:85:67:fa:40:ed:8b:4b:c9:c9:5a:ab:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Dec  1 21:13:35 2022 GMT
            Not After : Nov 30 21:18:35 2023 GMT
        Subject: CN=5A2DB62AA80194787B4D7FA28CBB582D99E3030C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:20:08:53:06:0e:7e:59:61:2b:4f:51:41:
                    ef:63:70:ee:90:a8:7a:56:a1:c5:03:19:3d:8f:64:
                    7d:a2:22:30:ab:94:63:55:3b:86:a1:2f:14:c0:bc:
                    22:b6:49:50:6f:4a:63:32:ed:00:0c:8a:c8:da:48:
                    6c:95:9a:48:e9:6a:37:22:7a:bb:5c:04:d8:6d:b6:
                    7a:42:31:f2:9f:ec:c5:93:19:2d:e3:fa:8e:8e:5a:
                    13:fd:bb:97:b0:fa:b9:ce:07:44:02:f8:e5:19:76:
                    89:e7:f2:a9:c5:27:df:b7:61:89:11:51:f8:90:85:
                    7c:61:ac:c5:2e:7d:2e:c7:67:76:ed:5e:8f:bd:a7:
                    9b:f3:58:a9:eb:8e:46:c9:a9:2b:e4:e5:84:27:92:
                    5e:a2:81:50:5a:07:66:c2:38:bf:ce:01:b7:d9:42:
                    fc:c3:dd:54:c8:de:2a:32:cb:22:b0:e9:19:46:da:
                    a1:9e:62:ce:40:ea:9b:5f:59:36:bc:87:d6:64:f9:
                    59:0a:79:eb:e3:39:d7:2f:85:d9:e8:7c:fc:8e:6a:
                    73:a3:a9:54:a2:43:7e:f7:22:b6:d6:b5:c5:6a:a1:
                    83:06:3a:79:46:8b:ab:de:0a:58:29:49:ea:80:1e:
                    11:8a:3b:18:9a:0c:ce:8c:30:b3:e5:d0:1f:de:0e:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2D:B6:2A:A8:01:94:78:7B:4D:7F:A2:8C:BB:58:2D:99:E3:03:0C
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:00:90:ab:a9:27:a4:36:6d:af:b7:e3:43:7f:b2:46:80:f8:
         59:dd:a8:b7:57:e7:f2:b4:99:73:9a:d2:f2:10:f9:b9:b3:bf:
         e5:52:cc:76:ec:aa:d9:94:55:37:3e:b6:0f:c7:d8:de:01:a8:
         2a:d1:2c:d8:97:4c:03:62:c4:e6:73:ed:65:3d:e0:0b:e4:f4:
         03:90:b7:57:26:a5:e4:17:55:61:11:97:30:eb:2e:fb:ed:d6:
         c2:e5:30:4e:51:c5:7e:73:82:7b:8e:64:59:b7:a7:43:8c:da:
         3f:27:26:a9:22:ef:ca:c5:88:58:71:2a:7f:48:36:f7:ff:f1:
         8f:2f:f4:72:88:dc:8b:3f:eb:5e:2e:21:f7:ee:b9:b9:95:fb:
         c5:e0:4e:bc:ee:48:c4:33:6a:cb:0b:16:e0:ac:4a:1a:51:f0:
         50:24:59:b2:dc:7b:c7:a6:09:9f:7e:ac:ec:04:10:8c:9a:8c:
         ad:a6:8a:eb:72:47:9b:38:3c:93:9b:ee:a7:df:b2:e3:7f:cf:
         23:39:ce:75:b0:49:05:17:d5:41:39:c1:98:39:a8:99:35:dd:
         7d:52:40:f8:06:b9:36:16:6b:04:32:6e:4c:94:c9:e1:8e:bc:
         93:fc:5b:5f:2c:0c:ff:f0:a8:df:e8:fb:9c:31:ec:1b:12:77:
         24:14:44:8f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUebDpmNOm3oVn+kDti0vJyVqrGGAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjIxMjAxMjExMzM1WhcNMjMxMTMwMjExODM1
WjAzMTEwLwYDVQQDEyg1QTJEQjYyQUE4MDE5NDc4N0I0RDdGQTI4Q0JCNTgyRDk5
RTMwMzBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QggCFMGDn5Z
YStPUUHvY3DukKh6VqHFAxk9j2R9oiIwq5RjVTuGoS8UwLwitklQb0pjMu0ADIrI
2khslZpI6Wo3Inq7XATYbbZ6QjHyn+zFkxkt4/qOjloT/buXsPq5zgdEAvjlGXaJ
5/KpxSfft2GJEVH4kIV8YazFLn0ux2d27V6Pvaeb81ip645Gyakr5OWEJ5JeooFQ
Wgdmwji/zgG32UL8w91UyN4qMssisOkZRtqhnmLOQOqbX1k2vIfWZPlZCnnr4znX
L4XZ6Hz8jmpzo6lUokN+9yK21rXFaqGDBjp5Rour3gpYKUnqgB4RijsYmgzOjDCz
5dAf3g5KzwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFottiqoAZR4e01/ooy7WC2Z
4wMMMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzM0MzUyZTMxMzMzNTJlMzEzNjMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2HoTANBgkqhkiG9w0BAQsF
AAOCAQEAmACQq6knpDZtr7fjQ3+yRoD4Wd2ot1fn8rSZc5rS8hD5ubO/5VLMduyq
2ZRVNz62D8fY3gGoKtEs2JdMA2LE5nPtZT3gC+T0A5C3Vyal5BdVYRGXMOsu++3W
wuUwTlHFfnOCe45kWbenQ4zaPycmqSLvysWIWHEqf0g29//xjy/0cojciz/rXi4h
9+65uZX7xeBOvO5IxDNqywsW4KxKGlHwUCRZstx7x6YJn36s7AQQjJqMraaK63JH
mzg8k5vup9+y43/PIznOdbBJBRfVQTnBmDmomTXdfVJA+Aa5NhZrBDJuTJTJ4Y68
k/xbXywM//Co3+j7nDHsGxJ3JBREjw==
-----END CERTIFICATE-----