Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e2031323339.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          mC4YSRw2HoxNHUY5gabiTi/XHlbBe/GxUPQnIwjoIco=
Subject key identifier:   DA:79:CB:69:66:29:39:32:AB:76:30:A6:BC:7C:CE:69:F5:E8:7E:F0
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       7C908AB11D1D97D44F4211B574C53297D98E96BF
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 20 May 2024 15:03:30 +0000
ROA not before:           Mon 20 May 2024 14:58:30 +0000
ROA not after:            Mon 19 May 2025 15:03:30 +0000
asID:                     1239
IP address blocks:        205.211.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 00:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:90:8a:b1:1d:1d:97:d4:4f:42:11:b5:74:c5:32:97:d9:8e:96:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: May 20 14:58:30 2024 GMT
            Not After : May 19 15:03:30 2025 GMT
        Subject: CN=DA79CB6966293932AB7630A6BC7CCE69F5E87EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:ee:d5:c7:07:66:c7:0b:19:64:47:07:ce:
                    19:f7:44:dd:48:02:60:4e:f7:32:56:fe:a5:1c:de:
                    17:3e:bb:20:32:c2:8c:89:28:a7:46:a5:f4:5f:58:
                    dc:2c:88:d0:da:67:e6:18:fb:8e:ba:5c:ab:20:99:
                    83:32:d6:49:99:87:d7:17:26:a9:8c:64:b0:88:fb:
                    12:27:da:82:75:b4:36:9e:d1:e5:9f:2c:4b:fb:6c:
                    da:d6:92:83:a1:49:2d:b4:9e:29:dd:ea:e6:aa:13:
                    cc:8b:55:c1:29:8c:41:dd:4b:3f:d5:17:a1:28:e5:
                    63:e9:63:82:ab:4e:9e:2d:2f:51:3c:31:f6:a5:b7:
                    d8:1d:bc:cc:62:99:f1:f0:08:bd:1e:b0:a7:b7:5d:
                    3d:84:f7:68:7a:17:cb:4b:c4:2a:15:97:12:de:35:
                    f4:33:3c:f0:1c:e5:ee:52:25:dc:50:b8:3d:1b:dc:
                    24:c4:23:c4:6a:9f:ed:9d:c8:fb:0b:7d:af:8b:7e:
                    66:ff:20:fb:43:e1:5b:de:42:32:54:90:17:81:d5:
                    e5:af:f9:27:b2:ef:e1:fa:1e:18:2c:ce:d3:db:70:
                    08:55:8f:c2:8d:1b:0e:84:45:04:65:fc:5e:66:54:
                    5a:2e:02:dc:94:63:98:c4:5c:62:b1:ea:0d:51:41:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:79:CB:69:66:29:39:32:AB:76:30:A6:BC:7C:CE:69:F5:E8:7E:F0
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:d6:01:3b:6c:3f:23:43:74:ef:f9:7f:d4:74:7d:b5:f8:
         7a:ad:c6:98:e7:8f:ae:94:81:23:cf:0d:0f:6d:db:c7:76:d6:
         dc:a8:b1:ef:04:43:df:82:ac:8f:1a:6f:75:20:4f:68:7a:0e:
         e5:f2:48:84:f2:00:c0:7a:ff:47:a0:10:04:93:58:c0:5e:a1:
         ee:cb:3d:0b:8d:5f:10:8a:4f:07:ef:2f:dc:df:bb:01:98:10:
         7b:a1:8b:fe:f1:5e:eb:44:b0:ff:77:be:c0:a6:b7:b4:69:c4:
         68:49:de:c6:59:89:88:df:9c:01:c3:37:73:35:6a:d0:4c:67:
         f8:58:85:0e:20:e8:c9:e1:11:bf:d0:b5:33:7a:4c:45:5b:ed:
         44:a7:ff:0d:cf:56:c8:ef:98:57:57:f7:90:48:f1:95:df:22:
         b4:bc:08:24:64:8a:8d:8e:4c:e6:40:48:68:80:4d:ea:b1:a0:
         41:89:02:9c:84:9e:d4:89:60:26:07:4d:81:fb:72:3a:d5:85:
         5f:a9:08:d2:29:df:d0:1a:e4:af:43:14:29:ad:a6:2e:4d:b0:
         67:05:bf:59:4e:e8:9d:09:5e:ea:a0:a8:bc:4b:a3:4b:2c:79:
         07:21:77:48:cf:a2:17:c0:7c:ad:e4:3a:22:21:21:48:93:b9:
         68:a4:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----