Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31362d3234203d3e20383334.roa
File:                     34302e3138332e302e302f31362d3234203d3e20383334.roa (raw, json)
Hash identifier:          5UrJc1xrIZKbN+q548Y+Y+JRjIwK5yDSMSr6XmBKZdQ=
Subject key identifier:   AD:E4:2B:F4:96:DF:F8:95:11:F9:EF:44:EB:E7:79:78:3D:62:56:9F
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       0D970B87819DDFBD8C086187CC111250100AE2F8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31362d3234203d3e20383334.roa
Signing time:             Thu 31 Aug 2023 15:09:31 +0000
ROA not before:           Thu 31 Aug 2023 15:04:31 +0000
ROA not after:            Thu 29 Aug 2024 15:09:31 +0000
asID:                     834
IP address blocks:        40.183.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 21:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:97:0b:87:81:9d:df:bd:8c:08:61:87:cc:11:12:50:10:0a:e2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 31 15:04:31 2023 GMT
            Not After : Aug 29 15:09:31 2024 GMT
        Subject: CN=ADE42BF496DFF89511F9EF44EBE779783D62569F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:5a:89:c1:e3:f6:dd:96:6f:57:67:6d:51:
                    fb:be:ca:77:e6:b1:79:49:9d:ea:12:b9:22:36:07:
                    dd:e7:58:6e:46:41:f9:16:0e:6f:a5:5e:b5:b2:90:
                    76:f4:47:07:ac:13:6b:31:0e:6c:2b:64:8d:b0:ab:
                    b8:9a:dc:ba:7d:5b:90:43:84:95:91:2b:d2:d3:4e:
                    ee:33:eb:4f:99:55:9e:f5:fb:16:4b:aa:5d:13:9c:
                    eb:9b:d3:6f:73:31:db:33:c7:10:23:ea:84:a6:7d:
                    f7:55:97:6f:d9:7d:bc:12:a1:de:fb:59:42:9e:b8:
                    41:be:5f:6f:a0:8c:df:09:bb:34:60:90:0b:2c:0a:
                    ea:e3:78:85:5f:60:ee:36:26:d4:90:d5:7e:48:f5:
                    46:30:17:35:e6:aa:d2:f0:dc:94:b6:90:30:0d:be:
                    57:2d:23:42:04:34:3e:78:47:05:e8:5e:7c:ae:e8:
                    36:26:3b:0b:dd:88:0e:08:68:65:2e:b4:bd:c8:c9:
                    6e:7d:cc:bc:70:e1:d6:da:08:c9:da:b4:82:37:51:
                    f7:b4:b5:d7:b4:57:db:9f:1a:da:9c:5f:5c:6d:e2:
                    36:13:1d:56:2a:b7:03:17:e9:6f:be:3f:a7:7f:5b:
                    2f:c5:a9:cb:54:21:e0:a3:0b:86:3b:c3:2c:01:ff:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E4:2B:F4:96:DF:F8:95:11:F9:EF:44:EB:E7:79:78:3D:62:56:9F
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31362d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:e8:b0:fd:a8:cd:9d:2a:d9:8c:2e:08:63:42:46:2d:ba:
         5c:09:4a:ce:6d:69:53:39:2c:ae:30:2b:42:c1:8c:ce:40:16:
         58:f7:e4:bf:b0:9d:0d:ca:27:6d:5b:10:cb:a8:5c:e2:be:69:
         38:e8:54:7f:f9:d2:fc:2f:07:a7:af:1f:e8:e9:70:e5:26:f7:
         d0:cd:c6:d4:6b:92:61:4e:73:8b:ce:ff:73:52:5c:89:75:78:
         ca:e6:59:a6:c8:a5:ef:16:39:b3:88:f9:23:9e:cd:eb:72:89:
         0f:97:89:09:3b:84:d1:4a:75:a3:6a:bf:81:b8:46:a3:3a:f8:
         c9:02:2b:e1:34:c0:26:90:fd:08:93:47:de:28:85:8f:dc:85:
         4a:e3:5e:c1:de:b0:60:e9:48:7c:89:79:12:87:18:5b:68:fd:
         bf:60:fc:26:9f:6d:ad:ed:b4:55:9a:0f:90:ce:fe:39:35:76:
         fd:62:0b:ca:0e:40:23:50:d9:84:c9:6d:df:4b:6f:65:8f:e9:
         a8:bc:48:fd:03:0a:40:bd:41:88:ef:12:1d:f5:2e:a5:67:7e:
         8a:07:6f:a2:8a:c4:4e:48:b9:6a:11:6c:f9:20:82:18:41:11:
         c0:a8:fd:2c:94:19:eb:08:d0:e9:ea:b8:d3:6c:e7:a3:e1:13:
         87:61:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----