Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32332d3234203d3e20383334.roa
File:                     36342e3235332e39302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          lGBdROBvokaCvGgYWn6EhtB4UibaAve4zmHu+0ryBLo=
Subject key identifier:   7D:9B:2F:25:97:74:C9:35:E9:E3:DB:6F:FB:87:8D:79:E0:2D:67:E8
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       621F6ADDC42DBC325E4FA7CE1BA99D7A02F3F1B1
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32332d3234203d3e20383334.roa
Signing time:             Sat 18 May 2024 00:02:50 +0000
ROA not before:           Fri 17 May 2024 23:57:50 +0000
ROA not after:            Sat 17 May 2025 00:02:50 +0000
asID:                     834
IP address blocks:        64.253.90.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 03:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1f:6a:dd:c4:2d:bc:32:5e:4f:a7:ce:1b:a9:9d:7a:02:f3:f1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 17 23:57:50 2024 GMT
            Not After : May 17 00:02:50 2025 GMT
        Subject: CN=7D9B2F259774C935E9E3DB6FFB878D79E02D67E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:ee:59:f6:4a:8c:3c:9f:27:de:5a:d0:e4:
                    0e:c8:a6:33:ae:8f:b1:2d:52:50:f7:1d:ea:df:08:
                    bc:ee:25:c5:30:0c:c1:aa:18:16:f2:c6:42:df:84:
                    01:5c:2a:8d:9c:31:06:7b:1d:0b:08:35:09:b0:4a:
                    aa:02:b8:9b:66:64:8a:05:d6:5d:86:66:5b:39:b1:
                    34:72:94:df:65:bb:e8:ad:f4:35:c5:0c:12:46:3a:
                    85:68:19:e3:9a:21:35:a8:42:82:fe:02:88:a1:dc:
                    33:34:ec:ee:1c:98:cf:ae:76:39:b7:00:83:64:76:
                    0f:e6:1e:0b:0c:e4:82:ed:2b:ff:7f:c7:0c:08:14:
                    01:50:c4:11:e5:de:ee:03:5c:bd:2f:d6:89:c8:92:
                    d8:8b:a7:4c:b8:a1:fc:63:1b:23:6e:c5:37:6e:7d:
                    5b:fe:4b:86:02:3f:02:0e:0f:00:70:bb:d8:3d:c9:
                    af:bb:5e:b1:d2:29:7d:9d:cf:71:d4:6b:ae:57:e7:
                    92:50:ab:4c:4a:d7:c0:92:87:0e:66:b8:17:f7:27:
                    80:67:83:6a:92:90:e8:bd:9a:61:b4:aa:b0:55:5d:
                    0f:a3:1f:02:56:d2:30:9f:49:73:09:d9:bd:c1:d3:
                    2f:24:fb:db:15:b0:01:2a:e2:6c:fd:b5:e5:24:f3:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:2F:25:97:74:C9:35:E9:E3:DB:6F:FB:87:8D:79:E0:2D:67:E8
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:ff:8d:b2:92:39:ac:25:6f:78:a9:55:d6:44:c7:89:66:
         3c:c0:61:81:c8:62:4a:74:45:9a:63:49:2b:49:41:ed:e0:f5:
         7c:29:25:9f:3f:f1:b3:f3:d8:ee:6b:e5:68:91:07:a0:6f:97:
         a1:f8:da:f2:b1:8d:b7:36:d6:fd:86:fa:95:4a:44:08:34:de:
         d4:71:63:6c:2d:51:d4:7c:5b:ee:cb:ed:b6:31:dc:b1:66:b6:
         97:a3:15:77:e0:18:ae:cf:29:95:6d:61:4d:1d:f3:2d:76:4d:
         0c:3d:21:e4:3e:6d:6e:32:19:6c:91:64:b6:98:21:29:ab:ca:
         16:5e:56:b3:72:97:8d:de:2a:26:2f:36:e3:bd:6e:ba:61:b5:
         e1:5f:c8:b0:15:68:1b:46:19:a2:18:7e:6a:00:47:3f:c1:47:
         89:13:11:35:2d:21:e6:d1:9b:c6:c9:96:36:a8:c4:0e:74:6f:
         d4:bd:03:44:a7:e7:62:47:82:a8:0a:cc:2d:cf:52:fc:5f:ef:
         14:b1:bf:2b:ab:18:9d:77:83:79:73:9b:45:9c:2f:e3:17:c9:
         24:da:1e:d2:9e:9e:8e:51:5b:42:77:da:f5:f8:3b:50:9d:18:
         2c:90:8f:70:31:42:63:a4:4b:95:53:5d:03:c7:60:da:5b:50:
         b2:95:c1:67
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUYh9q3cQtvDJeT6fOG6mdegLz8bEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQwNTE3MjM1NzUwWhcNMjUwNTE3MDAwMjUw
WjAzMTEwLwYDVQQDEyg3RDlCMkYyNTk3NzRDOTM1RTlFM0RCNkZGQjg3OEQ3OUUw
MkQ2N0U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqDuWfZKjDyf
J95a0OQOyKYzro+xLVJQ9x3q3wi87iXFMAzBqhgW8sZC34QBXCqNnDEGex0LCDUJ
sEqqAribZmSKBdZdhmZbObE0cpTfZbvorfQ1xQwSRjqFaBnjmiE1qEKC/gKIodwz
NOzuHJjPrnY5twCDZHYP5h4LDOSC7Sv/f8cMCBQBUMQR5d7uA1y9L9aJyJLYi6dM
uKH8YxsjbsU3bn1b/kuGAj8CDg8AcLvYPcmvu16x0il9nc9x1GuuV+eSUKtMStfA
kocOZrgX9yeAZ4NqkpDovZphtKqwVV0Pox8CVtIwn0lzCdm9wdMvJPvbFbABKuJs
/bXlJPO7DwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFH2bLyWXdMk16ePbb/uHjXng
LWfoMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMz
OTQ1OWIyYmVhLzAvMzYzNDJlMzIzNTMzMmUzOTMwMmUzMDJmMzIzMzJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQP1aMA0GCSqGSIb3DQEBCwUAA4IBAQAM
Kf+NspI5rCVveKlV1kTHiWY8wGGByGJKdEWaY0krSUHt4PV8KSWfP/Gz89jua+Vo
kQegb5eh+NrysY23Ntb9hvqVSkQINN7UcWNsLVHUfFvuy+22MdyxZraXoxV34Biu
zymVbWFNHfMtdk0MPSHkPm1uMhlskWS2mCEpq8oWXlazcpeN3iomLzbjvW66YbXh
X8iwFWgbRhmiGH5qAEc/wUeJExE1LSHm0ZvGyZY2qMQOdG/UvQNEp+diR4KoCswt
z1L8X+8Usb8rqxidd4N5c5tFnC/jF8kk2h7Snp6OUVtCd9r1+DtQnRgskI9wMUJj
pEuVU10Dx2DaW1CylcFn
-----END CERTIFICATE-----