Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20383334.roa
File:                     36342e3235332e39302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          aeq9uOSiBRcXP/rRmUxzCaeyWFXWA3enxD/qKNxeJPA=
Subject key identifier:   36:05:0B:2C:CD:9F:83:93:81:1C:21:2E:85:0C:CC:D2:47:90:26:18
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       026485A1909087BC441BA77E559F008C71C6E4B5
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20383334.roa
Signing time:             Thu 31 Oct 2024 00:02:03 +0000
ROA not before:           Wed 30 Oct 2024 23:57:03 +0000
ROA not after:            Thu 30 Oct 2025 00:02:03 +0000
asID:                     834
IP address blocks:        64.253.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 21:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:64:85:a1:90:90:87:bc:44:1b:a7:7e:55:9f:00:8c:71:c6:e4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Oct 30 23:57:03 2024 GMT
            Not After : Oct 30 00:02:03 2025 GMT
        Subject: CN=36050B2CCD9F8393811C212E850CCCD247902618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:87:17:0e:54:48:94:58:a8:c3:c5:1d:b1:
                    b7:3e:52:8d:a2:a3:17:73:d0:fe:93:27:d5:2c:f6:
                    14:b2:4f:d4:d7:98:46:82:5c:ab:d2:d3:02:86:24:
                    cc:f1:65:fa:58:41:b4:a2:7e:f0:a9:a1:20:d2:df:
                    a2:a0:fe:17:41:0a:2f:6e:d7:f3:18:6c:9f:cc:84:
                    86:16:5a:44:75:2c:b7:12:e8:71:7f:2d:f9:74:6f:
                    1f:14:1f:6c:81:8e:d6:94:1b:ab:9f:f2:55:21:45:
                    90:94:45:f9:63:10:6c:5c:f4:3b:ce:16:f5:25:40:
                    a8:73:32:b8:5f:fd:d4:a7:61:ed:e4:21:c5:06:87:
                    46:c2:1c:32:d0:6f:a4:61:34:94:04:e5:52:22:38:
                    e8:0a:f2:de:17:2a:c6:9c:21:3f:c9:0d:3f:ee:b9:
                    c5:02:91:08:e6:40:0a:2d:e1:38:d3:9c:8c:f5:56:
                    d7:f6:b8:cc:de:7a:1a:db:f1:7e:a7:f7:2e:db:72:
                    ab:d2:2e:23:b7:36:3a:10:7d:39:65:26:1a:a0:8e:
                    39:0a:b4:e1:b6:cf:f7:8e:9b:8b:21:5d:88:fe:99:
                    00:14:d3:35:d6:04:00:0d:e8:09:4f:da:3e:dd:ab:
                    03:e0:9f:ca:73:2a:eb:f4:2a:67:d2:4c:ab:4a:a2:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:0B:2C:CD:9F:83:93:81:1C:21:2E:85:0C:CC:D2:47:90:26:18
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:ec:44:e7:13:ef:da:e7:02:64:83:29:04:f2:0f:84:a4:
         d9:8f:92:db:ef:a0:e5:56:b2:ad:88:91:92:e8:5c:68:b4:64:
         30:cf:93:66:b4:2c:1e:89:71:07:98:fe:f2:77:35:65:46:b6:
         1e:12:af:e7:74:3c:aa:31:9f:93:75:a7:07:2e:96:7e:cf:fb:
         03:3f:ab:f8:b4:4b:c2:54:0d:e4:3b:40:e5:eb:06:25:40:35:
         36:23:c6:69:ee:eb:d6:f5:40:4e:4b:e1:9a:4f:43:b8:83:be:
         8a:2e:16:d1:28:a3:01:74:79:6a:d9:ec:08:c4:0d:af:6e:35:
         72:80:b0:63:6b:0f:68:5e:f8:c5:ec:ef:8f:a8:bd:2f:6c:9d:
         72:fb:3b:45:fc:73:8e:57:a0:9b:1a:84:e4:e3:22:2f:39:fd:
         0e:b5:ac:97:87:ad:f2:76:69:5b:4f:f9:b8:58:c2:65:b3:a9:
         d5:3f:7c:be:55:eb:f1:e1:c5:97:11:46:4f:91:70:47:7e:ad:
         8b:f2:72:cc:63:0e:be:51:6d:5b:49:cd:68:ed:ed:b3:0c:1c:
         b1:79:00:81:c6:c2:be:a7:22:c7:ac:72:c6:8b:0a:24:7b:d5:
         4c:eb:45:d9:0a:7b:9f:33:b4:58:3e:db:92:3a:2a:5f:4d:f6:
         d0:67:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----