Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e20383334.roa
File:                     36342e3235332e39332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          1uzg4/SJQ4N4ZcmRmlmLn6/Vnv9ugL6zxKBhnlynB7s=
Subject key identifier:   47:A1:13:A7:36:19:97:FF:A2:48:58:D1:C8:4D:AE:E8:5C:EF:2A:F4
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       13AB0C42BB17626B6EFAA762180A96FABA4AB12D
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 22 Feb 2024 00:01:25 +0000
ROA not before:           Wed 21 Feb 2024 23:56:25 +0000
ROA not after:            Thu 20 Feb 2025 00:01:25 +0000
asID:                     834
IP address blocks:        64.253.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 13:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ab:0c:42:bb:17:62:6b:6e:fa:a7:62:18:0a:96:fa:ba:4a:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Feb 21 23:56:25 2024 GMT
            Not After : Feb 20 00:01:25 2025 GMT
        Subject: CN=47A113A7361997FFA24858D1C84DAEE85CEF2AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:48:de:1d:01:33:7e:e4:ce:55:a2:61:94:
                    fb:71:f0:74:b6:a5:3f:ff:01:f2:eb:e7:60:77:8a:
                    e4:6f:42:68:4a:c4:ed:7a:bb:c4:0e:47:7b:ad:dc:
                    c3:8c:31:44:a1:01:84:f1:b6:5f:07:cd:b4:4f:ff:
                    3b:40:44:a1:ad:98:13:4b:77:1a:e1:a3:c8:cc:0e:
                    d0:e3:cd:b1:45:58:9b:0d:54:55:18:80:58:88:42:
                    1b:52:fb:34:4d:8e:b8:0b:e1:51:6a:81:80:bd:f4:
                    b4:fb:19:fb:16:7e:97:9f:ae:d3:ec:f9:94:c0:30:
                    72:38:78:1d:35:f9:0b:89:d2:32:27:13:2f:b2:e6:
                    1c:61:d8:44:59:3f:ed:d2:4c:fd:5a:fb:a2:6b:c0:
                    fb:db:f9:61:e9:5e:38:02:80:c3:38:5a:31:2f:86:
                    19:21:29:80:0a:53:4a:fc:95:73:08:fd:74:b1:c6:
                    71:a3:8f:63:83:03:c9:98:95:8a:96:47:24:5f:70:
                    b0:a3:67:24:1f:15:da:92:10:83:e8:9e:57:b3:76:
                    e5:cd:9d:c3:d4:6a:37:57:fa:12:40:b5:1a:e4:bb:
                    9b:eb:93:3e:3c:04:ab:6b:a3:2d:31:d2:85:61:a6:
                    95:ff:4f:73:d6:1e:b8:73:d5:c9:c4:52:a8:1a:ba:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A1:13:A7:36:19:97:FF:A2:48:58:D1:C8:4D:AE:E8:5C:EF:2A:F4
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ff:a0:bf:36:d3:d2:dd:b8:3e:b1:20:31:0b:f1:21:c6:3c:
         eb:d9:5d:23:e4:b8:3e:d3:ee:14:49:48:96:40:b6:c6:dd:d6:
         20:69:e4:cb:49:4f:4f:05:aa:58:52:02:5e:d9:24:91:90:02:
         9b:97:5c:62:3d:30:1b:4b:fb:51:24:10:dc:12:c6:a1:08:c8:
         3c:f8:c9:e0:1b:83:1d:de:21:db:15:7b:2c:df:99:db:f9:53:
         0b:20:e2:ad:be:30:04:ae:9a:a5:a4:b5:67:80:b6:c6:74:55:
         b0:a7:be:68:52:cf:8e:69:05:fb:4d:fa:cf:f7:1c:4a:72:5b:
         8b:33:3d:2d:e1:fb:04:db:d8:84:8b:ff:60:02:95:78:e6:c9:
         ec:ad:d2:14:aa:d1:e3:f9:6d:1b:f3:2e:ee:7b:b5:c0:0e:49:
         8b:cb:12:49:3a:74:f6:fa:87:9b:3c:69:64:ca:89:0f:7e:3b:
         d7:97:78:f2:3e:79:75:5d:f0:fe:95:3e:aa:0f:76:cd:c4:23:
         d0:99:ba:33:44:cb:68:24:cd:bd:99:ca:46:4a:b1:f5:11:41:
         f9:14:cb:b0:0a:09:ce:73:a5:94:e6:58:69:43:f1:b8:59:31:
         63:bf:84:b8:62:b9:3f:a5:58:20:7d:7c:1c:9d:d4:4e:f5:c5:
         e5:d0:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----