Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e203336313133.roa
File:                     36342e3235332e39342e302f32342d3234203d3e203336313133.roa (raw, json)
Hash identifier:          NktqkTw75XqlPAH4my6U+2/5b5Oc/ShgdlOrsLzCY5g=
Subject key identifier:   E9:43:4C:89:4F:78:53:F4:F9:A8:EA:36:34:24:5A:7A:29:51:86:9C
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       403BDBAC66125953A923C9F15BFBDD6BE7480D00
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e203336313133.roa
Signing time:             Fri 24 Nov 2023 13:34:14 +0000
ROA not before:           Fri 24 Nov 2023 13:29:14 +0000
ROA not after:            Fri 22 Nov 2024 13:34:14 +0000
asID:                     36113
IP address blocks:        64.253.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Dec 2023 15:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3b:db:ac:66:12:59:53:a9:23:c9:f1:5b:fb:dd:6b:e7:48:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 24 13:29:14 2023 GMT
            Not After : Nov 22 13:34:14 2024 GMT
        Subject: CN=E9434C894F7853F4F9A8EA3634245A7A2951869C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:32:49:48:c3:84:09:e6:ef:d4:f3:5e:18:
                    b0:ce:4f:93:14:47:6e:a3:ad:20:d4:11:46:a7:f5:
                    96:4e:74:65:4d:49:d6:7e:ec:2b:6f:b3:50:c7:94:
                    b6:ae:9c:5d:f5:2a:46:01:57:be:ca:e3:bd:aa:60:
                    87:5d:6d:24:7e:06:4d:61:e8:3e:2e:0f:bd:d5:02:
                    37:df:9c:06:60:01:b8:cb:ca:b2:d5:d3:e9:5d:db:
                    39:e0:73:62:7a:3a:6f:eb:b5:6b:e0:a6:55:5e:7a:
                    3a:14:00:ae:6b:85:aa:a3:d1:de:45:cd:62:6e:40:
                    e0:df:ae:8e:12:db:d8:61:82:67:77:1a:00:17:9e:
                    2e:b8:59:54:6c:ed:64:64:4c:cd:c5:40:92:dd:3c:
                    4e:cf:36:5c:a3:97:a1:13:0b:09:ce:45:6c:f6:5b:
                    ab:74:bb:f2:fa:40:ad:5b:32:26:48:32:ec:31:80:
                    63:84:14:d3:64:32:04:66:bd:50:b7:10:d0:d6:fa:
                    4f:e7:97:bb:76:f0:4a:9c:fa:7d:cc:75:1e:73:b1:
                    6a:4f:5f:9d:70:b8:34:74:47:c6:31:21:5b:46:34:
                    3f:8b:6e:bc:7d:0b:f3:2c:19:28:e0:13:f4:b7:a0:
                    14:61:ec:61:73:31:e1:59:9a:4f:18:41:30:26:bf:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:43:4C:89:4F:78:53:F4:F9:A8:EA:36:34:24:5A:7A:29:51:86:9C
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e203336313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:0a:d8:96:84:87:bf:3d:bf:84:46:90:de:de:43:89:c3:
         16:92:c0:9a:13:ec:c1:48:75:29:68:f6:5f:e7:34:e5:f5:87:
         91:62:a8:93:7e:ea:94:3b:aa:8b:bb:a3:23:14:45:cd:88:9a:
         2e:0c:7e:01:25:96:7e:39:9f:31:0b:07:bb:2d:4f:2f:0b:08:
         74:ff:6d:9b:30:80:5a:61:ab:e5:3d:c8:97:39:b8:8e:25:4d:
         77:44:8a:8f:47:c9:27:52:be:86:2b:f5:2d:50:16:a2:80:9c:
         12:4b:4e:9b:a1:ca:ac:c7:ce:f9:d4:e7:21:5f:41:4c:21:ac:
         2d:a4:bf:03:d4:a9:a7:6d:5c:e8:d8:09:4f:f4:40:36:cc:93:
         bc:36:4b:e2:8d:52:9c:d8:6e:4f:bc:83:f1:74:02:1a:f5:eb:
         87:12:60:76:7a:04:ae:91:7a:1c:79:da:64:b2:6e:83:9c:c2:
         94:f5:e4:aa:40:29:98:1a:84:9b:47:d2:30:cb:1f:14:f5:54:
         2b:d7:1b:9e:f9:ed:39:6b:22:b9:da:95:78:98:a5:5a:6c:52:
         12:a6:cb:24:9c:4c:d6:1f:ae:d5:c8:12:04:8a:af:4e:16:8c:
         28:ba:47:23:32:fc:cb:91:04:92:2d:3c:3d:04:db:7f:25:24:
         10:05:69:be
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUQDvbrGYSWVOpI8nxW/vda+dIDQAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjMxMTI0MTMyOTE0WhcNMjQxMTIyMTMzNDE0
WjAzMTEwLwYDVQQDEyhFOTQzNEM4OTRGNzg1M0Y0RjlBOEVBMzYzNDI0NUE3QTI5
NTE4NjlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCgySUjDhAnm
79TzXhiwzk+TFEduo60g1BFGp/WWTnRlTUnWfuwrb7NQx5S2rpxd9SpGAVe+yuO9
qmCHXW0kfgZNYeg+Lg+91QI335wGYAG4y8qy1dPpXds54HNiejpv67Vr4KZVXno6
FACua4Wqo9HeRc1ibkDg366OEtvYYYJndxoAF54uuFlUbO1kZEzNxUCS3TxOzzZc
o5ehEwsJzkVs9lurdLvy+kCtWzImSDLsMYBjhBTTZDIEZr1QtxDQ1vpP55e7dvBK
nPp9zHUec7FqT1+dcLg0dEfGMSFbRjQ/i268fQvzLBko4BP0t6AUYexhczHhWZpP
GEEwJr92ywIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOlDTIlPeFP0+ajqNjQkWnop
UYacMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzQyZTMyMzUzMzJlMzkzNDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMzMzYzMTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABA/V4wDQYJKoZIhvcNAQELBQAD
ggEBACduCtiWhIe/Pb+ERpDe3kOJwxaSwJoT7MFIdSlo9l/nNOX1h5FiqJN+6pQ7
qou7oyMURc2Imi4MfgElln45nzELB7stTy8LCHT/bZswgFphq+U9yJc5uI4lTXdE
io9HySdSvoYr9S1QFqKAnBJLTpuhyqzHzvnU5yFfQUwhrC2kvwPUqadtXOjYCU/0
QDbMk7w2S+KNUpzYbk+8g/F0Ahr164cSYHZ6BK6Rehx52mSyboOcwpT15KpAKZga
hJtH0jDLHxT1VCvXG5757TlrIrnalXiYpVpsUhKmyyScTNYfrtXIEgSKr04WjCi6
RyMy/MuRBJItPD0E238lJBAFab4=
-----END CERTIFICATE-----