Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20383334.roa
File:                     36342e3235332e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          XYN0/hq/2sysIEF5ZTWZzAojKVKm2ZvKIp5JrCJGobA=
Subject key identifier:   87:00:6C:86:11:93:5A:C8:FB:C7:82:66:AC:F4:DE:B6:FF:E6:4E:2F
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       61110A532B6990C2AAE48FDD2206673CED405834
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20383334.roa
Signing time:             Fri 22 Dec 2023 15:45:03 +0000
ROA not before:           Fri 22 Dec 2023 15:40:03 +0000
ROA not after:            Fri 20 Dec 2024 15:45:03 +0000
asID:                     834
IP address blocks:        64.253.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Jan 2024 00:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:11:0a:53:2b:69:90:c2:aa:e4:8f:dd:22:06:67:3c:ed:40:58:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 22 15:40:03 2023 GMT
            Not After : Dec 20 15:45:03 2024 GMT
        Subject: CN=87006C8611935AC8FBC78266ACF4DEB6FFE64E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:28:4e:89:e2:a2:90:08:2e:b1:d0:94:6d:
                    60:72:75:5d:8c:fe:5b:c8:4a:8c:27:f1:cb:d4:16:
                    19:19:87:1e:25:59:c3:cc:63:17:be:5d:7f:88:d1:
                    e1:ac:bd:2a:99:58:4c:4e:16:2a:a7:e2:14:36:1d:
                    aa:ca:d0:a5:17:25:65:4a:42:86:fe:d0:55:3c:4f:
                    b3:11:24:5f:26:be:fb:62:4a:02:33:9f:9d:5b:8c:
                    6e:54:e1:50:39:7f:13:c4:c8:08:03:0f:73:dd:49:
                    25:4d:34:33:40:3b:f1:02:17:8e:5c:97:78:90:84:
                    43:1c:2c:26:29:b6:e3:00:98:ef:59:19:e3:5b:65:
                    31:49:ba:13:87:e9:5c:42:33:a8:7d:42:63:78:7b:
                    c8:d0:d3:c4:41:26:19:73:55:33:e7:77:91:c8:ac:
                    92:ff:83:4c:6d:07:77:69:3d:48:04:d7:9c:70:36:
                    da:26:01:f9:68:78:de:d2:a4:8c:7f:0e:97:04:41:
                    e6:c6:77:b6:be:0a:fe:5e:94:aa:cd:77:1d:41:67:
                    af:1b:ef:89:1e:8c:ad:56:95:0a:d4:61:71:a8:c6:
                    aa:b5:60:c0:9b:2f:c2:15:e7:65:c1:ed:cf:51:ea:
                    fa:c1:27:6a:9a:a5:fe:46:94:32:df:01:08:23:60:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:00:6C:86:11:93:5A:C8:FB:C7:82:66:AC:F4:DE:B6:FF:E6:4E:2F
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:29:e0:63:55:48:e7:7b:d2:fa:b2:0e:4b:95:5f:25:17:81:
         7a:c5:ee:e4:13:db:32:20:b4:67:00:d8:8d:d6:1b:a1:ab:20:
         01:15:a3:4a:f2:98:4f:52:f1:53:4a:54:98:8b:83:c1:27:0a:
         b0:56:3a:6d:11:35:56:15:48:b6:fd:bf:91:1b:ab:3f:3c:51:
         a5:b2:04:08:e8:b5:4e:9c:04:03:a8:11:13:19:76:9e:dd:8e:
         77:58:53:e9:05:ce:4f:35:5f:8d:ec:e9:6e:c2:57:da:11:ea:
         f8:a4:89:ce:75:62:56:67:81:5b:0c:c6:84:43:6b:de:10:23:
         28:bf:47:e1:2b:5e:42:f0:71:34:1b:7b:23:13:6f:d4:ac:78:
         4b:d0:da:1e:67:17:eb:55:56:79:b8:08:7e:b5:97:4c:b5:9f:
         e2:2d:de:7a:4d:3b:04:0f:b2:1b:0d:c9:1c:4e:e2:8c:62:74:
         b6:0a:49:a5:fe:a2:b4:5a:bc:2c:23:1d:22:42:f6:ba:5d:5a:
         92:b4:4b:ca:e4:fe:1d:21:c8:72:4a:c6:ba:9f:6e:16:07:db:
         d2:75:b6:79:35:7c:c3:ca:f0:e3:8c:c0:a7:37:b2:33:b6:bb:
         e5:25:90:00:9e:2e:d6:6c:d7:ba:e8:16:6a:25:55:3a:0f:39:
         c7:2d:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----