Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e20383334.roa
File:                     36392e3136362e3233302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          CpklSyxzaKSLiQ4ij7RjsU1HROUlBmw0RGtp0tZTh/c=
Subject key identifier:   EF:D4:88:AE:0B:CB:5B:E5:41:E1:31:62:86:89:5E:46:08:C9:D5:BF
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       18577616708575435181143E57C72E416439C708
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 29 Dec 2023 00:00:04 +0000
ROA not before:           Thu 28 Dec 2023 23:55:04 +0000
ROA not after:            Fri 27 Dec 2024 00:00:04 +0000
asID:                     834
IP address blocks:        69.166.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 31 Dec 2023 19:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:57:76:16:70:85:75:43:51:81:14:3e:57:c7:2e:41:64:39:c7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 28 23:55:04 2023 GMT
            Not After : Dec 27 00:00:04 2024 GMT
        Subject: CN=EFD488AE0BCB5BE541E1316286895E4608C9D5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:a3:45:cc:b0:7d:52:39:6b:ae:b9:c8:bc:
                    76:13:5d:87:fe:93:0e:0d:ba:80:16:41:8a:c6:34:
                    87:d2:02:12:e2:4b:80:ac:64:eb:59:c8:cd:df:b9:
                    1c:09:d2:11:7e:dd:83:41:d2:5f:60:b6:86:75:31:
                    5d:8a:60:06:b3:af:38:67:b1:e6:f4:0c:39:ed:96:
                    82:f3:00:2b:3a:0a:ee:63:dd:9d:6e:57:07:88:55:
                    63:66:7c:ef:b3:d7:10:01:e4:d3:02:42:9b:4e:d7:
                    a9:74:41:53:f8:d8:ca:ae:95:fa:a8:a9:24:52:f2:
                    cc:40:db:0c:e2:51:7c:56:38:a5:f5:5b:2d:f4:7c:
                    10:db:7d:a2:28:e1:18:87:03:37:a3:da:8b:ff:ca:
                    e7:d8:d1:a9:4d:cc:7f:e2:3d:3b:ce:08:72:33:e4:
                    86:ed:91:ac:ae:8a:53:c8:84:e7:64:e8:c3:53:8a:
                    3a:5e:82:c7:12:5a:db:27:79:2e:74:77:31:f5:11:
                    3b:9b:a4:7e:33:fc:1b:20:dc:37:55:14:16:65:53:
                    de:70:36:0d:5c:62:ae:3a:ce:37:d3:93:63:ec:d6:
                    9f:95:de:c1:05:cb:08:49:d2:83:11:82:19:8b:65:
                    a8:0f:d6:26:e2:6a:0a:15:18:b8:40:f5:87:59:a2:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D4:88:AE:0B:CB:5B:E5:41:E1:31:62:86:89:5E:46:08:C9:D5:BF
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:8f:c3:1c:2d:04:2e:4a:4e:4b:80:7d:20:ef:29:22:4a:
         ba:35:fc:38:88:f9:fc:e1:45:7d:9c:05:8a:95:bb:eb:07:b1:
         40:38:49:39:38:4c:b1:d6:93:6d:28:7e:eb:47:97:f7:32:47:
         cb:6f:67:aa:6e:e4:a7:7d:84:a6:5a:47:05:ff:90:0a:b7:d6:
         16:39:35:b1:a0:4b:38:30:34:22:5d:06:95:77:1b:a6:b2:bd:
         16:de:0d:72:c7:9d:74:74:92:0a:72:ff:55:ae:3b:2f:5f:e1:
         60:f4:4e:ab:ae:dd:a3:92:37:37:bd:c0:e6:5b:16:3c:ac:fb:
         4a:34:09:09:1c:6d:b3:85:d8:41:d4:46:e4:b8:d9:71:30:66:
         5f:12:b6:81:f5:60:2b:82:75:17:a8:f6:7f:56:81:69:a6:8c:
         fe:65:89:4a:50:c3:32:ef:e3:d1:49:4b:04:18:19:db:22:48:
         7e:c3:be:c5:59:ea:81:08:d8:b3:68:b2:79:26:76:16:3b:bc:
         05:89:2a:14:c8:93:1a:a6:75:01:64:4b:e9:0e:d8:14:6e:16:
         39:76:b2:0e:60:d9:e8:82:d5:e2:93:f3:ac:79:c2:2c:1e:a4:
         db:ee:da:6b:6e:f9:ff:b1:d4:db:cb:1f:95:e6:b2:32:6f:72:
         e2:04:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----