Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203439393831.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          7/YdeENxK0u51xkn/IDGGxn9agEhanLIIrfiNDKgoGs=
Subject key identifier:   8E:BD:E4:B4:7E:4F:33:C9:E1:88:96:4C:5C:5A:FA:EB:33:00:B9:8A
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       34B238C26D684AAEA892EF167CA36427D62B7E9D
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203439393831.roa
Signing time:             Sun 23 Jun 2024 11:48:52 +0000
ROA not before:           Sun 23 Jun 2024 11:43:52 +0000
ROA not after:            Sun 22 Jun 2025 11:48:52 +0000
asID:                     49981
IP address blocks:        199.91.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 10:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b2:38:c2:6d:68:4a:ae:a8:92:ef:16:7c:a3:64:27:d6:2b:7e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun 23 11:43:52 2024 GMT
            Not After : Jun 22 11:48:52 2025 GMT
        Subject: CN=8EBDE4B47E4F33C9E188964C5C5AFAEB3300B98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:7c:8f:b5:c5:b4:51:1e:56:67:0c:6e:25:
                    aa:62:f9:b8:e1:82:f4:5a:41:84:1e:a7:75:04:b8:
                    af:b4:8f:99:ae:7d:44:ff:10:7c:85:95:2a:fb:c9:
                    7f:0d:80:fe:59:56:1e:96:da:d7:38:82:98:70:e4:
                    1a:01:d9:c9:bb:30:cc:54:fa:41:0f:33:38:56:a1:
                    bf:87:56:09:cd:1b:7e:5b:05:83:c7:01:1d:6e:80:
                    20:d4:c6:ec:fb:e9:0c:5e:e1:00:84:ae:96:39:ae:
                    83:d6:21:48:3a:62:c2:09:f4:9b:d9:1d:36:1c:53:
                    06:33:77:69:c1:b9:92:20:ec:f6:86:31:4a:e9:d9:
                    fe:32:5d:9c:47:b2:af:f7:b9:3a:63:3d:dc:88:df:
                    08:5d:c9:4c:6b:39:5e:e8:37:c9:8c:8f:42:d8:5c:
                    7e:86:c6:bf:39:65:79:e9:06:ba:21:9f:aa:55:07:
                    3b:5b:91:15:4e:6e:ea:04:d4:ae:ef:7f:8a:c8:86:
                    65:fa:d2:97:69:8a:69:7f:32:44:4f:2a:78:0c:c7:
                    71:8d:73:b6:1d:f4:a5:08:85:fe:ff:44:2c:b0:82:
                    9c:fb:d8:d6:59:52:ee:60:11:1e:a0:15:46:d7:cc:
                    b6:40:b9:e1:81:b0:1f:77:bd:de:9b:37:3f:b0:43:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:E4:B4:7E:4F:33:C9:E1:88:96:4C:5C:5A:FA:EB:33:00:B9:8A
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:4c:35:c0:65:33:61:ce:5a:a6:5e:24:1e:54:c7:ef:93:
         06:56:37:07:f5:2e:ac:54:98:04:e3:c4:3e:ce:4f:1d:77:0c:
         e5:3a:14:c6:d6:87:d7:e0:ee:6e:39:2f:ce:c1:87:53:b1:b5:
         fc:4d:c6:33:6e:24:51:95:90:7b:f1:9a:95:ae:1c:ce:2d:c1:
         ce:42:4b:f9:c7:f4:c8:e5:55:75:88:f5:e8:60:8d:fd:40:8c:
         70:01:06:1a:c6:8a:b6:f8:8f:67:a3:c3:3e:31:54:1d:40:dc:
         a2:07:ea:11:04:69:ec:49:d2:37:d5:41:e4:95:b4:71:fa:fa:
         63:4f:c4:e2:ed:84:04:9f:58:85:92:1c:3b:4f:ac:4f:62:5c:
         01:d1:73:61:91:34:b5:a0:3c:d2:74:80:76:27:cd:e9:b8:3f:
         66:68:43:5e:64:18:45:45:f7:f1:cc:ca:2c:85:99:2a:b7:d2:
         19:02:1e:fa:b1:e2:ce:ad:fc:cf:96:f6:ac:e5:e2:9b:5f:94:
         53:0a:cf:fb:e3:18:0b:e7:32:aa:10:e0:a2:70:70:8f:fc:e3:
         ee:f9:8f:84:c9:f2:33:c4:ea:67:37:7f:3f:0e:58:e4:5a:01:
         a0:70:23:8c:b3:1c:f4:07:05:f4:f3:92:05:69:87:dc:db:a7:
         2c:70:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----