Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          hgESW9G6SIU6+Bys/FUf8p04n2M/Isw2Q3cmuuEaAZc=
Subject key identifier:   B1:D5:4B:C5:C8:31:27:13:AF:41:D3:48:04:78:B3:D2:54:FE:94:3A
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       5FA7BE6D93AE1D07E9309FCB23FA94B2DEBA3962
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
Signing time:             Thu 24 Oct 2024 10:45:43 +0000
ROA not before:           Thu 24 Oct 2024 10:40:43 +0000
ROA not after:            Thu 23 Oct 2025 10:45:43 +0000
asID:                     834
IP address blocks:        199.91.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 27 Oct 2024 14:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a7:be:6d:93:ae:1d:07:e9:30:9f:cb:23:fa:94:b2:de:ba:39:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Oct 24 10:40:43 2024 GMT
            Not After : Oct 23 10:45:43 2025 GMT
        Subject: CN=B1D54BC5C8312713AF41D3480478B3D254FE943A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:45:92:24:c5:11:43:d9:d0:40:5c:cb:39:
                    df:c3:d2:7e:cc:ed:a2:ef:d6:fa:6d:6a:7e:7e:57:
                    f3:50:ad:62:ba:e5:ca:11:8d:71:ef:42:7b:3e:b9:
                    b2:69:c4:cc:33:34:d5:52:09:b8:fa:06:7f:76:9e:
                    50:c2:41:c8:68:03:e8:6a:a7:3e:51:84:f7:c3:8d:
                    7c:ba:ce:75:02:be:2b:35:8a:fa:6f:cd:8a:a6:08:
                    38:9f:8a:cf:34:fe:5b:51:0a:27:ef:78:69:23:0c:
                    70:44:ed:08:d1:b0:21:f0:23:fa:17:57:95:b0:93:
                    75:c8:a5:7f:65:be:b4:a5:e9:62:62:c9:13:f4:df:
                    4f:67:94:cc:4d:12:dd:08:42:16:1e:54:1a:68:ef:
                    61:8b:32:92:61:cd:30:7f:92:c5:e9:c9:32:7d:03:
                    12:a6:e1:74:42:cb:f9:68:9c:47:c5:4e:12:d1:ea:
                    14:34:2d:b8:b6:02:7a:98:ad:9b:42:1f:9a:9f:ab:
                    d8:a7:db:af:ba:5e:bb:cb:7e:17:d9:f4:51:72:5f:
                    64:ad:5d:ce:06:1b:99:51:c8:d7:2c:58:15:fd:88:
                    ba:15:94:70:f8:97:44:94:4d:d4:2f:dd:b0:09:68:
                    57:51:a8:41:e7:06:c7:2c:b9:17:a8:37:58:c7:c3:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D5:4B:C5:C8:31:27:13:AF:41:D3:48:04:78:B3:D2:54:FE:94:3A
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:41:d6:1d:85:74:16:2e:2a:32:4d:f4:2b:b7:5b:e7:05:
         28:d5:99:7f:2a:ca:e4:44:ad:c6:50:e6:35:cb:b0:38:44:58:
         17:60:c9:fc:7b:42:7f:f1:da:44:c9:ab:f7:cb:98:e7:01:90:
         01:b5:02:1f:68:22:e2:1f:7c:74:07:ac:67:f1:1c:ba:d6:68:
         14:09:49:37:f0:2e:0b:05:b9:e7:ab:8a:aa:25:51:1c:3f:11:
         43:1d:1d:05:80:56:b4:3c:46:14:5f:91:99:3b:12:df:1f:e5:
         09:ae:a9:2e:18:0a:f8:f6:79:e2:4a:8c:a2:8c:d7:e6:74:07:
         2e:a1:01:c7:34:6b:3f:95:d1:06:2c:fa:9a:08:94:04:dc:fc:
         8d:2b:55:a2:f8:21:26:2e:2a:58:a1:fc:1d:3a:15:f2:b6:0c:
         1c:e4:a6:c0:c2:04:b2:2f:40:79:e6:75:48:56:37:d4:ed:14:
         74:7d:59:67:c8:14:bc:a6:e5:0d:56:ae:0e:fb:6f:cd:ad:44:
         2d:4b:47:c3:f6:fb:4a:98:ec:85:e1:24:d5:01:82:69:50:3f:
         5a:4d:20:eb:17:df:87:58:2f:54:4a:bc:89:bc:9c:58:ec:77:
         de:a5:bd:8f:b3:b7:1e:85:73:f7:87:56:4d:ce:aa:21:36:31:
         d9:dd:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----