Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20323031363730.roa
File:                     3139392e39312e3130312e302f32342d3234203d3e20323031363730.roa (raw, json)
Hash identifier:          XWm3jDo367FN79cv9mJmVoia+uPrD+ukgdv4Q2T6+qs=
Subject key identifier:   D6:D8:CB:EF:E2:44:2B:DF:E8:76:E5:A9:4F:69:CF:EB:2F:FD:B4:69
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       7A8F3A7E07CCB2169B39AD07F02C5811D1AD8E20
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20323031363730.roa
Signing time:             Wed 27 Sep 2023 15:38:57 +0000
ROA not before:           Wed 27 Sep 2023 15:33:57 +0000
ROA not after:            Wed 25 Sep 2024 15:38:57 +0000
asID:                     201670
IP address blocks:        199.91.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Oct 2023 15:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8f:3a:7e:07:cc:b2:16:9b:39:ad:07:f0:2c:58:11:d1:ad:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 27 15:33:57 2023 GMT
            Not After : Sep 25 15:38:57 2024 GMT
        Subject: CN=D6D8CBEFE2442BDFE876E5A94F69CFEB2FFDB469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:af:e1:e0:d4:b0:db:c8:b0:70:c2:2e:de:
                    3c:5c:5b:14:97:84:e7:56:5a:c0:95:ad:d6:f2:a4:
                    ad:33:c3:4c:7a:ca:63:77:75:ec:64:2a:3c:cc:e5:
                    ce:e7:ae:fb:b4:18:22:47:6f:da:8d:69:28:70:29:
                    6b:1d:f6:00:7e:28:e9:0d:bd:25:c5:ec:b3:c2:7a:
                    68:ca:83:77:06:b6:f7:b9:1a:ec:22:5e:2c:58:1a:
                    ad:c2:e1:74:59:5f:1a:e3:0e:89:c8:a7:16:6f:1f:
                    dd:85:81:a7:09:77:0b:ab:a4:f5:5f:71:ba:4b:4d:
                    88:3e:16:76:88:b3:30:95:8c:f7:25:50:fe:91:73:
                    86:c4:9a:79:92:0f:83:72:5a:1c:bd:a8:b3:5d:ba:
                    68:c0:0e:c9:9a:3c:3c:b0:df:57:9a:5c:d4:30:8d:
                    ba:df:33:a7:40:6e:14:0c:4d:e2:64:c1:b7:49:a5:
                    d5:50:31:58:d8:9d:b0:bb:76:b0:b7:02:7d:7a:b7:
                    ea:0d:27:1b:e0:2b:61:0a:3c:c0:0a:ec:2b:5f:2a:
                    02:9c:78:bd:87:8d:41:ef:c6:6e:24:92:82:e5:b7:
                    8e:6e:81:84:f1:25:fd:a9:18:cf:04:1f:10:bc:24:
                    cb:4f:a7:51:c1:de:b1:0b:d7:ba:51:ef:4e:98:db:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:CB:EF:E2:44:2B:DF:E8:76:E5:A9:4F:69:CF:EB:2F:FD:B4:69
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20323031363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:90:df:2c:68:22:03:63:8b:e6:0d:3e:b6:aa:27:28:a9:23:
         05:d2:a9:e3:2f:79:23:a2:9e:f9:99:0b:b4:45:cb:10:1f:8c:
         ff:79:5f:89:b6:5f:1d:2c:6b:8f:c1:64:05:e5:5d:c4:7b:05:
         e4:da:91:ba:cc:c2:2a:91:05:31:f9:a0:5f:85:23:7d:0e:b3:
         45:3a:e3:cf:54:cf:6f:5a:e4:1f:4c:cf:6b:0e:cc:0f:d7:fa:
         8a:cb:15:3f:cb:a8:4a:df:3f:4b:9c:5d:a6:56:76:a8:4a:f5:
         53:06:e8:45:57:27:54:8f:02:35:88:e6:97:d0:89:88:fd:01:
         fd:9c:a5:91:fc:71:84:f8:de:95:e1:d6:2a:03:19:fc:53:3b:
         10:ac:70:1f:7e:05:ea:9b:e1:73:fb:44:fa:8d:74:ea:00:5b:
         5e:5a:ea:23:07:5b:8f:d8:23:27:4a:3b:77:bc:49:05:aa:5c:
         74:dd:28:f0:40:dd:13:1d:ef:64:6b:d8:11:67:fe:d4:f6:3e:
         9e:da:51:d2:1a:bd:61:78:84:93:94:f0:58:2d:a2:5b:eb:30:
         b9:ae:47:d1:68:87:71:66:88:02:8a:ef:a5:cc:51:ac:ce:7c:
         53:68:d8:4b:9b:40:42:76:c5:df:13:da:0f:79:fa:85:0b:a7:
         f5:0b:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----