Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203439393831.roa
File:                     3139392e39312e3130312e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          66zz59BhAATQ1nVXETEUOZiQl8LSR8xlnajxJPDvKh4=
Subject key identifier:   10:D5:44:72:53:A0:DE:49:0E:DB:F5:69:16:44:C1:AC:46:8A:05:D9
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       7931E12252954E1460C3FAC2F396A3DA1EA61458
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203439393831.roa
Signing time:             Tue 24 Oct 2023 08:17:06 +0000
ROA not before:           Tue 24 Oct 2023 08:12:06 +0000
ROA not after:            Tue 22 Oct 2024 08:17:06 +0000
asID:                     49981
IP address blocks:        199.91.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 14:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:31:e1:22:52:95:4e:14:60:c3:fa:c2:f3:96:a3:da:1e:a6:14:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Oct 24 08:12:06 2023 GMT
            Not After : Oct 22 08:17:06 2024 GMT
        Subject: CN=10D5447253A0DE490EDBF5691644C1AC468A05D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:67:97:36:6d:73:6a:24:0f:41:5f:d4:16:
                    da:22:eb:11:58:4f:ee:95:9d:98:32:96:f2:5f:03:
                    0e:b1:74:8c:95:67:67:8f:93:ac:d9:2d:70:30:72:
                    9a:8e:51:75:01:1a:d0:d3:65:c7:21:63:f1:28:8d:
                    22:31:4c:b1:1c:46:b9:5d:c4:69:8d:ff:34:cb:30:
                    09:fa:7f:0e:2c:86:07:cd:92:5a:23:a3:01:d7:2c:
                    bc:77:fa:a9:01:3c:4a:d3:b4:8c:80:0b:83:5a:7c:
                    52:89:9a:81:ac:67:dc:5b:2a:c2:13:ef:79:01:70:
                    c5:fc:07:c9:5f:ca:f8:fe:93:a7:5b:0c:63:38:a8:
                    c1:fd:47:21:b7:e3:a4:cf:66:0d:38:02:34:cb:09:
                    b6:05:05:3f:19:f9:85:cc:01:6f:e4:f5:92:75:15:
                    f0:b3:fb:f2:c4:4f:b4:6c:a2:27:70:3e:dc:ee:3f:
                    44:15:ef:e3:a8:77:8d:12:7b:a3:00:8d:3a:0f:e0:
                    71:52:dc:16:b0:92:6d:6f:f3:76:ef:92:02:31:79:
                    08:ba:bc:44:be:0b:9b:68:d8:7e:d5:c8:8c:1e:29:
                    ed:90:6f:79:d3:81:e2:af:d5:9f:af:1f:84:b5:74:
                    f5:c6:6a:af:ff:de:4e:b1:32:5b:0f:b0:13:35:7c:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D5:44:72:53:A0:DE:49:0E:DB:F5:69:16:44:C1:AC:46:8A:05:D9
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:1a:66:8e:67:a3:e8:90:b7:3e:fd:0e:98:d1:cd:b5:d9:
         50:a8:ac:1c:9e:6a:35:05:36:19:88:4d:62:4d:8b:29:79:6c:
         b2:c4:b3:5d:1d:4d:2a:94:c3:59:36:0a:74:e6:7c:ba:a3:1f:
         91:b7:f3:24:72:65:88:d3:68:47:cf:89:cf:ca:0b:78:4f:68:
         8b:5e:32:38:92:52:01:06:13:34:76:99:09:d2:15:fb:cf:35:
         39:9c:b6:7d:00:8d:4c:26:54:00:bd:32:a7:a6:5c:c6:01:c6:
         cd:60:b4:dd:d6:95:9e:66:41:5f:70:09:13:23:82:82:7c:f4:
         51:7c:2b:aa:72:2b:25:4d:cf:54:b0:e0:a4:9f:5c:a9:75:fc:
         74:9d:42:5a:9c:a8:7a:1d:a5:3a:8b:d0:a5:f0:af:09:5f:d4:
         f7:1c:ec:92:c3:35:da:99:89:22:89:69:bd:20:c0:d5:f3:cf:
         f2:87:6e:31:a4:e2:03:ee:5a:2d:71:1b:55:47:92:39:0e:42:
         ca:07:e8:a5:1f:d1:f7:a5:db:03:c8:89:dc:cb:ac:dc:5f:2f:
         87:83:50:cf:2d:88:a3:96:10:1b:b9:89:86:79:f4:18:c9:3d:
         dd:2b:a5:5b:c1:f7:ca:29:eb:e6:b3:b8:e5:6f:4b:48:9b:8a:
         b7:3b:d4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----