Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa
File:                     3139392e39312e3130312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          xt9mMk8gQLGEuc+OY/VseFdU8CBX++AZclM/EkByqA0=
Subject key identifier:   61:44:56:89:12:3F:14:91:20:30:5A:0E:DF:C8:2E:5B:2A:31:F5:60
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       7B191B10B1FDB7A90B58CDB9F7E19EC5D41D39E4
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa
Signing time:             Mon 24 Jun 2024 14:50:38 +0000
ROA not before:           Mon 24 Jun 2024 14:45:38 +0000
ROA not after:            Mon 23 Jun 2025 14:50:38 +0000
asID:                     834
IP address blocks:        199.91.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 06:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:19:1b:10:b1:fd:b7:a9:0b:58:cd:b9:f7:e1:9e:c5:d4:1d:39:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun 24 14:45:38 2024 GMT
            Not After : Jun 23 14:50:38 2025 GMT
        Subject: CN=61445689123F149120305A0EDFC82E5B2A31F560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:d1:cb:ef:81:c9:67:d2:1b:ba:f6:29:97:
                    78:21:0d:49:d8:d7:8c:be:50:c9:08:cb:f3:4a:4e:
                    20:d1:ca:4e:f3:e9:ec:c0:14:b0:b2:16:5a:71:21:
                    de:b4:5c:fe:c8:ca:c6:e3:b8:fe:ee:cd:01:aa:d4:
                    d0:95:ac:d8:59:24:5f:fc:a2:ab:72:37:99:b9:ec:
                    0e:80:91:8c:8f:35:ee:d4:a8:dd:59:9b:f9:5a:2f:
                    c5:ca:01:d4:54:34:7e:d9:a4:ef:e9:5e:cb:8c:71:
                    36:2b:e9:4c:a4:05:bb:81:07:f0:9e:29:23:b4:58:
                    a4:48:fb:55:2a:92:b5:59:a4:e5:a3:0d:d7:44:06:
                    b6:de:a7:15:20:92:7e:a7:80:ca:e2:57:76:1d:33:
                    61:83:9f:36:a2:20:52:7c:ea:cb:3b:3b:8d:eb:07:
                    f4:54:c6:de:88:c6:f1:ce:c4:87:a8:ec:c6:c6:5a:
                    cf:34:1e:3e:3c:64:ca:21:b3:84:af:df:71:cc:37:
                    86:50:92:34:b5:a6:8a:df:e1:a2:16:1f:56:0c:1d:
                    0b:ca:44:68:ec:c3:04:df:b6:b9:d5:b6:02:ab:e4:
                    53:e3:cb:27:4b:7f:cb:ce:9e:a3:c5:54:e6:50:41:
                    85:ca:b4:22:a5:83:65:e8:e0:c0:63:af:ef:54:d9:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:44:56:89:12:3F:14:91:20:30:5A:0E:DF:C8:2E:5B:2A:31:F5:60
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:db:10:93:d8:b7:83:a6:0b:41:01:b5:ab:c7:1b:c8:00:
         74:91:71:e7:89:2c:c5:45:e9:28:0c:02:49:6f:90:34:1a:31:
         4f:70:2c:31:22:c4:bf:9f:66:e8:98:7a:19:1f:63:bc:fc:e4:
         ea:49:4c:02:4e:61:cc:d0:54:cd:7c:bf:41:87:b0:d3:bc:6f:
         8c:68:ea:27:a8:01:78:40:95:e2:86:40:f6:ee:75:b9:e5:ae:
         53:15:62:9d:33:5a:68:86:76:6c:4e:15:d3:04:af:98:d7:c4:
         4e:66:05:86:79:3c:1d:8e:4b:f9:0e:88:4b:8d:74:b6:68:0b:
         1c:ee:d8:ce:b6:1d:1c:92:d9:8c:bc:96:f5:fc:f4:d0:70:7f:
         53:47:03:62:9d:80:1e:c3:18:fc:eb:2e:f3:3c:14:ff:3e:dd:
         0e:26:2c:fe:69:1e:10:94:56:8d:f9:9f:e6:54:e0:95:a3:40:
         8a:2e:50:9a:85:04:b2:ae:ba:7c:4b:62:5c:ff:cf:0b:ae:58:
         05:c5:4a:d4:f6:d9:a5:0d:4c:da:87:79:bf:9c:9b:7e:38:d9:
         88:1d:a7:9a:df:98:fa:2f:6c:99:02:a9:29:8c:e8:0e:84:91:
         46:53:4e:a5:41:d8:a9:26:a6:65:f8:e9:bf:83:fb:6e:1d:9d:
         6f:36:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----