Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20383334.roa
File:                     3139392e39312e39362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          2N+7hcjXlxTIP/7HeSKumkk3sLs2yEAgcF2KN8IoHvs=
Subject key identifier:   5F:73:58:25:74:28:C0:5E:B4:97:AF:26:B3:54:41:CB:E0:DC:2F:89
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       46E95DC75CCCDDDA8AAF286599ED25765D1655B5
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20383334.roa
Signing time:             Thu 08 Aug 2024 00:02:49 +0000
ROA not before:           Wed 07 Aug 2024 23:57:49 +0000
ROA not after:            Thu 07 Aug 2025 00:02:49 +0000
asID:                     834
IP address blocks:        199.91.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 15:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e9:5d:c7:5c:cc:dd:da:8a:af:28:65:99:ed:25:76:5d:16:55:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Aug  7 23:57:49 2024 GMT
            Not After : Aug  7 00:02:49 2025 GMT
        Subject: CN=5F7358257428C05EB497AF26B35441CBE0DC2F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:85:3a:d2:2b:a6:ac:f8:95:62:48:ee:68:
                    23:bd:d6:da:ee:c7:5a:b2:8f:28:d1:c2:07:d0:9d:
                    28:68:6d:60:48:ea:e9:83:38:10:07:c5:b5:64:e2:
                    37:8d:ef:5c:46:0e:90:8e:a3:d7:ff:4a:39:80:1e:
                    b1:de:66:5e:04:57:ab:c4:f6:4a:6e:e8:e8:67:ca:
                    7f:f2:9c:d4:58:3a:fd:2b:5c:0a:81:f3:2f:00:32:
                    3e:ba:ae:54:a5:fe:6b:7b:79:bb:d7:f6:1f:65:41:
                    b4:2e:83:9f:ed:2f:7d:3f:5c:c8:18:2a:8e:7c:30:
                    10:c1:ff:22:ca:7f:06:68:ac:43:cf:d8:a2:6b:a0:
                    da:88:db:1e:44:1a:02:5c:a2:a0:61:8b:53:b9:4a:
                    73:98:3c:5a:92:93:76:ca:ed:fd:b9:cd:8f:49:77:
                    9b:3c:6c:d8:cd:f8:1f:c4:53:4f:f7:9b:39:ed:30:
                    56:bb:14:83:ff:4e:f0:da:9c:45:88:0e:4c:5d:d0:
                    ce:a9:97:9b:0d:6f:03:6e:d7:c4:68:8a:c5:18:3d:
                    9e:6d:ae:40:10:c6:32:81:ad:22:43:a2:11:0d:90:
                    06:9e:41:8e:56:25:12:8d:62:26:c6:e4:31:c8:e7:
                    5d:3e:59:46:ff:08:ae:6b:7d:f8:d2:19:c5:1c:fa:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:58:25:74:28:C0:5E:B4:97:AF:26:B3:54:41:CB:E0:DC:2F:89
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:94:91:ad:cc:4d:75:01:da:a8:4a:1c:c3:94:1e:dd:f6:
         99:1d:e6:08:4b:44:d0:a0:0a:3b:43:9d:85:01:9f:1b:62:f6:
         5a:35:4e:cb:83:36:0a:80:b6:f2:c0:eb:44:09:32:99:ff:8e:
         17:1d:65:8e:56:91:11:9d:72:4a:28:28:f3:d3:83:85:0d:a4:
         b4:ba:d8:30:78:03:3d:32:eb:f6:bf:81:b3:aa:26:ba:37:61:
         a4:86:e0:c0:bf:f2:17:d5:9a:6d:3a:e5:a3:85:aa:cc:f4:16:
         b1:36:b4:99:99:fb:4e:f2:c5:10:7e:04:fe:82:fb:da:8f:d9:
         1d:1b:f9:8a:8e:d3:10:34:20:04:ef:0d:4c:f5:29:1f:5a:f8:
         f3:7a:1e:bc:23:76:03:a5:37:de:13:b8:b5:1e:fa:7f:7f:50:
         7b:4b:86:d2:75:ee:46:f4:33:c2:ee:dc:e5:5b:a2:7f:2e:da:
         3d:fe:d4:76:6b:3c:5e:8a:2b:5f:a9:6d:a2:7f:d3:72:19:4c:
         48:10:a7:8e:8d:63:70:2c:b5:2f:94:f3:7b:59:82:87:ad:92:
         23:e0:ce:64:93:b1:40:da:21:14:90:82:b0:ed:16:a3:24:21:
         20:d9:3d:e6:21:65:07:d7:12:9b:00:48:20:1f:a0:0b:a9:7e:
         f0:5c:a9:af
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIURuldx1zM3dqKryhlme0ldl0WVbUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjQwODA3MjM1NzQ5WhcNMjUwODA3MDAwMjQ5
WjAzMTEwLwYDVQQDEyg1RjczNTgyNTc0MjhDMDVFQjQ5N0FGMjZCMzU0NDFDQkUw
REMyRjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH+FOtIrpqz4
lWJI7mgjvdba7sdaso8o0cIH0J0oaG1gSOrpgzgQB8W1ZOI3je9cRg6QjqPX/0o5
gB6x3mZeBFerxPZKbujoZ8p/8pzUWDr9K1wKgfMvADI+uq5Upf5re3m71/YfZUG0
LoOf7S99P1zIGCqOfDAQwf8iyn8GaKxDz9iia6DaiNseRBoCXKKgYYtTuUpzmDxa
kpN2yu39uc2PSXebPGzYzfgfxFNP95s57TBWuxSD/07w2pxFiA5MXdDOqZebDW8D
btfEaIrFGD2eba5AEMYyga0iQ6IRDZAGnkGOViUSjWImxuQxyOddPllG/wiua334
0hnFHPrA2wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFF9zWCV0KMBetJevJrNUQcvg
3C+JMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5Mjcw
NGQ1ZjMzMmViLzAvMzEzOTM5MmUzOTMxMmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1tgMA0GCSqGSIb3DQEBCwUAA4IBAQCB
rpSRrcxNdQHaqEocw5Qe3faZHeYIS0TQoAo7Q52FAZ8bYvZaNU7LgzYKgLbywOtE
CTKZ/44XHWWOVpERnXJKKCjz04OFDaS0utgweAM9Muv2v4Gzqia6N2GkhuDAv/IX
1ZptOuWjharM9BaxNrSZmftO8sUQfgT+gvvaj9kdG/mKjtMQNCAE7w1M9SkfWvjz
eh68I3YDpTfeE7i1Hvp/f1B7S4bSde5G9DPC7tzlW6J/Lto9/tR2azxeiitfqW2i
f9NyGUxIEKeOjWNwLLUvlPN7WYKHrZIj4M5kk7FA2iEUkIKw7RajJCEg2T3mIWUH
1xKbAEggH6ALqX7wXKmv
-----END CERTIFICATE-----