Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203231383539.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          C6YpJk7ky2opBnsVOCKm+xgwNlgwDNZI71o/wwZ/DIE=
Subject key identifier:   F3:9D:FB:12:56:E0:79:94:43:51:41:05:68:77:64:9B:7E:9C:18:FD
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       0E0E4E9D3EC848026D46C720E71828804F7D14E6
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203231383539.roa
Signing time:             Fri 15 Mar 2024 15:20:07 +0000
ROA not before:           Fri 15 Mar 2024 15:15:07 +0000
ROA not after:            Fri 14 Mar 2025 15:20:07 +0000
asID:                     21859
IP address blocks:        104.254.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 00:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0e:4e:9d:3e:c8:48:02:6d:46:c7:20:e7:18:28:80:4f:7d:14:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Mar 15 15:15:07 2024 GMT
            Not After : Mar 14 15:20:07 2025 GMT
        Subject: CN=F39DFB1256E07994435141056877649B7E9C18FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:7f:04:e8:3e:29:ea:1b:98:08:62:ef:d4:
                    57:c1:0b:7a:17:85:38:f8:48:62:d0:e8:2f:49:81:
                    a5:7d:af:56:98:77:c7:c5:2f:27:86:aa:97:59:ea:
                    d3:80:9e:16:87:0a:2e:a7:d8:54:9c:66:61:91:ff:
                    37:31:4e:b6:0a:20:82:97:fc:d5:46:0f:bc:6d:d3:
                    3b:b9:8a:e5:92:89:58:64:6a:cf:df:5f:96:04:e6:
                    72:2f:eb:d5:67:28:02:a4:e5:68:51:a6:49:38:09:
                    de:1d:26:5e:d9:b9:30:73:09:19:00:25:dd:c3:51:
                    77:a7:17:0b:17:35:ad:a2:30:45:e4:26:30:6a:3d:
                    c6:8a:4f:08:3f:6c:8e:4f:c6:96:a9:57:0e:26:d0:
                    5b:d4:23:7c:06:6d:8f:d1:be:76:fc:fb:c0:7a:a5:
                    52:03:6d:91:71:7e:7d:9c:3d:81:35:1f:ff:3c:5c:
                    57:3b:b4:a4:83:86:f8:a3:28:c6:67:54:cc:17:b3:
                    4a:05:b6:d0:3e:b4:a4:38:34:f4:98:27:92:87:2f:
                    ad:c8:63:90:58:6c:e0:b4:06:4e:29:4a:57:f8:d5:
                    8d:a6:ea:db:04:26:b8:3d:0f:c2:fd:53:be:e7:af:
                    e9:c4:3b:02:48:14:41:9a:36:c4:9e:2a:f4:d3:44:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9D:FB:12:56:E0:79:94:43:51:41:05:68:77:64:9B:7E:9C:18:FD
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:27:3c:e4:25:63:51:de:d0:1c:4f:de:78:05:5a:dd:cb:2a:
         e5:53:5a:6d:1b:aa:f4:62:af:8d:4e:84:e4:cc:6e:6f:bf:41:
         41:f2:46:0b:f4:d3:c5:47:b3:04:cd:22:fd:6c:72:97:ca:1a:
         0d:2a:7a:cc:0e:34:1d:8d:96:25:b4:d0:56:25:8c:94:9b:54:
         40:41:d7:48:34:55:73:23:1b:db:1f:36:7b:2f:95:8a:0b:71:
         e5:f6:27:42:cb:a4:79:14:80:c2:76:7b:59:24:68:23:37:71:
         2f:09:a6:f1:4e:6f:1d:c5:a5:55:bd:df:35:c6:b1:d3:41:1b:
         f9:99:6b:3c:9a:97:ac:20:6c:7f:7e:27:b2:0b:d2:29:35:ab:
         a6:70:55:a5:1f:c4:ab:d5:23:c7:8a:de:34:d3:76:41:44:38:
         68:6f:c9:ef:59:cd:0e:ce:dc:22:1f:a4:2b:13:77:88:6c:e1:
         6b:cb:74:92:b6:a2:a1:e2:74:a0:9b:69:57:26:76:c5:76:32:
         3a:7a:4f:14:af:f0:29:6b:18:68:d0:fa:d2:6e:d3:ee:ff:5d:
         bf:65:2d:17:08:28:50:37:4b:b0:b1:37:a3:b6:86:9d:33:cb:
         ac:a6:05:1f:f4:69:2b:1e:57:6d:78:9d:45:a6:de:d8:57:af:
         f8:2f:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----