Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20333935383339.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          1WxUoybOFJw4GTJN1yfrvERw4qNLVJ+JX9pJ67Tzjss=
Subject key identifier:   F4:F6:FF:D3:F3:8D:7B:49:26:8E:0F:6B:E5:B6:76:10:4B:FE:DF:C5
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       6C0D55541E37B65370C81C0D01D89F9AD3E0F064
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20333935383339.roa
Signing time:             Tue 12 Mar 2024 13:26:28 +0000
ROA not before:           Tue 12 Mar 2024 13:21:28 +0000
ROA not after:            Tue 11 Mar 2025 13:26:28 +0000
asID:                     395839
IP address blocks:        104.254.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 08:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:55:54:1e:37:b6:53:70:c8:1c:0d:01:d8:9f:9a:d3:e0:f0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Mar 12 13:21:28 2024 GMT
            Not After : Mar 11 13:26:28 2025 GMT
        Subject: CN=F4F6FFD3F38D7B49268E0F6BE5B676104BFEDFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:3c:91:12:5f:f5:d1:9e:33:41:de:4f:59:
                    f7:ed:67:d9:b0:90:1f:cd:30:53:9e:28:07:40:9d:
                    77:0b:53:7e:88:31:06:53:be:78:e5:62:fb:fd:b6:
                    47:ae:f2:c5:87:40:36:2f:0a:eb:6d:1e:30:9f:72:
                    af:52:2d:4d:54:f6:35:e6:de:81:54:bd:08:7c:3f:
                    2a:16:d4:7d:d2:1e:25:07:5c:f6:19:a6:65:b0:78:
                    63:ef:ca:64:11:36:d0:93:49:d3:eb:80:32:12:08:
                    93:d6:e2:c2:97:c4:9c:26:c7:a0:dd:a9:e2:7b:cb:
                    11:15:f7:10:6a:60:1f:da:6f:b1:3f:53:18:14:d5:
                    bf:83:58:1f:60:c7:0a:6a:7a:cb:e4:c3:11:04:98:
                    49:ce:40:67:82:3b:b1:f8:8f:58:5a:2c:6e:b5:39:
                    7e:f5:58:6a:4f:a1:de:77:38:a5:94:8c:b7:01:45:
                    27:9e:ae:24:1f:1a:9f:25:a8:a9:0a:5e:8c:a3:dd:
                    50:72:41:d7:68:46:49:e5:ad:72:e4:7f:f9:0d:cd:
                    58:9e:f8:47:75:66:96:8b:96:00:f8:8b:2b:12:22:
                    02:0d:70:87:00:f6:58:bc:42:96:2b:14:26:ed:97:
                    7a:49:c4:3e:95:91:3d:e5:56:30:10:75:ac:e8:c1:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:FF:D3:F3:8D:7B:49:26:8E:0F:6B:E5:B6:76:10:4B:FE:DF:C5
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:28:0c:ef:39:51:60:55:df:f9:53:46:b0:bc:d2:72:e0:80:
         71:d8:65:b2:2e:25:4a:2c:87:c7:de:1a:97:e3:69:92:5b:79:
         cc:7e:f0:80:49:70:c4:c4:6a:29:bb:85:55:8a:84:47:d4:e6:
         ee:ac:b1:8e:6d:be:39:c8:1e:95:21:97:14:af:81:16:7a:c1:
         b9:66:4e:17:90:8d:a2:6a:7e:37:24:bd:72:e5:7a:9f:15:b7:
         2b:25:34:98:e4:c4:39:a8:a0:29:c7:a0:ff:56:cc:b5:9b:13:
         49:5f:a2:78:6f:04:bb:df:d1:51:2a:fe:2f:c2:ca:0a:e6:e8:
         1d:83:ed:e0:f4:27:8d:c8:6e:60:96:75:d3:57:a5:9e:aa:15:
         7f:cc:b5:eb:69:df:14:19:74:82:4c:b6:e6:be:1f:6a:89:40:
         16:e0:1b:69:9e:43:4f:5b:cb:c3:1c:ab:65:69:69:88:5a:8c:
         34:6f:c1:dc:37:e3:ac:68:92:aa:22:6c:42:71:5c:5c:49:24:
         39:7c:af:52:02:dd:fd:e1:4c:b8:2d:50:b5:69:af:34:0d:f8:
         2b:08:14:5b:e5:15:79:96:51:e2:60:07:d2:6e:42:ac:ae:ff:
         5a:df:eb:1a:9a:b3:d9:84:0d:b0:a8:38:a1:47:08:00:39:7e:
         23:a8:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----