Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          xu6zxskvS+BgXlIH4bC/RGPSbgZuFEhnJ2z62yzo8/g=
Subject key identifier:   93:FF:4A:CA:2A:7C:7D:21:A2:5C:C4:EC:6B:67:22:E6:B5:C9:7E:7D
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       79055B576E22FC4CBD4555BCC5374EB4F2D812FE
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa
Signing time:             Wed 17 Jul 2024 19:47:32 +0000
ROA not before:           Wed 17 Jul 2024 19:42:32 +0000
ROA not after:            Wed 16 Jul 2025 19:47:32 +0000
asID:                     8100
IP address blocks:        104.254.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Nov 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:05:5b:57:6e:22:fc:4c:bd:45:55:bc:c5:37:4e:b4:f2:d8:12:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Jul 17 19:42:32 2024 GMT
            Not After : Jul 16 19:47:32 2025 GMT
        Subject: CN=93FF4ACA2A7C7D21A25CC4EC6B6722E6B5C97E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:9a:e6:bc:3c:10:ca:5f:77:05:c3:f4:3b:
                    e2:e1:cb:54:07:a3:48:5a:8e:a0:9d:3a:96:72:ae:
                    c5:41:c9:e3:ba:48:17:dc:67:3a:10:54:2a:4d:3e:
                    f0:57:9d:e6:76:63:ac:6f:4e:fa:39:4f:56:33:8a:
                    be:b0:83:29:76:8c:70:48:e2:11:6c:a9:e3:99:d4:
                    cf:36:c7:8c:f8:37:5e:5d:5a:8d:62:13:f4:39:a8:
                    2b:dc:bb:33:84:8f:f5:68:32:d3:66:01:ba:da:c2:
                    1b:3f:aa:23:a7:31:90:8e:df:85:1f:91:07:57:23:
                    e7:e5:97:fd:a4:36:58:53:3f:44:18:e4:23:84:e2:
                    0f:2a:cc:8e:4e:52:42:5e:5c:5c:09:70:16:60:3c:
                    a1:c8:40:a3:87:da:15:2d:a5:bf:c5:52:d3:db:e4:
                    e3:a4:a8:11:88:44:1a:5d:70:26:5b:9a:9f:15:c1:
                    37:72:49:bb:a1:16:70:8e:b6:b9:78:6f:c0:37:64:
                    9f:8d:72:1a:97:97:06:6d:19:db:93:28:99:80:57:
                    72:7f:a2:35:cc:3b:09:c6:56:2b:75:c6:13:79:1d:
                    ac:49:c0:fe:ce:88:e7:66:08:6c:71:63:1e:29:f8:
                    87:ed:3b:ba:0b:35:32:42:e4:7b:b7:92:08:8a:6d:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FF:4A:CA:2A:7C:7D:21:A2:5C:C4:EC:6B:67:22:E6:B5:C9:7E:7D
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:22:c9:ad:d4:12:54:0e:d3:f1:3a:85:a8:86:50:35:1e:1e:
         79:2a:5b:87:78:22:4c:3a:5a:18:8e:b8:8d:4b:ab:0e:9d:c1:
         3c:ef:37:1e:04:f8:07:2d:2e:ba:88:31:4a:0d:bb:c2:dc:13:
         fc:99:26:cc:e1:10:05:45:b4:48:3d:b5:50:a7:5e:03:74:77:
         d9:ad:72:8f:24:f0:2e:a3:ee:7c:36:c0:92:40:c4:e4:31:94:
         4e:77:3c:58:78:aa:c7:7a:9c:00:c3:49:4b:01:55:80:bb:a8:
         fd:5e:1f:4b:dc:f1:71:2b:07:2c:69:74:e4:30:7c:63:6f:d7:
         0e:81:bd:45:1b:57:84:b4:20:87:8a:65:8c:56:03:b5:00:70:
         db:c1:0a:13:12:93:74:15:ea:c4:2d:2c:2b:05:fa:67:81:0d:
         10:5a:5b:30:81:aa:e9:2c:cd:0c:42:89:0a:22:66:90:99:e0:
         e3:9d:27:c6:64:25:ab:14:39:86:36:eb:30:3e:ce:53:d7:1d:
         03:ce:54:19:86:ec:1b:f8:49:b1:d5:3a:51:90:ca:65:d6:16:
         b3:96:49:47:59:f2:b2:c0:7a:58:9f:2b:55:23:26:12:7e:e9:
         ab:24:06:31:59:61:cc:9f:55:48:5d:1c:52:f4:8d:03:24:27:
         80:d0:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----