Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139332e302f32342d3234203d3e20333935383339.roa
File:                     3130342e3235342e3139332e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          9HeJvWbRXAE0nDNimCe63dTI5EvWvO1XGe1lCcguybs=
Subject key identifier:   5E:DD:7B:D0:86:D3:73:16:8B:B8:E6:9F:D2:28:4D:E1:E0:88:5F:E3
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       545778FBAE77F492A226822A1881C9A6DFE34EF7
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139332e302f32342d3234203d3e20333935383339.roa
Signing time:             Tue 12 Mar 2024 13:26:29 +0000
ROA not before:           Tue 12 Mar 2024 13:21:29 +0000
ROA not after:            Tue 11 Mar 2025 13:26:29 +0000
asID:                     395839
IP address blocks:        104.254.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 08:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:57:78:fb:ae:77:f4:92:a2:26:82:2a:18:81:c9:a6:df:e3:4e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Mar 12 13:21:29 2024 GMT
            Not After : Mar 11 13:26:29 2025 GMT
        Subject: CN=5EDD7BD086D373168BB8E69FD2284DE1E0885FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b6:a3:22:95:16:a6:30:bd:77:de:85:89:09:
                    3f:ac:f2:67:9e:f9:80:5e:b5:09:f1:68:c7:43:66:
                    56:0d:e6:83:86:23:6d:a5:2c:93:32:36:ea:d6:17:
                    a8:d4:95:5e:31:0a:36:54:12:d5:d7:34:ea:e1:f9:
                    b5:d6:87:0b:2a:ed:65:65:b4:e2:ae:7a:c6:f0:6d:
                    97:2c:13:67:dd:8a:b1:fc:66:4c:0a:c9:b1:f3:56:
                    ce:df:90:61:80:e5:1c:74:14:31:31:8e:af:32:6a:
                    98:87:fa:98:f1:2d:0b:7c:dd:fa:60:51:41:cf:b5:
                    2f:4c:65:cd:fe:2f:79:b7:25:4d:b5:4f:a2:0e:39:
                    47:80:8b:97:07:0f:ac:53:59:25:e0:76:bd:f1:4c:
                    36:fb:f0:17:5d:7c:18:5e:9b:43:61:ef:33:52:21:
                    b7:ca:12:c7:fa:be:ff:5d:b9:c0:4f:fa:53:bf:82:
                    c1:22:36:5d:f2:02:8f:fd:71:ce:f2:5e:60:77:49:
                    7b:01:8e:fc:d7:9d:e6:0d:d7:d7:cd:cd:2e:f7:92:
                    1d:c2:34:fc:f4:34:2d:83:42:4b:65:9b:9f:80:1c:
                    d7:f6:2e:46:0e:aa:80:7b:85:b0:a8:1b:fb:9c:97:
                    28:fc:4d:0b:6f:c7:85:7b:b7:05:e8:db:99:0f:61:
                    35:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DD:7B:D0:86:D3:73:16:8B:B8:E6:9F:D2:28:4D:E1:E0:88:5F:E3
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139332e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:a3:64:e8:73:5c:ee:3c:33:eb:cf:c1:fb:0a:09:d4:ef:
         b1:f9:e2:2a:0b:9a:c6:3b:78:3f:ca:3f:14:8f:52:1f:c8:5a:
         a9:9a:0d:01:ca:1c:54:5d:81:89:43:14:12:89:52:0a:fd:ed:
         76:5a:2e:fb:75:93:3f:3f:15:ac:e2:24:33:90:8a:b3:f0:a7:
         ff:ee:10:28:37:0b:3e:b9:b2:44:5a:0a:f3:b3:8f:27:58:42:
         76:e3:ff:92:b7:9a:94:dc:c6:47:4a:28:91:13:6b:a6:4c:a7:
         da:db:f5:de:66:2e:54:ff:91:6c:e3:88:a7:7f:df:dd:43:24:
         bd:a7:ec:94:bf:73:2c:61:36:88:e1:32:4d:21:c8:b6:96:48:
         c9:6e:83:0b:52:57:a1:a5:e1:cd:b0:e0:97:e7:6b:04:7a:00:
         b6:2d:83:74:f2:a0:5f:de:b6:14:1f:69:f9:71:6e:44:9b:97:
         73:b9:9a:04:fd:8c:2d:4f:a7:ae:cc:d1:de:1f:3e:e7:50:6b:
         85:a0:e2:ec:8f:e1:be:c1:76:7c:c0:a8:ae:a5:d8:1a:15:e6:
         33:1b:39:92:31:2d:0e:d6:ea:45:4a:53:2b:79:d1:ff:f6:b1:
         a5:77:cc:47:c9:83:41:5e:02:5b:ba:b4:da:8a:44:d1:5e:a7:
         48:bd:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----