Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20383334.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          27B51SiUi+6PIy1nw5dTduGqaeJz+wDqI+AXEcCMK2M=
Subject key identifier:   DA:69:5E:63:5E:AA:86:4E:DF:EF:08:C3:D7:BC:A1:46:9B:BF:F8:87
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3767EB7A3018639DA3C7F62FAC8E127D6DC6DF1B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 19 Oct 2023 08:30:16 +0000
ROA not before:           Thu 19 Oct 2023 08:25:16 +0000
ROA not after:            Thu 17 Oct 2024 08:30:16 +0000
asID:                     834
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:eb:7a:30:18:63:9d:a3:c7:f6:2f:ac:8e:12:7d:6d:c6:df:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 19 08:25:16 2023 GMT
            Not After : Oct 17 08:30:16 2024 GMT
        Subject: CN=DA695E635EAA864EDFEF08C3D7BCA1469BBFF887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:fa:35:28:4f:a1:51:a3:0c:f2:c3:81:a4:
                    ef:9b:74:24:cd:59:22:3b:7e:c4:72:35:a4:00:65:
                    15:9e:e6:4e:a5:51:6b:64:6d:3f:17:8d:eb:05:a0:
                    1f:08:d9:9c:13:ea:a7:93:37:8d:81:93:a6:49:88:
                    28:53:92:0d:a4:de:03:fc:25:a4:4a:7d:23:a7:3e:
                    89:d3:65:39:02:f0:54:b4:c4:98:b7:c2:73:bc:35:
                    e5:51:99:8b:ec:2f:b1:54:9b:71:6e:83:eb:92:b9:
                    ce:57:86:81:22:12:e8:8f:93:ea:d1:21:bc:d5:64:
                    dc:1f:84:af:7d:35:d9:ff:bb:ce:6b:4e:1d:51:52:
                    40:8d:66:ed:fb:e3:58:aa:cc:cd:d5:c7:07:62:eb:
                    6b:e5:2d:e5:23:77:9b:51:01:19:96:c9:02:f9:35:
                    90:70:8e:d1:dd:b7:2e:a6:a8:2f:13:5a:e7:29:66:
                    ac:ff:60:a2:cf:33:9c:d3:1f:52:10:d4:4d:79:f3:
                    c9:a4:95:78:46:b1:72:f2:4f:60:d0:db:59:21:35:
                    10:c2:fc:06:62:0c:8a:b9:26:02:74:e3:51:b4:46:
                    3e:d2:62:41:f3:c8:4f:39:5d:cc:df:8b:88:c8:48:
                    e6:85:4f:79:b5:09:9d:6f:5d:c1:e7:c4:8d:f8:92:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:5E:63:5E:AA:86:4E:DF:EF:08:C3:D7:BC:A1:46:9B:BF:F8:87
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:cc:c3:4d:47:86:11:8e:64:1d:ca:de:06:58:0a:9f:d4:
         31:6b:fb:2b:19:38:43:7c:3d:60:38:0c:c6:38:0b:5b:31:1b:
         ff:42:a4:0c:a3:63:d5:8b:11:e1:d3:a7:d3:c7:59:bb:c7:75:
         3e:27:8e:7a:46:10:14:9c:26:f6:18:b5:97:92:b3:15:e5:f4:
         dc:35:1a:1f:e2:cf:55:b1:bf:b5:f7:b6:c0:61:3a:a6:7b:02:
         5d:54:99:99:83:5b:16:ce:3f:c3:e2:b3:30:71:db:49:a2:75:
         df:03:2f:5f:17:13:28:73:e7:3b:9a:f6:96:26:b5:a9:17:39:
         a5:11:b4:12:60:e5:6d:d4:f0:7d:53:a7:c9:e3:ea:22:e8:26:
         80:eb:f2:92:6d:04:d1:00:b6:72:df:08:ed:9c:6f:79:54:24:
         a9:04:4d:85:cb:cf:cf:4c:84:12:db:d9:28:59:f6:ed:0e:0e:
         62:43:b6:b7:26:ce:a0:66:99:f9:7c:d2:8c:91:41:12:61:7a:
         24:7b:0c:ce:17:91:e0:14:ff:2d:c9:ec:a5:29:cb:4b:14:e8:
         4b:b9:b9:dd:46:ef:cd:65:98:c8:2f:66:18:51:0a:c7:ae:93:
         bd:89:6b:78:35:db:9b:e8:e2:fc:45:db:da:3c:eb:7c:39:61:
         1c:c7:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----