Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20383334.roa
File:                     3139332e32392e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          w0oAasKopFsPkZYb0G74M/3MqxQ7zYEalqrlP6ppvng=
Subject key identifier:   A2:66:5F:4A:76:FB:CC:27:28:21:C6:54:CC:FF:E9:A5:F5:24:07:63
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5A39C5AA96115130A30B15029DF4170F2ABEF4B5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20383334.roa
Signing time:             Sat 01 Jun 2024 00:01:44 +0000
ROA not before:           Fri 31 May 2024 23:56:44 +0000
ROA not after:            Sat 31 May 2025 00:01:44 +0000
asID:                     834
IP address blocks:        193.29.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 13:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:39:c5:aa:96:11:51:30:a3:0b:15:02:9d:f4:17:0f:2a:be:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 31 23:56:44 2024 GMT
            Not After : May 31 00:01:44 2025 GMT
        Subject: CN=A2665F4A76FBCC272821C654CCFFE9A5F5240763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:d8:ad:98:34:31:aa:d6:6d:57:a0:28:29:
                    18:cd:89:51:d3:ac:9d:67:0a:6c:70:b0:50:f3:6e:
                    3c:02:60:04:f6:61:49:81:36:73:f2:d5:26:54:ce:
                    ed:a8:a0:0a:52:bc:62:07:6b:21:f6:24:8e:89:c9:
                    a4:b6:06:ab:31:c2:8a:f1:00:ee:83:e8:fd:67:c8:
                    d3:17:b1:af:c3:53:a7:2f:af:b3:1c:4b:d9:68:27:
                    e9:72:1b:37:25:a2:8d:4e:93:a4:43:0f:dd:6c:e1:
                    0b:1f:52:f9:31:05:0f:43:12:bd:1b:8f:67:cb:7d:
                    7c:57:50:d1:b3:d8:df:a5:4b:0b:af:38:8a:09:05:
                    fd:c3:33:a8:17:74:20:36:71:b1:85:39:cd:f8:97:
                    1c:34:d5:57:8c:bc:f9:a4:5f:61:3b:35:9a:63:52:
                    a0:4b:cb:bc:5c:07:e0:24:a6:02:8d:ac:7d:53:aa:
                    ab:1c:53:42:74:25:9f:92:61:77:25:43:04:8b:be:
                    46:b0:c5:df:cc:a9:e1:b0:0f:e0:9f:b0:ff:c0:4b:
                    c7:b3:e3:99:60:f6:5a:7f:2f:f6:bd:fa:8f:b0:69:
                    a4:66:1e:60:18:8f:87:30:af:8c:8b:a7:5f:1e:cc:
                    cb:44:26:2b:7f:c4:bc:0b:ff:97:65:b7:8b:c3:f1:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:66:5F:4A:76:FB:CC:27:28:21:C6:54:CC:FF:E9:A5:F5:24:07:63
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:82:38:01:d1:b8:e9:08:95:33:05:87:fa:33:bd:88:7d:
         27:6d:b9:1f:51:18:8c:4a:23:79:e2:a8:79:82:be:81:76:7c:
         a7:51:d2:df:26:e1:5f:7b:a1:94:7b:01:36:81:77:75:80:ab:
         a6:0d:7a:f7:aa:25:be:95:45:54:ed:27:b5:2f:3d:e6:d9:52:
         ff:e0:6a:4e:be:71:39:79:09:ed:c8:13:85:41:bf:8f:dd:c0:
         3c:30:d4:e3:85:75:1e:e8:d3:c8:dd:53:40:9d:f4:ca:5b:e4:
         d3:35:65:30:e9:f7:cf:df:b4:99:3b:49:06:8a:8f:11:0f:2e:
         7a:82:f2:42:d8:6b:c6:16:23:88:1a:b5:71:bf:03:81:3b:7e:
         c6:4b:1b:5c:be:3c:31:f2:35:e2:c2:d8:49:6e:a0:1c:e7:c6:
         63:f7:30:7d:9c:31:e3:fc:ac:74:0f:4c:be:84:ed:46:82:7f:
         64:71:cc:f4:7b:11:75:df:4a:5e:0b:df:0a:45:0a:97:42:5d:
         0c:23:31:d9:b0:14:3b:f8:7e:10:db:6b:b7:38:1a:4f:ec:2c:
         06:ab:a7:be:f5:79:4a:6a:df:e2:86:55:eb:c8:5c:f1:76:9a:
         8c:c7:01:b9:a5:e8:bc:98:ed:21:80:92:5d:69:82:50:a3:67:
         ee:d1:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----