Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa
File:                     3139332e32392e3235312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          mIaHVSPSAwf/pSLFo4kZNxp4kjicvzanHqSeMU3kMbM=
Subject key identifier:   E8:66:5D:27:33:43:62:DA:23:93:83:66:D6:B6:BE:6E:94:38:3F:71
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1617BE19DA676134BF815770C6B5C634B03A2134
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 30 Oct 2023 12:04:01 +0000
ROA not before:           Mon 30 Oct 2023 11:59:01 +0000
ROA not after:            Mon 28 Oct 2024 12:04:01 +0000
asID:                     61317
IP address blocks:        193.29.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 12:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:17:be:19:da:67:61:34:bf:81:57:70:c6:b5:c6:34:b0:3a:21:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:01 2023 GMT
            Not After : Oct 28 12:04:01 2024 GMT
        Subject: CN=E8665D27334362DA23938366D6B6BE6E94383F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:b0:4d:51:97:60:fe:86:3a:1d:b3:54:ef:
                    13:e4:9a:03:32:b5:f8:b8:65:52:a3:60:95:51:6a:
                    77:7c:45:9b:aa:b0:a1:1e:1a:cd:ab:d8:d0:5f:93:
                    ae:3c:10:f9:c9:9e:84:10:20:ec:68:1d:f2:34:49:
                    88:3c:74:9c:da:35:0a:6a:8b:2d:da:41:c5:ad:f8:
                    9c:3b:0a:47:9b:07:3a:ce:86:13:99:50:2b:de:fe:
                    4c:0e:9d:15:81:ee:b6:52:c8:cf:7e:c3:7d:3f:76:
                    23:2a:a4:0e:37:5f:0d:13:05:99:34:76:73:41:1d:
                    9e:9a:75:42:75:08:2e:8f:6b:5b:3d:f1:ae:49:cb:
                    c7:84:b5:f9:03:2f:af:3f:56:60:b7:47:2c:7c:00:
                    dd:bc:0d:76:6f:1f:c7:2e:7c:5e:2d:9c:ab:cc:eb:
                    80:3b:27:11:f6:f1:a4:02:0d:9e:92:16:8a:a9:87:
                    0f:8f:4b:67:9c:39:d3:b9:fb:11:ea:ec:10:57:74:
                    0e:24:cd:88:d6:93:d9:70:14:71:2c:66:4c:91:b0:
                    20:95:46:0e:07:13:6e:14:c8:f8:40:7d:8c:91:ab:
                    42:b9:56:74:78:e8:86:bf:c7:97:db:d4:20:2f:ed:
                    93:3b:76:c6:a9:9d:8e:ce:5c:f8:3f:b6:66:a8:4f:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:5D:27:33:43:62:DA:23:93:83:66:D6:B6:BE:6E:94:38:3F:71
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:9e:58:c3:35:fb:e5:cf:c6:f2:b9:6f:9c:d6:d5:b6:0a:
         c4:56:11:41:27:ff:a9:03:db:4f:1c:4a:d5:fd:26:6c:73:49:
         40:73:31:0e:ae:38:c1:7c:5e:14:d6:65:68:92:fb:f0:0c:a3:
         b9:ab:63:2d:6b:3e:09:a0:98:a4:29:f9:00:b0:c1:07:87:a8:
         08:eb:ca:68:6d:16:6d:55:b1:f5:da:9d:87:95:46:a7:12:ec:
         cc:bc:72:25:91:e8:5a:9d:49:2f:0b:69:c6:1e:aa:34:4d:2c:
         99:e0:bb:04:a2:6d:e5:ab:02:8c:12:d1:ad:80:19:89:52:29:
         a9:43:0b:ae:c1:f0:56:c4:17:e6:f4:17:7a:ff:96:90:5d:ef:
         48:5a:79:48:36:89:12:da:8e:f2:c8:71:14:4d:8c:25:0c:59:
         29:36:9f:6c:82:80:b2:aa:3b:04:0e:96:85:93:01:70:3a:ab:
         47:72:c7:74:6b:97:49:1c:b4:a0:a5:66:a4:7a:51:44:de:ca:
         0d:61:18:be:56:6b:b8:95:73:b9:4c:bb:14:21:f7:6c:b5:0f:
         9c:10:a7:19:fb:b0:14:c0:11:34:b5:6c:ad:74:25:61:e3:fc:
         f7:51:80:47:28:2c:8f:9d:6d:8f:4d:0c:98:69:93:a6:f6:91:
         07:14:fe:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----