Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313734.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          77BsqDBkxMxEM7y7t77qE4iMZHJSnDGjS/OtXW3MAa8=
Subject key identifier:   9F:D8:8E:57:1B:CF:A6:91:B3:35:A4:B2:D7:47:0D:2B:BD:3E:F1:34
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7AF137AC263797BA5FF1D903A2DB5BC05BC832F0
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313734.roa
Signing time:             Sun 11 Jun 2023 21:29:42 +0000
ROA not before:           Sun 11 Jun 2023 21:24:42 +0000
ROA not after:            Sun 09 Jun 2024 21:29:42 +0000
asID:                     174
IP address blocks:        193.84.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f1:37:ac:26:37:97:ba:5f:f1:d9:03:a2:db:5b:c0:5b:c8:32:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 11 21:24:42 2023 GMT
            Not After : Jun  9 21:29:42 2024 GMT
        Subject: CN=9FD88E571BCFA691B335A4B2D7470D2BBD3EF134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:92:5d:3c:66:6f:ff:5e:d2:3a:2d:22:d7:
                    bd:08:42:e9:a4:cb:f2:1e:f4:92:f3:b3:98:a2:d9:
                    6e:c9:85:84:7e:58:d7:c5:3a:4e:d5:68:68:a3:b6:
                    e0:5d:b9:47:03:ce:aa:0c:b9:d1:b0:b5:f1:b5:54:
                    a3:2f:55:46:1c:ca:74:26:74:f8:00:d7:9d:46:1a:
                    05:ec:af:a0:e4:1b:c1:20:74:a7:09:a3:4c:bc:4e:
                    cc:f1:0f:9c:1a:74:15:c4:f0:8c:d1:29:b3:45:68:
                    bc:1b:f1:0d:12:a5:be:fd:72:69:12:1c:f9:b0:c8:
                    af:c4:41:89:14:be:f8:d9:28:eb:c2:21:aa:a1:5f:
                    26:c5:b7:84:0f:10:8b:e6:1f:aa:1a:34:25:9b:93:
                    57:20:c0:3f:1e:90:17:ab:75:3e:36:93:c9:19:96:
                    89:71:a6:42:40:9d:43:ce:fb:f5:36:b7:32:97:fb:
                    b1:2e:45:58:2e:6d:d2:0c:34:08:17:e3:c9:5a:fa:
                    4c:5a:5b:47:bc:a4:73:40:20:af:24:7e:65:17:52:
                    b3:1c:1b:49:88:a6:87:66:30:e9:52:13:37:31:9a:
                    00:8f:b1:b0:7e:f6:a6:66:7e:06:61:cd:88:c4:ab:
                    01:97:8b:00:d7:88:f5:98:87:43:ec:b4:3b:7f:dc:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D8:8E:57:1B:CF:A6:91:B3:35:A4:B2:D7:47:0D:2B:BD:3E:F1:34
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:c9:16:3e:fa:33:5e:7e:de:1f:2a:13:ba:9e:61:43:64:1d:
         c5:97:3d:16:f7:5c:31:52:5e:7d:74:e3:70:d2:c4:ca:da:48:
         85:a2:c0:31:53:a5:74:1e:ce:ea:09:67:c3:e4:62:21:b9:a5:
         34:b9:1b:6f:7f:fb:23:86:4e:b9:5c:15:33:67:9f:ac:67:09:
         5b:35:ed:2b:05:cc:fc:28:36:24:a2:e5:33:19:31:d7:fa:ca:
         9c:dd:5f:b5:28:32:45:7b:a2:94:e8:5a:33:5b:9f:fe:24:2d:
         ab:5e:d6:06:0a:50:f7:5f:5c:b3:35:46:b4:4f:e7:31:be:02:
         32:ef:2a:94:1b:b2:b2:e3:ed:a6:4b:d9:c9:35:b4:38:a6:df:
         a4:a6:dd:a1:ea:c3:13:5b:34:d6:e0:13:22:b8:e6:29:a0:f4:
         13:61:88:8f:e0:b4:b8:0d:8f:28:61:e2:6a:d9:2e:0e:02:a5:
         02:bf:76:aa:2c:c3:9c:0f:eb:be:47:f2:49:3e:39:cd:51:94:
         52:9b:6a:d3:bd:b6:4d:22:15:50:56:66:f1:6d:eb:13:ec:03:
         16:84:76:b5:af:9b:0c:67:3d:a6:1e:93:ff:16:c9:0a:0b:fb:
         96:91:c0:e4:e1:8b:16:8c:16:c3:74:80:1f:b7:23:b7:2b:68:
         9a:24:69:f2
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUevE3rCY3l7pf8dkDottbwFvIMvAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMwNjExMjEyNDQyWhcNMjQwNjA5MjEyOTQy
WjAzMTEwLwYDVQQDEyg5RkQ4OEU1NzFCQ0ZBNjkxQjMzNUE0QjJENzQ3MEQyQkJE
M0VGMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLCSXTxmb/9e
0jotIte9CELppMvyHvSS87OYotluyYWEfljXxTpO1Whoo7bgXblHA86qDLnRsLXx
tVSjL1VGHMp0JnT4ANedRhoF7K+g5BvBIHSnCaNMvE7M8Q+cGnQVxPCM0SmzRWi8
G/ENEqW+/XJpEhz5sMivxEGJFL742SjrwiGqoV8mxbeEDxCL5h+qGjQlm5NXIMA/
HpAXq3U+NpPJGZaJcaZCQJ1Dzvv1Nrcyl/uxLkVYLm3SDDQIF+PJWvpMWltHvKRz
QCCvJH5lF1KzHBtJiKaHZjDpUhM3MZoAj7GwfvamZn4GYc2IxKsBl4sA14j1mIdD
7LQ7f9zvvQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJ/Yjlcbz6aRszWkstdHDSu9
PvE0MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzEzOTMzMmUzODM0MmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBVG8wDQYJKoZIhvcNAQELBQADggEB
ALHJFj76M15+3h8qE7qeYUNkHcWXPRb3XDFSXn1043DSxMraSIWiwDFTpXQezuoJ
Z8PkYiG5pTS5G29/+yOGTrlcFTNnn6xnCVs17SsFzPwoNiSi5TMZMdf6ypzdX7Uo
MkV7opToWjNbn/4kLate1gYKUPdfXLM1RrRP5zG+AjLvKpQbsrLj7aZL2ck1tDim
36Sm3aHqwxNbNNbgEyK45img9BNhiI/gtLgNjyhh4mrZLg4CpQK/dqosw5wP675H
8kk+Oc1RlFKbatO9tk0iFVBWZvFt6xPsAxaEdrWvmwxnPaYek/8WyQoL+5aRwOTh
ixaMFsN0gB+3I7craJokafI=
-----END CERTIFICATE-----