Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e203131343236.roa
File:                     3139352e37382e35352e302f32342d3234203d3e203131343236.roa (raw, json)
Hash identifier:          0DJycp95okljAbiB3dqIuOqUDE2qQJbNUFC4RyMyRXM=
Subject key identifier:   55:CB:E0:08:5E:C0:67:A8:3F:B7:73:D3:84:C3:C0:0E:37:0A:06:7E
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3361E4D22D60555BB92C53C45789038DAF9702BB
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e203131343236.roa
Signing time:             Mon 30 Oct 2023 12:04:00 +0000
ROA not before:           Mon 30 Oct 2023 11:59:00 +0000
ROA not after:            Mon 28 Oct 2024 12:04:00 +0000
asID:                     11426
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 00:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:e4:d2:2d:60:55:5b:b9:2c:53:c4:57:89:03:8d:af:97:02:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:00 2023 GMT
            Not After : Oct 28 12:04:00 2024 GMT
        Subject: CN=55CBE0085EC067A83FB773D384C3C00E370A067E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:4a:bf:18:83:ba:9d:64:38:9e:c3:cf:91:
                    a7:82:46:aa:3a:8d:29:ed:c2:0d:28:22:f7:05:18:
                    b7:5c:9d:1e:a7:be:62:c6:df:69:d0:42:3a:d7:de:
                    75:b4:19:d2:ef:74:8f:e0:34:ab:e0:c7:92:7d:03:
                    e3:4c:f2:3f:6a:c1:64:89:35:dd:a0:35:5b:68:af:
                    b1:6b:a3:0f:99:f5:94:93:97:40:a6:72:e4:cb:03:
                    a3:d8:10:99:85:11:9c:7a:3e:26:0f:79:0a:44:6b:
                    c9:9e:cf:04:d2:a7:d6:20:f0:04:f1:57:63:15:6c:
                    86:76:00:1b:01:55:5b:15:4a:38:c1:91:d3:c2:b2:
                    e6:2f:ba:cb:a4:87:f4:a9:0a:5d:4c:c9:7e:91:2f:
                    cf:3d:ff:c9:40:d5:aa:25:48:75:cb:c8:54:90:13:
                    83:07:25:1c:19:a6:d3:b8:f9:f5:16:dd:06:aa:ab:
                    3f:86:fc:3a:6f:b8:2e:b8:f2:e8:44:33:bf:a8:58:
                    91:e1:dd:be:59:95:49:91:e1:43:95:31:e7:cf:03:
                    d1:36:8e:5d:67:c9:f8:7f:71:80:b5:4d:34:b6:b5:
                    f0:17:c7:36:27:be:8f:a0:16:db:21:3b:b4:b0:fe:
                    a0:c4:21:96:ca:27:2f:72:d8:62:9e:e5:7d:86:8b:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:E0:08:5E:C0:67:A8:3F:B7:73:D3:84:C3:C0:0E:37:0A:06:7E
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e203131343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:3d:06:e3:cc:16:e0:b6:f8:2e:ba:20:f3:69:3a:b6:0e:
         ed:e6:59:33:78:00:37:d3:a0:3b:27:53:6d:1f:c5:44:5e:f2:
         05:20:05:bf:47:a5:12:3f:90:2d:3d:20:09:d5:51:d2:fa:3a:
         ac:50:68:20:c9:65:69:df:42:5a:e4:f6:b6:2d:7b:b0:b2:98:
         09:80:54:67:b8:04:18:70:91:b7:74:b0:9b:83:b5:6c:44:e9:
         11:0c:1b:fa:74:47:e1:da:72:8b:ba:07:5c:d4:3f:d9:98:2c:
         62:90:c9:54:ea:1a:91:54:a1:78:3a:1b:0d:f1:7f:2e:c9:0f:
         aa:32:fe:8c:d8:4e:27:5f:15:b6:b7:e2:3a:9b:7e:6a:01:a7:
         5f:08:b5:3b:c9:9d:bb:9f:4f:3c:77:25:5a:4e:f1:17:4b:c1:
         e0:10:93:2f:8b:6e:e5:a9:b1:97:be:2c:07:80:60:b1:81:9d:
         98:6e:6f:79:3b:8d:78:ab:92:e0:76:2c:67:52:dd:c1:54:e4:
         9c:d0:10:24:d2:4e:1a:4d:c0:a7:6e:8e:6f:8b:8b:18:fd:9c:
         85:f6:65:1e:23:f0:b3:22:74:7a:fb:d5:50:b5:e8:b9:3e:a8:
         c9:fa:3e:c9:cb:3c:f6:d3:ee:fc:8d:40:6f:f5:89:e7:76:0b:
         34:b8:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----