Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20383334.roa
File:                     3139352e37382e35352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          evOySgdn7xt1JxYYzHboF5+PwWVxq0mNMfGHNiExqls=
Subject key identifier:   D9:06:4C:D5:42:9B:F3:3F:35:3B:E5:F1:49:AE:B1:5A:9C:8F:FB:4B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       11BEC3C267E521DB0A55C9850E56FCB387AA299D
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20383334.roa
Signing time:             Mon 15 Apr 2024 00:04:08 +0000
ROA not before:           Sun 14 Apr 2024 23:59:08 +0000
ROA not after:            Mon 14 Apr 2025 00:04:08 +0000
asID:                     834
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 14:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:be:c3:c2:67:e5:21:db:0a:55:c9:85:0e:56:fc:b3:87:aa:29:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 14 23:59:08 2024 GMT
            Not After : Apr 14 00:04:08 2025 GMT
        Subject: CN=D9064CD5429BF33F353BE5F149AEB15A9C8FFB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:d4:c2:24:08:b3:b9:ed:17:59:0d:37:e6:
                    04:15:1d:17:d0:60:1e:50:23:8b:8f:d5:c4:ee:89:
                    30:a9:ea:63:51:fd:95:04:0d:2a:09:ea:d6:4e:d1:
                    d0:e9:3f:50:1a:c1:9a:7f:4b:75:8c:9a:fc:a5:0b:
                    b1:e0:8c:d0:69:96:f7:8c:9a:f6:48:b2:28:8c:95:
                    a7:e4:6e:52:46:4f:29:c4:be:4a:a9:ce:9f:bc:26:
                    f4:8c:76:9c:02:bf:0d:b3:87:a3:ed:f0:b8:01:47:
                    87:11:95:d8:5a:96:42:d1:d0:53:49:9e:aa:43:eb:
                    cb:cf:67:52:6c:4d:98:8a:3a:23:61:ac:b7:2f:09:
                    2b:d7:4d:cf:f2:fc:c0:52:0a:18:dd:e7:60:b0:cd:
                    3e:3e:36:0d:d0:e0:5d:7b:97:d2:18:08:76:07:1b:
                    7a:b8:24:79:0e:74:29:77:77:95:c8:56:bb:c8:c8:
                    99:85:e4:69:76:70:b6:d3:a6:31:a0:e0:ff:29:9e:
                    d5:46:34:ab:d9:1a:ac:a5:43:dd:a3:7a:64:48:db:
                    05:99:2c:56:ae:ed:e0:c0:09:29:a5:2e:8e:67:60:
                    37:ab:74:66:e8:3b:a0:7c:8e:bd:04:9d:55:95:a6:
                    66:db:15:3c:41:c8:cc:3b:82:e6:2d:d6:fe:85:6d:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:4C:D5:42:9B:F3:3F:35:3B:E5:F1:49:AE:B1:5A:9C:8F:FB:4B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:a9:5d:54:39:45:da:be:24:01:4e:cd:31:18:21:9c:5f:
         dd:29:20:03:32:5f:72:ef:e4:e2:e6:8f:78:e5:0a:ce:c5:a0:
         86:58:5b:a6:d5:45:c4:e9:43:e9:08:46:21:25:23:31:99:2c:
         4d:a6:69:18:c2:73:a4:61:ed:e6:2a:e0:fb:fa:9a:ea:ed:39:
         64:da:28:44:1f:40:4a:8b:7e:6f:e4:5f:08:20:7f:ab:1c:47:
         04:13:38:85:eb:80:b9:ac:84:f9:78:2e:5a:1b:26:9f:3b:92:
         3f:51:42:80:df:76:88:bf:7e:dd:a2:d4:47:42:92:e3:25:0a:
         49:de:32:67:20:c9:c3:df:0c:fb:45:be:2c:c3:1d:2b:fe:8e:
         50:ab:bb:e1:99:5e:5a:7a:4a:47:1c:05:77:08:b4:9f:5a:20:
         12:97:6d:2c:1e:2b:b5:c7:a5:4f:81:bd:5d:f5:cd:43:66:38:
         e6:cd:55:1c:a4:a2:34:b6:cb:88:95:b7:d4:f5:df:fb:d9:1d:
         2c:e4:4b:1a:99:b1:f8:b4:42:b9:b7:fc:44:0c:27:ec:fb:b3:
         b4:88:93:22:7b:e1:2a:e0:df:1f:c0:b2:46:66:ec:34:88:d5:
         e4:6a:79:b3:2f:ce:02:c1:cd:50:41:cf:24:8a:48:58:84:9c:
         4f:b1:0f:32
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUEb7DwmflIdsKVcmFDlb8s4eqKZ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwNDE0MjM1OTA4WhcNMjUwNDE0MDAwNDA4
WjAzMTEwLwYDVQQDEyhEOTA2NENENTQyOUJGMzNGMzUzQkU1RjE0OUFFQjE1QTlD
OEZGQjRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymLUwiQIs7nt
F1kNN+YEFR0X0GAeUCOLj9XE7okwqepjUf2VBA0qCerWTtHQ6T9QGsGaf0t1jJr8
pQux4IzQaZb3jJr2SLIojJWn5G5SRk8pxL5Kqc6fvCb0jHacAr8Ns4ej7fC4AUeH
EZXYWpZC0dBTSZ6qQ+vLz2dSbE2YijojYay3Lwkr103P8vzAUgoY3edgsM0+PjYN
0OBde5fSGAh2Bxt6uCR5DnQpd3eVyFa7yMiZheRpdnC206YxoOD/KZ7VRjSr2Rqs
pUPdo3pkSNsFmSxWru3gwAkppS6OZ2A3q3Rm6DugfI69BJ1VlaZm2xU8QcjMO4Lm
Ldb+hW3SVwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNkGTNVCm/M/NTvl8UmusVqc
j/tLMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzEzOTM1MmUzNzM4MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw043MA0GCSqGSIb3DQEBCwUAA4IBAQCI
oqldVDlF2r4kAU7NMRghnF/dKSADMl9y7+Ti5o945QrOxaCGWFum1UXE6UPpCEYh
JSMxmSxNpmkYwnOkYe3mKuD7+prq7Tlk2ihEH0BKi35v5F8IIH+rHEcEEziF64C5
rIT5eC5aGyafO5I/UUKA33aIv37dotRHQpLjJQpJ3jJnIMnD3wz7Rb4swx0r/o5Q
q7vhmV5aekpHHAV3CLSfWiASl20sHiu1x6VPgb1d9c1DZjjmzVUcpKI0tsuIlbfU
9d/72R0s5EsambH4tEK5t/xEDCfs+7O0iJMie+Eq4N8fwLJGZuw0iNXkanmzL84C
wc1QQc8kikhYhJxPsQ8y
-----END CERTIFICATE-----