Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32332d3234203d3e20383334.roa
File:                     3139352e37382e35362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          tLs+cQrt/GHSwt9PJUQHcs+GQ/51y1x8/hKQPupynHA=
Subject key identifier:   9F:F9:6E:C9:34:9F:35:69:18:34:86:97:41:1B:74:01:EE:C8:91:07
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5FF9145DE6B55BC376D1FDEA28A2C7ADA6005A43
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32332d3234203d3e20383334.roa
Signing time:             Mon 15 Apr 2024 00:01:00 +0000
ROA not before:           Sun 14 Apr 2024 23:56:00 +0000
ROA not after:            Mon 14 Apr 2025 00:01:00 +0000
asID:                     834
IP address blocks:        195.78.56.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 15:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f9:14:5d:e6:b5:5b:c3:76:d1:fd:ea:28:a2:c7:ad:a6:00:5a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 14 23:56:00 2024 GMT
            Not After : Apr 14 00:01:00 2025 GMT
        Subject: CN=9FF96EC9349F356918348697411B7401EEC89107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:91:12:81:66:7d:a8:1c:1b:11:a6:08:47:
                    21:2f:21:1a:1a:e0:70:0d:ce:7e:5b:41:50:bc:77:
                    7f:d7:c8:77:4a:36:9d:78:82:84:63:dc:a4:f8:1c:
                    15:01:5e:8a:d8:17:e4:24:f7:05:c3:8d:af:36:13:
                    d8:4c:72:28:70:c1:83:95:d7:eb:13:95:e5:b0:bb:
                    c5:05:7a:00:2b:65:4f:2b:8d:d7:c5:1b:81:87:b7:
                    4a:18:2c:0c:2f:88:5d:82:e9:b2:dd:73:3d:68:6b:
                    85:60:f5:c9:f3:88:74:4f:78:84:0a:b0:b6:15:e2:
                    a0:57:b9:7f:89:bd:18:67:5d:8d:22:0a:d4:db:1a:
                    f4:aa:c8:7c:0c:bb:fe:7d:3b:df:4f:26:84:4d:d8:
                    f2:e7:fd:b1:e3:08:46:9a:92:61:36:cc:67:05:a8:
                    53:18:af:7a:50:c5:9b:46:c4:93:6c:d7:af:c0:7d:
                    40:16:75:bf:3e:4e:c6:e2:46:ed:d4:66:b4:a5:ed:
                    bc:8f:93:42:31:ff:2d:dd:b3:11:64:12:c5:d1:f7:
                    4a:5e:3e:3d:a5:67:74:cf:f2:08:da:6f:9a:8d:34:
                    5a:25:f9:a4:dc:41:ad:07:34:6c:98:64:49:f2:03:
                    09:7c:d2:44:0b:24:95:46:79:07:c0:3b:bd:7f:e5:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F9:6E:C9:34:9F:35:69:18:34:86:97:41:1B:74:01:EE:C8:91:07
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:31:03:a4:68:44:17:4b:93:f1:e5:42:c8:29:c3:af:a4:
         72:d7:71:cf:32:c8:ea:85:1c:4c:67:7c:a8:fd:4c:2e:7c:52:
         5b:16:cc:43:fd:b5:d7:e7:03:41:e5:46:1b:8c:f3:6f:23:c8:
         59:14:6e:37:a7:62:b7:4e:dc:3f:86:86:0f:b6:bb:28:4b:38:
         17:49:ff:c6:a1:20:8c:41:c8:91:94:80:e7:83:93:36:18:b1:
         7b:28:b7:35:67:a3:0d:33:56:6b:47:ef:2f:b6:73:2e:f0:7b:
         3c:70:64:a4:6b:e6:f4:ca:c4:54:51:4f:8d:2a:32:44:bf:76:
         d6:94:ff:57:ca:ed:3e:46:0d:33:94:da:38:81:f0:8f:28:93:
         87:7f:a0:ab:84:8d:22:d9:92:b7:d2:6b:1c:f9:24:dd:57:0f:
         e7:04:04:58:12:42:22:4e:46:93:91:74:0a:55:79:37:93:f2:
         d5:28:58:c5:f6:23:ab:60:6f:57:99:1f:22:e0:da:9f:1a:66:
         10:4a:50:e2:a4:db:a4:05:89:42:5d:a3:60:fb:ad:e3:ea:cc:
         89:a8:c6:a7:16:b0:3a:8b:00:2c:74:47:d5:db:b7:0d:de:99:
         a6:dd:1c:1d:1a:f7:93:07:03:2c:cb:f3:97:4e:6e:3c:53:e4:
         0f:df:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----