Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e2036343631.roa
File:                     3139352e37382e35362e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          JZWANHTt2NHgS8ABqzRGYryxE3KxRECCUOpyXJjNIFU=
Subject key identifier:   10:EC:3B:7F:28:EB:32:00:9A:97:DC:07:78:D5:53:E1:A8:07:58:76
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       74D8B3D5F080E01421834E6BE562E2706B535B19
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e2036343631.roa
Signing time:             Mon 30 Oct 2023 12:04:01 +0000
ROA not before:           Mon 30 Oct 2023 11:59:01 +0000
ROA not after:            Mon 28 Oct 2024 12:04:01 +0000
asID:                     6461
IP address blocks:        195.78.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d8:b3:d5:f0:80:e0:14:21:83:4e:6b:e5:62:e2:70:6b:53:5b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:01 2023 GMT
            Not After : Oct 28 12:04:01 2024 GMT
        Subject: CN=10EC3B7F28EB32009A97DC0778D553E1A8075876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:87:09:c2:be:47:34:3e:44:5f:88:a2:0e:
                    c0:22:7b:5b:f8:33:de:16:b2:d3:2b:17:92:f4:8e:
                    a0:7f:6d:c7:89:73:26:98:76:52:de:d9:a7:f8:ab:
                    79:57:01:ec:0d:b2:c8:a4:1b:fe:eb:f1:7f:0a:b6:
                    b6:d8:75:8d:8b:2d:66:44:5c:70:b1:cf:d7:b7:1b:
                    be:ec:9a:52:53:7e:b6:6b:14:49:0e:88:41:6c:d9:
                    ac:1c:7e:a0:93:41:aa:64:c6:75:ab:96:f5:12:1f:
                    94:ec:ab:83:cb:63:b7:b8:db:80:7d:54:40:f0:9f:
                    f5:89:45:36:ea:66:ea:f3:c3:b8:7c:fd:f8:6b:58:
                    d8:19:bd:9d:3a:89:00:b8:56:c3:50:84:c7:ad:ef:
                    82:c4:7d:25:d5:3a:a0:bd:e1:49:95:06:b0:ac:69:
                    d4:b3:b3:c6:c1:dc:9a:47:19:bc:40:fb:93:2f:32:
                    e7:3a:e7:da:89:95:2c:c0:e3:e6:dd:87:41:72:18:
                    1c:cf:25:5d:ac:68:44:f9:fd:7d:4a:33:d9:77:88:
                    6a:68:c7:60:f7:8f:9f:0a:38:c4:0a:e7:6c:cd:8c:
                    01:c4:3f:40:c5:f1:d7:fe:e1:19:02:09:eb:d9:35:
                    45:b3:92:99:d7:64:fc:5c:cb:5a:11:59:50:b1:51:
                    d5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:3B:7F:28:EB:32:00:9A:97:DC:07:78:D5:53:E1:A8:07:58:76
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:fd:6e:8b:df:df:a9:40:72:ac:e0:9a:b5:6d:fc:4e:fa:
         85:27:4a:a9:76:03:99:2c:c7:60:be:8c:f0:d2:69:31:c0:d1:
         c8:b6:2d:65:f7:da:aa:5c:16:cc:6a:e9:2d:e4:78:18:df:38:
         d7:b1:4d:6a:ab:95:ac:84:3e:8f:f9:54:22:d3:87:0a:9c:e3:
         5f:c7:84:55:1a:f9:2b:e6:d8:0e:70:44:c9:50:cf:25:57:7a:
         75:81:f8:28:b1:31:bb:d9:eb:e6:9b:54:86:47:b8:51:fc:87:
         3f:8d:60:93:c7:cf:f5:d2:ca:e8:75:63:c1:51:4b:ce:71:79:
         03:7a:24:b5:65:05:ed:c6:d0:b8:98:e8:19:46:a2:a9:3d:23:
         19:8a:26:69:0d:6c:e9:da:0a:f3:77:f3:7c:e9:75:d3:57:ed:
         5d:88:10:4b:8e:0b:b2:1a:4f:0f:55:13:58:d7:1b:a1:02:c5:
         f2:c5:5a:7a:32:29:90:a6:a9:f3:06:4a:5e:1a:79:f6:09:86:
         4c:dc:be:9c:6d:ef:10:31:36:c7:9f:ee:78:dd:b0:e4:cd:29:
         a6:3c:1b:4b:fb:10:31:2b:45:b4:19:79:75:4d:88:53:ae:73:
         75:c2:80:7a:32:52:40:1f:cd:70:05:3e:02:22:5b:36:31:24:
         08:7a:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----