Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20383334.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          o6OKGHznRcfwGwWKdcJDM9hOacnfYyVWd7NWlq3Suj0=
Subject key identifier:   CB:48:14:FD:E7:FA:7F:0B:0F:F3:FC:E1:B2:F3:C0:AB:6B:35:28:AD
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       339646C738785DF540E9E3DBC09B0889A92335BF
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20383334.roa
Signing time:             Wed 14 Aug 2024 10:08:04 +0000
ROA not before:           Wed 14 Aug 2024 10:03:04 +0000
ROA not after:            Wed 13 Aug 2025 10:08:04 +0000
asID:                     834
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 11:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:96:46:c7:38:78:5d:f5:40:e9:e3:db:c0:9b:08:89:a9:23:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 14 10:03:04 2024 GMT
            Not After : Aug 13 10:08:04 2025 GMT
        Subject: CN=CB4814FDE7FA7F0B0FF3FCE1B2F3C0AB6B3528AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:a6:3a:6d:34:12:3f:ce:7a:6e:83:56:2b:
                    3b:55:6e:00:bc:d4:85:77:0d:e8:31:3b:dd:64:ce:
                    f7:73:4c:f6:21:ed:fd:c6:0a:61:42:00:97:c5:01:
                    40:40:eb:60:6f:8b:71:7f:6f:8c:6a:a3:b6:b4:5e:
                    1d:42:c1:ec:b4:e8:f1:96:06:a5:04:51:8d:8f:50:
                    86:c5:16:94:5b:2f:c8:8b:db:db:d3:b1:af:be:a6:
                    e7:8a:86:d4:96:1a:1e:67:9f:5e:b9:e5:30:65:5f:
                    1b:e7:f8:74:75:18:9c:74:01:50:03:f0:49:93:f7:
                    4e:6d:55:bc:ce:03:7e:18:27:f1:6a:fa:3d:0a:a9:
                    ca:f9:9e:1c:f5:e4:de:7f:cf:6a:30:d7:c8:af:e0:
                    4b:4f:14:fc:f4:02:97:a3:57:f9:fe:15:2b:93:26:
                    63:70:a2:2a:be:df:60:65:ea:f4:ab:6f:8e:8e:f6:
                    ce:82:98:f7:53:48:92:2e:1d:20:25:df:7c:5a:5a:
                    e8:c4:3a:9a:62:f3:b3:46:b7:61:9f:97:73:6e:c9:
                    d1:1f:32:f1:76:3d:c6:3f:76:3b:ba:88:ab:23:3b:
                    91:8b:1f:89:2c:50:38:53:13:6c:c9:86:7c:c2:9e:
                    ac:f8:83:f6:69:1a:92:04:21:1f:ec:b2:f3:e9:6e:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:48:14:FD:E7:FA:7F:0B:0F:F3:FC:E1:B2:F3:C0:AB:6B:35:28:AD
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:ff:4c:2f:af:13:4f:7c:33:31:78:da:03:61:83:9a:c8:
         a8:2b:0f:64:b0:85:a3:24:ba:88:d5:23:55:cb:2e:86:d5:c9:
         f4:2b:9f:3c:b6:d7:a8:d0:57:8d:4a:5e:03:41:cd:e3:c9:6f:
         cd:b1:98:36:da:3e:a0:a8:75:00:06:71:26:cf:37:f6:98:fb:
         39:05:04:5c:8e:14:17:8d:3b:62:dd:b4:86:69:1e:b1:9f:8d:
         b2:af:26:8c:b2:00:7f:5e:f8:ef:5c:ce:a9:ca:e8:c1:a1:4a:
         0d:f6:60:7f:5f:44:e0:3e:8a:ee:14:48:03:b8:5a:55:1b:0f:
         5c:1e:9f:52:19:3e:c7:1d:f9:e1:9b:44:e9:f1:a5:f9:7b:34:
         d5:9a:46:49:80:64:5d:3a:94:d8:7b:c3:02:9f:53:2e:43:c9:
         ac:7b:99:a4:24:d0:9a:af:c1:9d:e7:98:46:50:3d:3b:f1:8d:
         15:e0:10:68:f8:7f:48:c9:88:e6:16:d2:d3:e2:c0:79:bd:d8:
         44:53:51:84:92:15:e8:32:99:05:1c:36:be:80:ba:ec:c9:77:
         10:3b:dc:15:a8:06:21:b8:4c:dd:d4:9c:f9:cc:64:df:ce:e5:
         04:f2:72:0c:37:77:84:c3:1c:23:92:bb:db:54:38:96:2f:65:
         2a:f1:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----