Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3132352e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          LugIY8xKmzuOwaklir+nfULdEk1bd5bUG2gWk7rjVzU=
Subject key identifier:   2A:57:B5:E7:82:37:FA:C5:86:5F:E9:F0:00:26:5D:7F:A2:6A:ED:11
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6D8B4B8939A0424BC885EBA2B90D168F9A29F521
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa
Signing time:             Mon 30 Oct 2023 12:04:02 +0000
ROA not before:           Mon 30 Oct 2023 11:59:02 +0000
ROA not after:            Mon 28 Oct 2024 12:04:02 +0000
asID:                     53340
IP address blocks:        198.37.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 10:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8b:4b:89:39:a0:42:4b:c8:85:eb:a2:b9:0d:16:8f:9a:29:f5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:02 2023 GMT
            Not After : Oct 28 12:04:02 2024 GMT
        Subject: CN=2A57B5E78237FAC5865FE9F000265D7FA26AED11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:a2:23:4f:a2:67:82:a2:94:d2:b6:80:81:
                    68:5e:52:17:02:13:02:47:be:85:d6:a8:7b:c2:92:
                    84:06:1b:83:da:b7:61:b0:7c:11:30:cf:0e:2a:9c:
                    3f:d7:6f:bc:d9:15:de:e7:7f:4f:36:4f:46:cc:a5:
                    16:0b:85:63:31:1f:0e:9a:aa:cf:bc:19:df:17:cb:
                    91:86:40:70:69:2a:bb:d6:6f:cf:8d:2d:88:95:8c:
                    2f:18:65:52:6e:9d:b9:5e:e7:a6:59:92:bc:0e:52:
                    01:ff:ac:03:a2:d7:05:b1:fa:f9:47:b9:d1:dd:67:
                    3f:e7:85:40:99:99:f6:99:72:10:51:dd:54:ec:73:
                    ea:26:7c:5a:43:a4:64:47:3f:a0:2d:79:31:3e:d4:
                    99:7a:df:86:e3:b4:dc:b0:6c:9f:09:b5:26:53:a5:
                    a8:34:fb:3c:9d:61:f7:30:45:70:75:0e:77:61:a2:
                    04:06:de:44:6d:44:41:dc:b4:a4:e4:61:11:01:c0:
                    4b:85:6c:ce:ed:fa:c9:e5:8d:a9:ed:70:74:0e:9a:
                    dd:e3:3b:da:66:5a:25:6a:20:c5:4d:d0:5f:a4:7f:
                    82:56:31:4a:82:d0:ef:48:69:a6:fa:3d:7a:5e:2f:
                    58:c4:b9:af:1d:8c:45:5d:64:f6:96:c0:8a:7b:07:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:57:B5:E7:82:37:FA:C5:86:5F:E9:F0:00:26:5D:7F:A2:6A:ED:11
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:c4:87:39:ac:b0:2a:e5:37:46:05:1d:d7:91:5b:d6:a9:
         9d:77:89:e7:e6:f2:91:eb:14:f2:57:d2:ba:68:6d:ee:76:7f:
         ec:cf:91:0b:67:44:6f:9e:28:8e:b3:fa:23:6c:d8:67:1e:e8:
         08:b6:48:c1:10:1e:55:3b:d0:df:41:72:a7:51:73:c0:6e:e0:
         15:ba:4b:88:a2:f6:a1:f0:c9:44:e5:ef:ce:6a:df:49:33:e5:
         ad:9c:e2:6f:f6:fd:36:e3:cb:2c:69:fc:63:e5:4c:9f:28:ec:
         ff:50:d7:92:e3:3f:cd:37:36:13:ee:91:0d:3a:59:54:f2:2e:
         6f:a3:df:91:d3:e6:ce:8c:f1:fc:aa:3b:7d:33:35:e7:a6:26:
         60:d2:c7:02:aa:7e:ee:bc:75:72:26:1a:a1:e4:73:8e:33:2d:
         2f:9c:8d:45:00:46:4f:ab:7f:92:6a:7c:3a:0a:18:b9:ae:e8:
         ef:bf:31:7f:13:9c:89:bb:dd:a1:fa:32:1a:30:be:1b:67:65:
         ca:20:1a:42:1e:79:f3:96:27:d0:ef:e8:e1:bc:79:42:55:95:
         20:f5:58:b9:87:aa:54:54:a1:ca:7b:b5:70:4d:14:22:ff:5f:
         01:7d:1a:0a:a2:47:94:d6:97:bd:b0:ae:f7:40:d6:6e:95:dc:
         d3:75:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----