Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323036353035.roa
File:                     34352e34322e34302e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier:          v8h2/dNAbcY3A1LKKyM+B65/fCy0YvR8kluZ7PwtD+k=
Subject key identifier:   37:CF:B7:26:F7:1E:7E:01:E9:75:CE:20:19:9B:81:1F:64:86:98:19
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       53011642729CD52FAE801CEF6A6889BFFEDC2FA5
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323036353035.roa
Signing time:             Thu 29 Jun 2023 11:22:02 +0000
ROA not before:           Thu 29 Jun 2023 11:17:02 +0000
ROA not after:            Thu 27 Jun 2024 11:22:02 +0000
asID:                     206505
IP address blocks:        45.42.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 00:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:01:16:42:72:9c:d5:2f:ae:80:1c:ef:6a:68:89:bf:fe:dc:2f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jun 29 11:17:02 2023 GMT
            Not After : Jun 27 11:22:02 2024 GMT
        Subject: CN=37CFB726F71E7E01E975CE20199B811F64869819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:f1:c0:c1:89:4e:25:fd:9b:90:95:12:c7:
                    e9:65:9b:d8:24:ac:13:be:87:4d:a5:08:d1:f4:38:
                    f8:72:c6:89:31:53:d1:09:88:98:dd:df:a9:e4:cf:
                    f9:52:f8:34:05:99:25:63:1b:17:8b:b0:4b:47:52:
                    19:4d:b6:d4:2e:39:ae:2a:f6:60:b2:b1:c3:d4:16:
                    26:da:a6:ed:c4:71:b9:6e:9e:6c:ea:23:7e:9d:ce:
                    51:c5:8b:99:d9:14:67:65:7b:79:36:44:01:97:f1:
                    51:06:4f:1f:1a:03:bc:ad:47:77:95:91:5b:f4:a4:
                    fd:26:9d:fc:40:97:92:7b:e0:33:66:6f:3e:11:a7:
                    25:64:77:f4:c3:6f:d9:0b:3f:d4:8f:a8:7d:97:f1:
                    7a:59:5b:2b:70:05:64:36:0d:31:1c:ea:1e:ee:d5:
                    33:c4:ba:ce:d7:99:82:6c:9a:21:a1:de:b6:da:22:
                    63:30:6c:d0:0a:12:e6:e2:cd:64:89:35:6b:32:94:
                    64:a5:59:12:74:bb:8e:b3:53:27:12:82:05:62:9c:
                    49:04:a1:fd:8c:02:05:f2:9e:f0:a3:78:b3:63:ee:
                    52:16:47:29:16:ad:ab:aa:74:33:96:8e:b9:94:a0:
                    ad:fc:ec:36:59:6a:c0:3c:13:8c:6b:54:05:1e:e2:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:B7:26:F7:1E:7E:01:E9:75:CE:20:19:9B:81:1F:64:86:98:19
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e20323036353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:0a:e8:bc:4d:a6:97:6f:0d:c2:41:4c:1a:66:f3:4d:71:
         46:09:77:d9:d9:c9:ff:a1:f6:94:ff:bc:35:a6:ef:85:9b:70:
         1e:76:7e:21:96:03:34:b6:ec:46:9b:af:ba:82:5b:12:1c:a1:
         53:cd:92:c7:c1:51:4f:2a:f6:12:10:64:48:18:45:89:eb:a8:
         0a:75:b3:c3:9f:fc:be:e1:3b:33:70:95:6b:9a:bd:81:25:ee:
         08:46:3c:4e:a3:ab:f5:47:31:53:d7:aa:5c:82:98:78:aa:70:
         8a:13:0f:1a:c5:87:e5:0f:6b:5a:3d:6b:66:3d:b0:5b:7c:8a:
         1a:42:ad:7d:5e:9c:11:c5:d3:e2:18:56:3b:3b:0f:68:cd:62:
         1a:7c:f2:68:7a:25:10:33:ff:e2:2b:a0:0d:ae:62:be:7a:db:
         f2:fa:39:82:63:19:74:d2:72:50:e0:cc:e8:fb:93:68:03:c0:
         fc:20:d5:0b:cb:51:d2:54:9e:25:04:0a:2e:dc:91:f5:01:68:
         06:ea:4b:53:a3:7d:2a:bb:d5:51:b1:01:cb:f7:37:45:c7:d7:
         2c:5b:13:46:d1:5a:f1:86:95:c9:95:68:df:e5:a4:79:a7:bc:
         4e:3d:65:9e:8a:1f:c5:f2:95:10:38:e0:66:f2:58:84:a9:54:
         44:4b:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----