Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e203330303538.roa
File:                     34352e34322e34302e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier:          /wlwPQYPvbL9ogCfcbcm7eVOqK/Rg5Mqqv7NnLnXXtw=
Subject key identifier:   F9:90:3E:13:44:36:C7:6B:FA:F3:FC:63:F8:82:50:6B:41:D9:89:CF
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       27A5700C7660474F4AB71E5105C6BA2B3A7C4980
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e203330303538.roa
Signing time:             Tue 07 Mar 2023 05:45:47 +0000
ROA not before:           Tue 07 Mar 2023 05:40:47 +0000
ROA not after:            Tue 05 Mar 2024 05:45:47 +0000
asID:                     30058
IP address blocks:        45.42.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a5:70:0c:76:60:47:4f:4a:b7:1e:51:05:c6:ba:2b:3a:7c:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Mar  7 05:40:47 2023 GMT
            Not After : Mar  5 05:45:47 2024 GMT
        Subject: CN=F9903E134436C76BFAF3FC63F882506B41D989CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:f2:15:a2:cd:86:95:54:8d:a4:a0:e9:17:
                    16:fb:88:87:0f:fa:a4:88:96:c2:ac:3b:ad:a9:55:
                    19:19:8d:1d:03:aa:4d:be:1c:a9:64:cf:bf:eb:f5:
                    d5:05:e2:f7:0d:eb:9e:72:7c:c7:6b:57:96:1e:bb:
                    92:23:4a:9f:f2:46:44:bb:f3:1a:3b:74:94:20:04:
                    61:90:07:d1:85:e5:f2:80:a5:e7:1c:20:0c:7d:89:
                    3c:39:e4:ad:d1:15:87:f8:ab:35:32:6c:9a:fd:1c:
                    d1:d7:16:e5:03:ac:b7:a4:6a:bc:07:ef:06:c4:ca:
                    8e:89:2e:4b:b0:93:f3:2b:d3:30:5f:49:da:0f:f4:
                    ae:19:8c:94:b8:6d:7c:f8:26:75:4f:a0:54:89:f5:
                    84:81:f0:29:2c:90:04:08:67:59:88:48:04:ba:f8:
                    ba:c7:91:b4:23:8b:46:fb:cd:35:09:de:97:82:5e:
                    24:6d:16:33:c9:dd:ee:62:4f:79:0d:4f:66:1f:9b:
                    f8:55:43:32:14:6e:82:a3:93:a1:2f:cf:9e:18:68:
                    bc:b8:8c:ea:7e:b5:d4:d4:c8:2f:41:be:45:f2:ea:
                    d1:a0:f4:e5:96:54:df:b5:a8:6f:f8:df:65:c4:39:
                    b0:11:0f:b1:d0:f2:a6:ec:98:a0:af:4c:07:35:75:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:3E:13:44:36:C7:6B:FA:F3:FC:63:F8:82:50:6B:41:D9:89:CF
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34302e302f32342d3234203d3e203330303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:ec:0b:fb:af:9f:92:37:c3:2c:cf:8b:c1:5b:c8:b2:2a:
         a6:28:ef:85:ea:3a:10:21:ed:9e:a8:ca:ad:82:ff:38:19:da:
         7f:60:75:22:15:cb:18:a7:af:62:54:c5:b5:2c:68:24:17:00:
         b9:03:fb:ee:cf:ea:c5:e8:2e:fd:27:fc:b1:31:83:6e:94:3e:
         37:3a:ce:42:bf:19:5a:81:d4:8f:c6:fb:ca:21:6d:ca:37:05:
         30:f9:65:7e:58:73:da:42:0d:e2:90:7d:30:d2:3e:60:c0:c9:
         17:9f:a0:11:44:ed:a5:ab:8a:a3:c9:fe:ff:04:6c:99:d1:c2:
         3e:47:0d:1a:5b:b0:72:b8:bd:7b:8f:d5:88:dd:b0:85:d2:dc:
         79:28:3e:f4:cb:d7:f1:d5:3e:5b:ec:a1:bb:11:5d:c6:c7:25:
         03:0a:48:ab:87:45:2e:5c:ec:32:3e:33:24:37:b1:89:91:5c:
         3b:0b:40:5e:07:84:e0:f2:b3:ac:68:d7:62:bd:49:16:09:ab:
         27:5a:89:6b:ac:7f:bc:f5:69:bc:1e:a4:fd:3d:d4:8d:42:72:
         f6:ed:3f:38:05:ff:5c:5f:a7:f5:07:81:8c:62:b8:82:a8:22:
         62:cf:5a:d3:38:6f:82:0a:1c:2e:30:ed:66:6e:96:0d:d4:5e:
         c2:97:8f:e0
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUJ6VwDHZgR09Ktx5RBca6Kzp8SYAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjMwMzA3MDU0MDQ3WhcNMjQwMzA1MDU0NTQ3
WjAzMTEwLwYDVQQDEyhGOTkwM0UxMzQ0MzZDNzZCRkFGM0ZDNjNGODgyNTA2QjQx
RDk4OUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSDyFaLNhpVU
jaSg6RcW+4iHD/qkiJbCrDutqVUZGY0dA6pNvhypZM+/6/XVBeL3DeuecnzHa1eW
HruSI0qf8kZEu/MaO3SUIARhkAfRheXygKXnHCAMfYk8OeSt0RWH+Ks1Mmya/RzR
1xblA6y3pGq8B+8GxMqOiS5LsJPzK9MwX0naD/SuGYyUuG18+CZ1T6BUifWEgfAp
LJAECGdZiEgEuvi6x5G0I4tG+801Cd6Xgl4kbRYzyd3uYk95DU9mH5v4VUMyFG6C
o5OhL8+eGGi8uIzqfrXU1MgvQb5F8urRoPTlllTftahv+N9lxDmwEQ+x0PKm7Jig
r0wHNXUtkwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPmQPhNENsdr+vP8Y/iCUGtB
2YnPMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMzMzAzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKigwDQYJKoZIhvcNAQELBQADggEB
AGe97Av7r5+SN8Msz4vBW8iyKqYo74XqOhAh7Z6oyq2C/zgZ2n9gdSIVyxinr2JU
xbUsaCQXALkD++7P6sXoLv0n/LExg26UPjc6zkK/GVqB1I/G+8ohbco3BTD5ZX5Y
c9pCDeKQfTDSPmDAyRefoBFE7aWriqPJ/v8EbJnRwj5HDRpbsHK4vXuP1YjdsIXS
3HkoPvTL1/HVPlvsobsRXcbHJQMKSKuHRS5c7DI+MyQ3sYmRXDsLQF4HhODys6xo
12K9SRYJqydaiWusf7z1abwepP091I1CcvbtPzgF/1xfp/UHgYxiuIKoImLPWtM4
b4IKHC4w7WZulg3UXsKXj+A=
-----END CERTIFICATE-----