Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203534303039.roa
File:                     34352e34322e34322e302f32342d3234203d3e203534303039.roa (raw, json)
Hash identifier:          EO3JJnSx6dqcXggjD+Cm483HILuEzrDUx1HQfSCLNJo=
Subject key identifier:   07:D4:0D:EA:A3:71:71:D6:4F:4F:CB:01:3E:E6:7B:86:F0:28:D9:37
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       2C424E9106DA450EB45E772DB48C3660C2E3872C
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203534303039.roa
Signing time:             Thu 11 May 2023 13:41:55 +0000
ROA not before:           Thu 11 May 2023 13:36:55 +0000
ROA not after:            Thu 09 May 2024 13:41:55 +0000
asID:                     54009
IP address blocks:        45.42.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:4e:91:06:da:45:0e:b4:5e:77:2d:b4:8c:36:60:c2:e3:87:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: May 11 13:36:55 2023 GMT
            Not After : May  9 13:41:55 2024 GMT
        Subject: CN=07D40DEAA37171D64F4FCB013EE67B86F028D937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9e:10:a7:ee:f7:50:7c:c8:91:a8:95:5e:2c:
                    41:f0:48:e3:89:69:0b:01:16:d5:e6:4b:9c:7a:41:
                    c7:7e:6c:0e:cd:94:40:74:39:ec:ab:8d:97:c5:30:
                    3f:f7:ba:36:f8:d0:78:be:36:e2:61:f8:39:7b:f2:
                    d5:dd:08:de:eb:33:07:0a:3c:7a:9f:8e:ab:74:aa:
                    d6:03:19:0d:1c:2b:4e:51:f7:1d:de:9f:c8:b2:4e:
                    35:eb:04:fe:4b:d2:81:6d:4d:85:aa:6d:49:50:8d:
                    a5:d0:4a:de:8e:d3:0a:a3:4a:f7:df:bd:ee:f1:02:
                    bc:3d:fe:d2:b3:23:5e:9f:23:e2:ac:fc:c2:9b:ee:
                    63:66:28:31:6d:8e:06:42:ad:60:fd:10:f6:c1:14:
                    56:70:47:bc:1d:7d:79:40:fe:d9:74:ae:9c:a5:5b:
                    f1:96:0f:a7:fb:71:b8:2f:26:b7:04:ee:85:84:7b:
                    ec:a6:e4:23:8f:99:4e:86:6e:d8:3b:45:f9:19:c9:
                    e7:19:c1:83:dd:0b:be:b4:46:b2:9c:2f:9c:55:71:
                    8a:0d:75:bc:5b:d6:a9:64:2a:e5:8a:79:50:0d:b9:
                    49:22:e3:10:31:1b:4e:ca:35:ea:eb:cf:da:14:df:
                    0b:7b:94:fb:c6:d9:26:dd:60:a6:6c:8e:e1:d7:58:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:0D:EA:A3:71:71:D6:4F:4F:CB:01:3E:E6:7B:86:F0:28:D9:37
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203534303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:5f:56:19:82:6f:2d:73:d4:31:f2:a7:22:17:91:9f:8d:08:
         91:9c:41:f0:e2:83:99:19:89:a7:80:fe:af:7d:9e:e8:b7:0f:
         a6:6d:ac:1f:09:5e:3e:99:07:68:31:4b:52:fd:5b:bc:a5:7c:
         e6:55:23:b6:a8:15:ae:20:d2:83:88:41:c1:8f:0c:56:e6:3d:
         9c:7b:7f:f8:85:7e:f4:42:9b:8a:4b:3e:41:f8:6d:54:3a:40:
         51:e5:90:56:43:3e:a6:e8:a2:0f:ee:88:f3:10:c5:93:c5:80:
         ba:59:ee:40:25:b7:f4:91:77:88:8d:77:8c:ed:05:69:a1:27:
         9a:8b:3b:ff:9d:14:c8:d2:20:97:84:83:94:fb:6a:e1:45:d8:
         c8:05:cf:46:78:88:5f:78:53:e2:ec:04:52:68:be:e0:56:28:
         ea:3e:e7:8f:8e:4b:d4:a0:21:f3:54:d5:6c:e7:0e:11:45:85:
         af:2c:bc:71:b2:5f:6b:52:a3:d0:63:da:4d:79:86:ee:00:b8:
         44:a0:af:ef:a2:9a:ee:83:d8:9d:8c:ff:1a:33:d8:dd:24:72:
         ab:be:47:b8:9c:1d:5c:46:3d:bd:5e:ae:e6:a7:51:30:10:10:
         3b:fc:5f:ce:32:81:d1:ac:bf:ac:07:85:da:c9:64:e3:11:55:
         30:25:ca:ed
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIULEJOkQbaRQ60XncttIw2YMLjhywwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjMwNTExMTMzNjU1WhcNMjQwNTA5MTM0MTU1
WjAzMTEwLwYDVQQDEygwN0Q0MERFQUEzNzE3MUQ2NEY0RkNCMDEzRUU2N0I4NkYw
MjhEOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Z4Qp+73UHzI
kaiVXixB8EjjiWkLARbV5kucekHHfmwOzZRAdDnsq42XxTA/97o2+NB4vjbiYfg5
e/LV3Qje6zMHCjx6n46rdKrWAxkNHCtOUfcd3p/Isk416wT+S9KBbU2Fqm1JUI2l
0ErejtMKo0r3373u8QK8Pf7SsyNenyPirPzCm+5jZigxbY4GQq1g/RD2wRRWcEe8
HX15QP7ZdK6cpVvxlg+n+3G4Lya3BO6FhHvspuQjj5lOhm7YO0X5GcnnGcGD3Qu+
tEaynC+cVXGKDXW8W9apZCrlinlQDblJIuMQMRtOyjXq68/aFN8Le5T7xtkm3WCm
bI7h11hbiwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAfUDeqjcXHWT0/LAT7me4bw
KNk3MB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM1MzQzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKiowDQYJKoZIhvcNAQELBQADggEB
AFVfVhmCby1z1DHypyIXkZ+NCJGcQfDig5kZiaeA/q99nui3D6ZtrB8JXj6ZB2gx
S1L9W7ylfOZVI7aoFa4g0oOIQcGPDFbmPZx7f/iFfvRCm4pLPkH4bVQ6QFHlkFZD
Pqboog/uiPMQxZPFgLpZ7kAlt/SRd4iNd4ztBWmhJ5qLO/+dFMjSIJeEg5T7auFF
2MgFz0Z4iF94U+LsBFJovuBWKOo+54+OS9SgIfNU1WznDhFFha8svHGyX2tSo9Bj
2k15hu4AuESgr++imu6D2J2M/xoz2N0kcqu+R7icHVxGPb1eruanUTAQEDv8X84y
gdGsv6wHhdrJZOMRVTAlyu0=
-----END CERTIFICATE-----