Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20333937343233.roa
File:                     34352e34322e34352e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          H7jSNWEJzCCx6TTTNFQAMp3k3jeeBSKdnPLvMDhTbzc=
Subject key identifier:   4D:C5:4B:EF:50:F8:66:67:18:D2:0E:58:73:9A:B0:DC:F4:37:0D:83
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       231EDC8F3F261A40AB428CFED93C0FCBF815A628
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20333937343233.roa
Signing time:             Thu 14 Mar 2024 01:21:53 +0000
ROA not before:           Thu 14 Mar 2024 01:16:53 +0000
ROA not after:            Thu 13 Mar 2025 01:21:53 +0000
asID:                     397423
IP address blocks:        45.42.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 04:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1e:dc:8f:3f:26:1a:40:ab:42:8c:fe:d9:3c:0f:cb:f8:15:a6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Mar 14 01:16:53 2024 GMT
            Not After : Mar 13 01:21:53 2025 GMT
        Subject: CN=4DC54BEF50F8666718D20E58739AB0DCF4370D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:eb:0f:a8:ac:7a:01:1d:42:b0:34:c7:e7:
                    9e:f9:3c:f7:c3:62:35:2e:f2:56:35:68:9d:40:a3:
                    bd:01:b3:ee:d8:dd:d7:cc:cb:8b:4d:72:e6:50:f7:
                    61:2b:22:f8:e1:89:bf:7f:97:f8:b6:b7:f0:c6:48:
                    ba:5f:9e:8c:49:44:17:b6:1e:ff:08:07:c7:61:3e:
                    4d:bf:6b:8c:b5:76:10:33:21:88:28:54:94:87:fa:
                    dd:11:38:88:f9:a6:76:7d:f3:43:55:33:8f:4d:7a:
                    ee:75:fe:08:fe:6e:20:fa:8c:3c:02:5e:0f:39:24:
                    77:e9:f4:20:c0:c3:d7:56:af:b2:9a:23:2e:f0:41:
                    15:44:e4:13:04:c3:43:c4:e0:e8:d1:60:b1:3f:54:
                    43:9b:f1:26:f2:8c:10:54:07:83:28:71:4b:a0:ff:
                    5d:b6:a8:1b:ff:2b:e8:67:57:8f:4a:fb:11:66:dd:
                    32:c8:0e:e7:ad:cb:4e:8d:ba:9c:4b:67:7c:ae:bb:
                    b8:6e:f8:d1:ce:0d:08:7b:a0:73:1b:5c:87:1c:6d:
                    a5:c0:13:24:47:cc:ae:ec:39:25:77:01:85:55:18:
                    4e:8e:8b:06:b3:d1:d0:6e:53:fb:f7:3e:81:4f:0e:
                    3c:93:c3:d7:66:c4:7b:1a:3d:ae:27:ad:fd:d7:9b:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C5:4B:EF:50:F8:66:67:18:D2:0E:58:73:9A:B0:DC:F4:37:0D:83
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:24:52:41:3e:ca:38:81:07:03:ff:43:b8:d2:c5:30:b2:14:
         2f:75:43:c1:fe:33:a2:58:8c:b5:35:fc:79:df:64:e5:49:e3:
         a7:6f:52:68:34:bf:a8:79:89:9d:e5:89:47:7e:3d:c4:4a:14:
         81:f0:f7:77:2e:04:de:02:86:23:51:99:41:e0:2a:8a:39:a2:
         d3:dd:c4:77:dc:61:05:73:d4:2b:0e:46:90:89:ee:02:ca:f2:
         b1:aa:8d:39:49:0e:00:86:ba:58:a7:f3:e0:56:28:ec:8c:a3:
         3d:e4:17:8c:95:f2:55:93:b5:cf:64:bf:60:51:dc:1a:63:65:
         81:29:66:a1:84:c1:18:47:df:ca:fd:54:50:dc:7c:e8:34:fa:
         e4:d4:ff:45:02:6b:15:89:0f:43:be:10:51:5e:bc:32:fd:d2:
         6a:96:67:5f:ae:62:ea:1e:e7:62:34:d1:fa:40:86:95:04:81:
         25:cf:97:4a:8d:ff:be:d1:d0:7a:81:ef:ae:67:47:d1:e9:90:
         00:8e:c4:68:93:ac:91:3b:bd:e3:1e:4d:a2:ac:74:ae:21:ca:
         ab:17:7b:75:23:12:73:89:ce:f4:35:6b:b1:70:e5:47:92:45:
         d3:44:b4:26:b0:ff:f7:ee:4b:fa:36:b5:27:41:2e:20:c2:b3:
         ad:57:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----