Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20333938333935.roa
File:                     34352e34322e34352e302f32342d3234203d3e20333938333935.roa (raw, json)
Hash identifier:          chiid7SMXYHiK4WcYczN1P4JKdpo5+lptA6YwbaDwXI=
Subject key identifier:   B3:04:F9:94:6C:15:CB:6A:B8:8B:04:80:81:B2:F9:05:06:32:2E:3F
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       29E3A8A13A652D875C4C9DBE52E06E053CEEB5BA
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20333938333935.roa
Signing time:             Fri 22 Dec 2023 07:01:12 +0000
ROA not before:           Fri 22 Dec 2023 06:56:12 +0000
ROA not after:            Fri 20 Dec 2024 07:01:12 +0000
asID:                     398395
IP address blocks:        45.42.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 01:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:a8:a1:3a:65:2d:87:5c:4c:9d:be:52:e0:6e:05:3c:ee:b5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Dec 22 06:56:12 2023 GMT
            Not After : Dec 20 07:01:12 2024 GMT
        Subject: CN=B304F9946C15CB6AB88B048081B2F90506322E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:13:9b:0f:0b:80:28:fa:60:1a:78:ce:4e:
                    32:8d:40:59:57:b9:7b:39:4f:7f:c9:3e:60:66:14:
                    2e:2e:13:25:3b:55:43:9a:55:e7:2c:da:8a:9d:94:
                    c5:f8:86:d3:62:e5:30:dd:f4:dc:43:72:5d:95:25:
                    2f:5c:64:2c:32:cc:9a:bd:31:31:96:51:fd:aa:c2:
                    52:2d:25:b4:42:dc:ef:d7:ea:49:49:64:18:1f:4d:
                    17:09:74:6f:e4:94:ff:38:0a:6f:9f:87:30:11:78:
                    05:56:68:76:38:1d:53:1a:a2:28:25:c4:7d:a1:0b:
                    a6:ef:47:cd:2b:52:35:38:ab:ae:42:97:19:e9:04:
                    46:8d:91:21:8e:59:e0:61:6b:22:dc:44:24:27:a5:
                    9d:56:7b:be:b3:19:e5:3d:03:1e:e1:32:a0:0d:e0:
                    f2:9e:8c:7e:f8:56:cf:33:03:1d:42:e8:07:cf:fe:
                    98:29:73:77:c5:56:35:97:b8:f8:be:d2:4e:b7:6a:
                    68:bd:3e:c7:28:f8:4d:35:b8:bf:23:4d:0f:24:45:
                    27:61:dd:1c:cc:0c:22:12:05:86:44:73:9c:1f:c9:
                    b6:56:4d:7e:c8:3f:6f:b5:eb:a1:f8:e7:43:68:38:
                    fd:c0:04:c1:88:ce:3c:84:f4:e1:09:3d:38:36:07:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:04:F9:94:6C:15:CB:6A:B8:8B:04:80:81:B2:F9:05:06:32:2E:3F
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20333938333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:66:57:7c:b2:ff:44:e7:04:82:37:08:71:75:27:02:9a:16:
         b1:39:bf:c2:30:46:33:86:ee:a2:fa:82:50:8f:2a:31:46:0b:
         c4:b6:33:34:fb:56:d0:30:ef:6d:68:72:3e:e0:15:9d:53:ff:
         f0:d9:79:c7:7c:d3:2b:cf:5c:7f:74:03:e2:69:37:35:e6:01:
         99:34:42:7d:51:69:c9:46:34:3b:5e:21:0b:57:68:01:72:c0:
         a4:ab:41:e2:11:2c:4d:fa:fc:26:ba:35:31:fe:92:bf:85:5b:
         f1:95:60:da:28:00:e9:fb:00:08:28:39:2e:08:ac:be:90:c8:
         85:47:10:be:54:79:0d:78:05:5b:b2:bf:31:65:be:42:41:c9:
         33:61:2e:5f:09:5b:8f:9d:05:03:72:00:b1:c9:b0:a4:cc:79:
         12:c0:19:7d:c7:87:ae:b1:4e:f5:9c:4b:85:97:fb:40:b1:52:
         3a:da:67:1b:31:de:bb:e1:c0:3b:3f:57:51:f1:b3:31:d4:47:
         11:e1:19:3d:ef:fc:78:21:ba:6a:4b:c5:b7:51:45:31:39:5a:
         ab:ac:c1:24:cf:2f:17:39:19:f5:86:2f:68:31:94:bb:13:48:
         5b:00:13:38:70:4a:fa:62:05:fb:10:fb:87:3f:3c:c1:ca:77:
         c3:58:cb:a9
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUKeOooTplLYdcTJ2+UuBuBTzutbowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjMxMjIyMDY1NjEyWhcNMjQxMjIwMDcwMTEy
WjAzMTEwLwYDVQQDEyhCMzA0Rjk5NDZDMTVDQjZBQjg4QjA0ODA4MUIyRjkwNTA2
MzIyRTNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryUTmw8LgCj6
YBp4zk4yjUBZV7l7OU9/yT5gZhQuLhMlO1VDmlXnLNqKnZTF+IbTYuUw3fTcQ3Jd
lSUvXGQsMsyavTExllH9qsJSLSW0Qtzv1+pJSWQYH00XCXRv5JT/OApvn4cwEXgF
Vmh2OB1TGqIoJcR9oQum70fNK1I1OKuuQpcZ6QRGjZEhjlngYWsi3EQkJ6WdVnu+
sxnlPQMe4TKgDeDynox++FbPMwMdQugHz/6YKXN3xVY1l7j4vtJOt2povT7HKPhN
Nbi/I00PJEUnYd0czAwiEgWGRHOcH8m2Vk1+yD9vteuh+OdDaDj9wATBiM48hPTh
CT04NgdO1QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLME+ZRsFctquIsEgIGy+QUG
Mi4/MB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1ODgwMjllMDE4NWNk
Yzg3MTBiNDJmZi8wLzM0MzUyZTM0MzIyZTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMzM5MzgzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKi0wDQYJKoZIhvcNAQELBQAD
ggEBAJRmV3yy/0TnBII3CHF1JwKaFrE5v8IwRjOG7qL6glCPKjFGC8S2MzT7VtAw
721ocj7gFZ1T//DZecd80yvPXH90A+JpNzXmAZk0Qn1RaclGNDteIQtXaAFywKSr
QeIRLE36/Ca6NTH+kr+FW/GVYNooAOn7AAgoOS4IrL6QyIVHEL5UeQ14BVuyvzFl
vkJByTNhLl8JW4+dBQNyALHJsKTMeRLAGX3Hh66xTvWcS4WX+0CxUjraZxsx3rvh
wDs/V1HxszHURxHhGT3v/HghumpLxbdRRTE5WquswSTPLxc5GfWGL2gxlLsTSFsA
EzhwSvpiBfsQ+4c/PMHKd8NYy6k=
-----END CERTIFICATE-----