Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203432303535.roa
File:                     34352e34322e34362e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier:          jHvO1eATlQCAUasiRAS+LLC+xhK3zld1iCs3lKiCaGs=
Subject key identifier:   8E:53:03:9F:DD:67:94:89:52:EF:E0:1D:15:6B:D1:C5:8F:EF:B7:50
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       42E01F765685A66BEA1B5245FD53A2DBDA7E5A49
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203432303535.roa
Signing time:             Thu 12 Oct 2023 13:17:08 +0000
ROA not before:           Thu 12 Oct 2023 13:12:08 +0000
ROA not after:            Thu 10 Oct 2024 13:17:08 +0000
asID:                     42055
IP address blocks:        45.42.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 08:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1f:76:56:85:a6:6b:ea:1b:52:45:fd:53:a2:db:da:7e:5a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 12 13:12:08 2023 GMT
            Not After : Oct 10 13:17:08 2024 GMT
        Subject: CN=8E53039FDD67948952EFE01D156BD1C58FEFB750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:c2:71:2a:1c:64:ed:a7:d8:42:44:db:e4:
                    13:9a:93:4d:69:69:2b:17:bc:7d:b3:80:f6:5e:d1:
                    18:ff:b0:43:08:e1:f2:c0:31:cf:37:59:69:ea:b5:
                    99:f3:79:61:40:77:0d:fc:5c:ed:c7:f9:d1:c7:9d:
                    58:28:b8:f6:cb:d4:83:b4:e6:06:e7:53:9e:f6:99:
                    3f:a3:bd:89:b0:15:a0:96:c3:69:af:fb:2d:d0:c9:
                    ef:66:98:a3:83:c1:7e:d0:62:37:9b:c6:9f:64:03:
                    ee:5b:c4:64:92:b8:33:f8:ba:ab:a7:b5:85:61:0c:
                    55:23:1f:f7:9c:22:5f:11:b8:56:b0:c2:5f:57:d1:
                    8c:aa:e3:45:17:09:05:bc:04:07:21:c6:58:9f:51:
                    82:08:be:c4:7d:0a:db:c8:96:1c:96:04:f7:b3:c8:
                    ac:75:8c:7f:b0:6a:75:32:25:4e:bd:be:8d:9b:d5:
                    57:52:c5:05:bb:56:81:47:e1:65:5d:10:e2:d1:25:
                    f3:b9:b7:3f:65:3a:b5:e1:4c:c1:4e:28:83:35:2a:
                    62:64:28:f5:6b:83:4e:7e:6b:df:c6:06:35:33:49:
                    b6:be:cc:21:7d:11:91:3e:78:17:68:49:fa:ef:fe:
                    b7:b8:3b:e1:4c:76:62:96:3a:82:6b:ca:33:96:7b:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:53:03:9F:DD:67:94:89:52:EF:E0:1D:15:6B:D1:C5:8F:EF:B7:50
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203432303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:03:89:dc:0e:65:60:cb:90:99:b2:01:0b:58:82:ed:b9:
         c6:7f:23:c7:5e:12:28:6a:0a:58:ec:2b:59:d3:7b:ce:f2:44:
         3b:17:d1:46:83:23:e6:9f:e3:f2:cb:a4:c7:8f:93:84:5c:19:
         5d:fc:b3:7f:41:85:1c:26:37:32:f0:ba:45:ae:4a:68:76:14:
         1e:df:fb:fa:85:39:e1:1f:7d:f4:46:d9:eb:96:b2:28:02:cc:
         26:6b:84:42:ff:7c:e3:02:1e:46:17:05:c1:67:5f:22:2c:22:
         1a:85:6e:44:1d:07:12:9f:7b:4e:bd:dc:04:ec:03:3a:65:52:
         34:0a:14:84:e7:08:b7:22:5d:aa:27:ad:ed:1f:96:80:00:f8:
         cb:9e:c2:78:63:00:e3:42:0c:d4:c7:49:b2:01:de:ae:92:b9:
         6e:25:f6:77:39:98:9e:e0:3b:ba:4e:5b:c3:13:19:c8:6b:fe:
         10:54:4d:19:ad:06:48:a8:cd:53:d1:53:f9:b7:a3:d1:f5:bd:
         29:75:e1:4d:96:f3:61:32:38:cf:81:94:52:aa:d5:48:6d:40:
         74:fd:50:63:62:52:9a:97:3c:e5:06:e4:29:6c:ed:8c:e4:a9:
         9d:b8:bb:7a:6f:69:1e:0a:33:54:56:d3:aa:13:af:36:87:4e:
         ea:55:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----