Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          eoOvuQEHlmfPPfV680/oJMGZXJLD8EvdbPXjOYIbZ8U=
Subject key identifier:   0B:8B:2D:D0:A5:38:CC:E5:90:3B:42:58:0C:52:EB:09:00:6F:EC:CF
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       184D0CADBD6AF16FBF4879DCBB41F567DFC50BD4
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa
Signing time:             Thu 19 Oct 2023 08:30:06 +0000
ROA not before:           Thu 19 Oct 2023 08:25:06 +0000
ROA not after:            Thu 17 Oct 2024 08:30:06 +0000
asID:                     834
IP address blocks:        45.42.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Apr 2024 10:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4d:0c:ad:bd:6a:f1:6f:bf:48:79:dc:bb:41:f5:67:df:c5:0b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 19 08:25:06 2023 GMT
            Not After : Oct 17 08:30:06 2024 GMT
        Subject: CN=0B8B2DD0A538CCE5903B42580C52EB09006FECCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:b4:20:00:c8:b7:4b:88:15:62:5e:a0:21:
                    60:ea:1b:b9:cf:9d:6b:ed:13:ab:30:33:43:67:57:
                    88:90:de:78:39:51:c8:51:cf:18:d6:77:71:6f:26:
                    54:12:25:97:dd:36:8f:a9:da:e6:23:53:cc:fe:ae:
                    6c:a7:52:36:83:63:4e:16:6c:30:fa:10:9f:39:9f:
                    28:30:c3:d6:57:99:e7:7f:19:88:f7:de:ee:8d:ae:
                    0e:a3:54:b4:81:0c:d2:8a:c4:4f:58:9f:af:74:b1:
                    88:53:b7:58:7f:8d:cb:03:d8:36:bb:34:21:b0:9f:
                    3e:26:35:5e:69:3e:41:39:89:a8:01:a6:8b:e7:c6:
                    b7:6e:1a:4d:fa:dc:d8:c6:d5:b1:3b:18:52:96:ab:
                    84:e4:56:2f:b3:39:90:53:33:d2:68:d7:f5:dc:ba:
                    c8:be:54:35:25:17:e4:2a:03:cf:c6:cf:0b:f8:d4:
                    40:15:1a:9a:df:cc:6c:b4:0e:07:96:3d:d5:08:18:
                    8b:84:c1:cb:ba:f4:8a:c8:da:16:08:cb:2c:01:64:
                    c1:a8:3c:2e:33:77:60:b1:83:9a:38:ad:7a:8c:df:
                    8e:5b:c7:7d:1e:ae:44:19:64:27:77:d3:e5:ef:84:
                    6d:30:6d:d5:62:eb:15:07:45:ba:10:c3:b4:95:e5:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:2D:D0:A5:38:CC:E5:90:3B:42:58:0C:52:EB:09:00:6F:EC:CF
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:ae:68:b1:5c:6b:63:46:44:f4:13:ff:fb:eb:21:56:48:
         e8:a6:b1:31:e0:aa:95:86:40:af:f4:4c:01:65:33:b1:56:79:
         84:9f:3b:a1:92:ba:4d:f6:20:6f:03:70:86:24:06:e5:cc:f8:
         8c:7f:40:5c:85:09:0c:5f:55:a8:6c:f4:1f:33:5b:68:19:bf:
         3c:8d:d9:69:c5:a1:99:74:3e:98:95:e6:ba:e1:f9:ec:bc:1b:
         3b:04:58:62:32:4d:99:fa:95:0b:c2:7a:db:43:c7:74:3b:d0:
         f6:81:bb:e0:f4:46:ca:ab:db:aa:96:72:0b:21:83:bc:a4:b2:
         d7:65:1a:d4:e4:44:60:b7:db:b7:17:4f:a4:cb:d0:8e:d9:b2:
         b1:71:b0:d3:52:9a:e0:a9:9b:70:cd:f4:a6:76:ce:74:68:20:
         49:48:2b:b5:ba:31:14:01:81:fe:d2:43:c1:5f:b6:4e:39:8a:
         ff:5e:18:4a:f1:85:1f:71:f5:bb:6e:b1:a5:c8:c2:69:ba:4a:
         b8:af:29:08:f5:d9:fc:df:ea:9b:ec:46:5d:a6:60:18:6b:10:
         e3:94:6f:fa:b1:4f:6d:31:3d:a3:69:cc:5a:6a:00:83:5a:b9:
         a0:e5:34:05:23:e2:e5:18:5a:ab:58:73:3d:c0:b1:3d:3e:0b:
         66:ee:0b:73
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUGE0Mrb1q8W+/SHncu0H1Z9/FC9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjMxMDE5MDgyNTA2WhcNMjQxMDE3MDgzMDA2
WjAzMTEwLwYDVQQDEygwQjhCMkREMEE1MzhDQ0U1OTAzQjQyNTgwQzUyRUIwOTAw
NkZFQ0NGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R60IADIt0uI
FWJeoCFg6hu5z51r7ROrMDNDZ1eIkN54OVHIUc8Y1ndxbyZUEiWX3TaPqdrmI1PM
/q5sp1I2g2NOFmww+hCfOZ8oMMPWV5nnfxmI997uja4Oo1S0gQzSisRPWJ+vdLGI
U7dYf43LA9g2uzQhsJ8+JjVeaT5BOYmoAaaL58a3bhpN+tzYxtWxOxhSlquE5FYv
szmQUzPSaNf13LrIvlQ1JRfkKgPPxs8L+NRAFRqa38xstA4Hlj3VCBiLhMHLuvSK
yNoWCMssAWTBqDwuM3dgsYOaOK16jN+OW8d9Hq5EGWQnd9Pl74RtMG3VYusVB0W6
EMO0leVE4QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFAuLLdClOMzlkDtCWAxS6wkA
b+zPMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0qLjANBgkqhkiG9w0BAQsFAAOCAQEAOq+u
aLFca2NGRPQT//vrIVZI6KaxMeCqlYZAr/RMAWUzsVZ5hJ87oZK6TfYgbwNwhiQG
5cz4jH9AXIUJDF9VqGz0HzNbaBm/PI3ZacWhmXQ+mJXmuuH57LwbOwRYYjJNmfqV
C8J620PHdDvQ9oG74PRGyqvbqpZyCyGDvKSy12Ua1OREYLfbtxdPpMvQjtmysXGw
01Ka4KmbcM30pnbOdGggSUgrtboxFAGB/tJDwV+2TjmK/14YSvGFH3H1u26xpcjC
abpKuK8pCPXZ/N/qm+xGXaZgGGsQ45Rv+rFPbTE9o2nMWmoAg1q5oOU0BSPi5Rha
q1hzPcCxPT4LZu4Lcw==
-----END CERTIFICATE-----