Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          PCCRjLqh+P+xgbnJXiDZ0CjTB1zin4tJ/xUUQYzRHXg=
Subject key identifier:   71:79:58:59:9D:60:DE:7D:C4:FF:48:B1:E7:F2:2E:92:C8:C8:63:AF
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       2F3D6EB08B4DC59639CD0D91DBF379C52356EE18
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e20383334.roa
Signing time:             Thu 19 Oct 2023 08:30:06 +0000
ROA not before:           Thu 19 Oct 2023 08:25:06 +0000
ROA not after:            Thu 17 Oct 2024 08:30:06 +0000
asID:                     834
IP address blocks:        45.42.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 11:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3d:6e:b0:8b:4d:c5:96:39:cd:0d:91:db:f3:79:c5:23:56:ee:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 19 08:25:06 2023 GMT
            Not After : Oct 17 08:30:06 2024 GMT
        Subject: CN=717958599D60DE7DC4FF48B1E7F22E92C8C863AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:9c:b5:6d:98:e3:16:3a:10:8d:bf:da:29:
                    3b:a1:ba:fc:e4:f2:3d:50:33:52:76:f4:2e:0d:b9:
                    77:30:38:52:5c:a8:12:bb:4e:ec:6b:8b:33:22:de:
                    45:d2:f0:3b:b4:cf:5b:5d:a4:76:b4:57:3f:43:ae:
                    f7:ad:cb:c0:a1:ee:64:63:4c:4a:34:30:15:da:6d:
                    d3:72:99:ea:5c:ff:85:57:23:bd:99:2e:3c:a1:d9:
                    a8:8b:a9:47:5f:8f:3e:ad:f0:d6:2c:a2:f6:1a:59:
                    3e:77:ba:34:7a:d9:08:49:1f:86:63:df:53:cd:97:
                    71:a7:35:fb:d3:bc:78:ff:2a:c3:cf:92:12:b9:7d:
                    c2:05:5f:ef:be:71:03:be:7d:6a:c8:47:f4:41:2b:
                    0b:1f:c3:95:dc:21:9c:ac:3e:6e:38:75:aa:51:54:
                    20:3a:20:55:b2:47:d0:b2:73:56:58:3f:77:a0:6a:
                    7b:b6:7f:db:bc:e2:b2:a2:7f:26:8b:0f:f6:2f:29:
                    ff:aa:26:0a:10:01:ac:d5:49:b3:f4:e8:7c:14:a9:
                    b3:09:bc:d7:04:bb:32:54:c5:15:c8:b3:3e:c5:3f:
                    a2:1e:6b:71:69:6a:94:f7:d7:2a:0e:4d:9f:6e:ae:
                    3f:46:9f:e3:f7:dd:39:45:d0:13:4a:43:13:9b:2f:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:79:58:59:9D:60:DE:7D:C4:FF:48:B1:E7:F2:2E:92:C8:C8:63:AF
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:73:2f:49:02:6f:6b:6b:59:52:25:a1:e7:77:eb:ff:a9:bc:
         3e:f8:1c:b4:3a:3d:0d:ea:aa:94:11:36:b6:29:c6:c9:d4:5a:
         60:24:59:92:5e:d5:9c:3b:4f:62:d4:ad:5f:c3:d7:51:32:5a:
         b6:2d:f4:47:21:a9:01:5a:5a:57:c5:c7:84:e6:25:7a:cc:54:
         fa:65:c5:a9:da:5b:ae:03:d7:34:ab:7a:2e:ea:9c:01:dc:eb:
         9e:73:99:95:19:a6:17:03:4a:6d:ef:cc:c8:90:4b:73:04:a8:
         9b:34:07:db:b6:f3:64:15:b5:70:57:06:dd:df:8d:89:75:e7:
         13:8f:33:2e:ea:82:b7:bb:30:9f:d9:a7:34:ae:53:39:eb:ca:
         26:3b:17:0a:25:b4:21:6d:ce:60:a0:91:bb:f4:3b:0a:44:6e:
         9a:d1:e8:63:a5:fd:1b:15:da:79:fe:1e:0a:99:fe:26:02:10:
         71:02:74:b2:6d:d5:ef:f7:91:ed:f6:55:33:ea:72:cc:d5:36:
         c0:1e:8d:ab:95:a8:ef:e6:a6:e2:c6:3d:2d:00:c2:f1:80:60:
         4d:41:9b:aa:3b:45:fc:a3:52:f5:f6:96:e4:77:4d:01:16:9f:
         83:1e:3a:82:59:56:db:7b:b1:4c:f7:ff:25:ff:83:7b:4c:ac:
         d0:2c:c0:b3
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIULz1usItNxZY5zQ2R2/N5xSNW7hgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjMxMDE5MDgyNTA2WhcNMjQxMDE3MDgzMDA2
WjAzMTEwLwYDVQQDEyg3MTc5NTg1OTlENjBERTdEQzRGRjQ4QjFFN0YyMkU5MkM4
Qzg2M0FGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sactW2Y4xY6
EI2/2ik7obr85PI9UDNSdvQuDbl3MDhSXKgSu07sa4szIt5F0vA7tM9bXaR2tFc/
Q673rcvAoe5kY0xKNDAV2m3TcpnqXP+FVyO9mS48odmoi6lHX48+rfDWLKL2Glk+
d7o0etkISR+GY99TzZdxpzX707x4/yrDz5ISuX3CBV/vvnEDvn1qyEf0QSsLH8OV
3CGcrD5uOHWqUVQgOiBVskfQsnNWWD93oGp7tn/bvOKyon8miw/2Lyn/qiYKEAGs
1Umz9Oh8FKmzCbzXBLsyVMUVyLM+xT+iHmtxaWqU99cqDk2fbq4/Rp/j9905RdAT
SkMTmy82CwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFHF5WFmdYN59xP9IsefyLpLI
yGOvMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0qLzANBgkqhkiG9w0BAQsFAAOCAQEAV3Mv
SQJva2tZUiWh53fr/6m8PvgctDo9DeqqlBE2tinGydRaYCRZkl7VnDtPYtStX8PX
UTJati30RyGpAVpaV8XHhOYlesxU+mXFqdpbrgPXNKt6LuqcAdzrnnOZlRmmFwNK
be/MyJBLcwSomzQH27bzZBW1cFcG3d+NiXXnE48zLuqCt7swn9mnNK5TOevKJjsX
CiW0IW3OYKCRu/Q7CkRumtHoY6X9GxXaef4eCpn+JgIQcQJ0sm3V7/eR7fZVM+py
zNU2wB6Nq5Wo7+am4sY9LQDC8YBgTUGbqjtF/KNS9faW5HdNARafgx46gllW23ux
TPf/Jf+De0ys0CzAsw==
-----END CERTIFICATE-----