Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e3132312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          oyIqZvsITAsslSUUZ+jKHtA/9Qki0lPYsibhu85bXd0=
Subject key identifier:   E8:61:E9:6D:77:A0:1B:E0:C0:5D:76:35:54:7E:9D:DB:B7:14:E5:5B
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       7D33F3BFE3585EC039B5AA6847C3536C3257BB12
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e20383334.roa
Signing time:             Sat 27 Jul 2024 13:30:06 +0000
ROA not before:           Sat 27 Jul 2024 13:25:06 +0000
ROA not after:            Sat 26 Jul 2025 13:30:06 +0000
asID:                     834
IP address blocks:        74.120.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 10:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:33:f3:bf:e3:58:5e:c0:39:b5:aa:68:47:c3:53:6c:32:57:bb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Jul 27 13:25:06 2024 GMT
            Not After : Jul 26 13:30:06 2025 GMT
        Subject: CN=E861E96D77A01BE0C05D7635547E9DDBB714E55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:9c:03:e9:15:38:9b:99:19:4e:e4:e9:2c:
                    89:04:dd:73:ab:09:81:91:8e:05:e7:d6:a5:1e:ac:
                    fc:ca:3a:4f:3f:f3:c4:9a:6f:af:ab:14:20:12:3c:
                    f0:65:ff:60:f8:ce:32:0d:d9:ef:cb:9d:34:e3:3f:
                    07:65:39:c9:9d:31:03:a4:8e:63:a1:41:0c:4e:2c:
                    da:18:79:1b:67:ea:7d:78:df:9e:63:7c:7b:b8:b7:
                    63:fe:00:05:73:cb:8f:0c:52:a7:9a:28:11:e0:ea:
                    58:6c:5c:8c:0d:ab:5f:d7:e5:e5:2a:18:91:c6:73:
                    68:89:02:75:9d:94:ba:2c:55:85:6d:d4:73:86:40:
                    e3:aa:75:06:e3:9f:31:35:d4:d0:c3:c2:56:a2:d5:
                    e3:93:ff:7d:02:68:3a:f4:d3:d5:f2:22:84:67:30:
                    48:b0:6f:6b:06:65:d5:2a:8a:a6:37:94:ed:5e:22:
                    93:6a:9c:82:8a:38:d7:e9:18:33:2d:40:50:21:d5:
                    72:09:e1:e9:7c:8d:3d:64:0c:ef:8f:13:a9:fb:cd:
                    04:fb:01:b2:b3:36:9d:99:97:3a:a2:60:a5:e8:f2:
                    f2:96:8d:ce:45:25:68:83:84:90:d2:3e:12:b6:4b:
                    6e:0d:f3:4b:b0:11:52:2b:7f:e0:93:63:64:5b:e8:
                    19:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:E9:6D:77:A0:1B:E0:C0:5D:76:35:54:7E:9D:DB:B7:14:E5:5B
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:66:e9:bf:7c:d6:20:df:96:cc:58:d2:b4:8c:a8:d4:58:
         97:a5:e1:b6:fb:5a:ab:14:a3:df:56:1d:01:43:0a:e7:4d:f8:
         1c:04:19:04:b7:e9:37:f1:5c:5b:14:c9:a4:4d:fa:4c:85:53:
         d6:ef:ed:e4:01:b8:c1:c6:22:e8:4b:7f:52:e0:20:fa:93:80:
         fc:a1:fd:f4:46:1b:bc:e5:61:7e:d2:ce:7f:3d:0d:f6:1c:dc:
         0c:c2:67:8f:de:c5:2b:22:4f:48:bf:aa:21:b8:99:22:b6:ab:
         80:a9:a9:27:65:de:42:ff:ad:02:13:38:2f:9a:9f:5e:9c:18:
         a3:04:93:05:6c:78:db:c2:54:c4:57:72:90:48:b1:62:ce:83:
         74:7c:9b:a7:ec:5c:97:24:58:57:50:b8:48:6d:41:26:ce:15:
         c8:30:77:52:b0:4d:f8:70:1c:61:58:6e:12:b8:9c:59:02:59:
         2c:73:51:df:9f:91:56:38:53:a7:b3:70:80:f7:e7:61:b0:37:
         22:d5:8f:c2:e6:a4:84:3e:ee:f8:28:cf:9f:5f:2e:3b:5e:3a:
         92:d8:d3:4c:0c:1f:65:8c:d6:fc:9d:b3:0f:25:96:f4:e6:85:
         28:3a:e5:16:bd:bd:1c:fe:2e:8e:4b:ec:03:88:ed:16:97:2e:
         c8:ad:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----