Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e203139303039.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e203139303039.roa (raw, json)
Hash identifier:          QPcRUJ0/rI5I82nrvqeNRgCGi8XUiwD9HFe7itlmD7c=
Subject key identifier:   3F:DD:93:21:4D:F0:A0:91:67:65:88:F0:F0:B3:D7:57:1F:D7:AF:FB
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       588411054B2D2E6E45460774A4E299E29B491450
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e203139303039.roa
Signing time:             Fri 22 Dec 2023 20:01:12 +0000
ROA not before:           Fri 22 Dec 2023 19:56:12 +0000
ROA not after:            Fri 20 Dec 2024 20:01:12 +0000
asID:                     19009
IP address blocks:        74.120.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 12:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:84:11:05:4b:2d:2e:6e:45:46:07:74:a4:e2:99:e2:9b:49:14:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Dec 22 19:56:12 2023 GMT
            Not After : Dec 20 20:01:12 2024 GMT
        Subject: CN=3FDD93214DF0A091676588F0F0B3D7571FD7AFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:fa:f4:95:59:c2:c9:9f:20:48:f1:f2:8c:
                    60:e2:0c:ba:92:6b:2a:db:3d:49:c0:11:a3:1f:25:
                    c4:9e:8d:50:7b:c2:b3:3a:4c:9c:d2:f3:f8:c5:88:
                    57:e3:df:31:c8:35:b9:92:07:82:e4:28:88:7d:cc:
                    07:3a:ac:39:1e:d6:4c:d4:4b:2b:75:0b:78:3c:b6:
                    27:32:8e:54:dc:7e:a5:c0:5c:69:4d:b0:5e:a4:33:
                    7b:e3:9b:c2:d2:29:09:a9:9b:5c:90:c6:e3:2b:c1:
                    6b:aa:ed:9a:cd:d3:cc:d8:7d:3e:cf:a6:8d:7a:7a:
                    38:fe:c9:b9:8a:e6:78:11:d5:d6:ad:f7:32:f0:53:
                    d9:85:60:5a:b1:0d:bb:6e:69:98:52:ff:32:f4:14:
                    dd:ea:91:28:5e:43:0f:aa:d2:37:cf:59:ad:0f:84:
                    c1:d7:3c:dc:e0:db:bb:ee:da:c0:41:05:5c:cc:d7:
                    ff:31:1a:78:11:e3:a1:59:eb:22:94:d9:7a:85:95:
                    10:56:c0:6b:36:ff:4f:fc:77:39:70:bf:ba:f8:7b:
                    1f:21:97:3f:18:1f:fe:e9:f6:85:c2:8d:65:2b:5d:
                    1c:c7:8c:e3:c2:97:12:6e:1b:c6:94:17:e3:eb:f3:
                    1d:3a:0e:a3:de:74:45:ca:e2:1e:3e:e3:76:bf:66:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:93:21:4D:F0:A0:91:67:65:88:F0:F0:B3:D7:57:1F:D7:AF:FB
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e203139303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:39:0d:05:06:7b:f0:6c:4e:36:ac:1d:49:f9:3a:a2:61:99:
         94:51:49:8c:b4:49:5b:0f:1e:c7:fa:71:b9:d9:06:b5:f7:e2:
         18:35:b1:6f:6b:b4:3b:c7:ec:1d:31:ce:78:81:a6:a0:a8:2b:
         94:32:00:27:f5:ea:79:3e:37:7e:b7:5a:6f:33:7d:80:c1:f6:
         5b:08:ee:0d:89:59:3d:a3:3a:46:2a:ac:60:e1:a3:8f:79:da:
         2c:d4:c5:20:3c:e8:50:9f:4a:a2:cc:15:a4:14:d7:67:e1:a5:
         77:02:9f:14:c8:23:7e:f8:a8:97:57:bd:c7:1b:3f:73:f0:0b:
         e8:aa:d6:3b:4b:eb:37:10:da:95:de:6c:d6:a1:da:a2:c5:a7:
         a5:8c:e6:25:c0:89:6a:be:93:59:e0:f2:5a:2e:b6:c0:85:a1:
         61:39:85:58:96:ac:91:20:94:ea:ca:b6:79:b9:6e:d7:64:aa:
         6d:a5:9f:2a:11:dc:5a:ab:a0:68:4e:97:88:2c:e8:26:b9:16:
         c7:a2:c0:13:98:71:d9:4b:d5:50:5f:aa:58:eb:60:ab:0d:54:
         ea:98:83:60:d9:40:fc:2e:b6:dc:34:44:3e:78:65:1a:1a:d2:
         da:19:a9:41:43:8c:e3:41:a4:a2:0d:2e:3b:6b:00:76:73:12:
         6d:44:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----