Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20333933343439.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e20333933343439.roa (raw, json)
Hash identifier:          bTMY29p9mNKzG9rJY1wnj0ewaCoYTlJx79F/wcNSWos=
Subject key identifier:   E0:61:13:98:79:B3:81:37:17:5B:BE:E1:84:68:69:FC:3F:9E:97:56
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       19C9167D51E3AC24AA9E6F0EA6DF9592DAD7F73E
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20333933343439.roa
Signing time:             Fri 22 Dec 2023 20:01:12 +0000
ROA not before:           Fri 22 Dec 2023 19:56:12 +0000
ROA not after:            Fri 20 Dec 2024 20:01:12 +0000
asID:                     393449
IP address blocks:        74.120.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c9:16:7d:51:e3:ac:24:aa:9e:6f:0e:a6:df:95:92:da:d7:f7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Dec 22 19:56:12 2023 GMT
            Not After : Dec 20 20:01:12 2024 GMT
        Subject: CN=E061139879B38137175BBEE1846869FC3F9E9756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:4c:56:5c:3f:f0:c9:bb:7e:3f:23:c9:e4:
                    15:20:04:fd:33:35:c6:49:28:46:6f:5b:f2:eb:1d:
                    37:2e:20:39:7c:6a:bd:76:1e:b0:28:e6:b9:3a:f0:
                    a4:9b:3d:db:47:ae:25:9e:65:8e:79:df:67:9c:d1:
                    55:73:02:85:29:b7:f4:57:08:d8:d4:48:2e:f7:ff:
                    7b:59:22:b8:30:64:ef:0f:97:88:44:8f:77:ee:b7:
                    7f:cd:02:52:ed:c7:b1:8d:1b:00:7d:fe:57:28:be:
                    03:83:d8:b0:aa:fc:71:45:12:77:e8:84:2a:7b:cf:
                    5a:37:cc:09:fe:1e:82:32:d2:61:1b:16:c2:50:97:
                    27:5e:43:fc:a6:bf:ea:70:b4:66:54:3d:2e:44:fc:
                    95:64:ad:e1:a5:7c:09:20:73:0f:5b:51:47:8c:28:
                    05:41:75:ea:24:c0:8e:e5:86:14:6d:2b:8a:83:8e:
                    bb:c0:13:fe:2a:d6:5d:11:b4:0c:66:56:07:e7:c5:
                    9f:89:59:a4:b3:d3:91:7b:1a:fa:69:1b:9c:7a:15:
                    28:7f:21:2f:71:f6:ed:c5:cf:93:fc:3b:29:bc:ff:
                    37:17:e9:db:7d:1d:0c:e3:5d:55:0c:cd:97:8f:35:
                    3d:6e:a0:02:7c:a7:d6:26:db:6e:d3:f4:a0:64:bf:
                    35:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:61:13:98:79:B3:81:37:17:5B:BE:E1:84:68:69:FC:3F:9E:97:56
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20333933343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:f2:a5:fb:07:0c:bb:d6:a7:ff:21:cf:6d:4f:5c:da:77:1d:
         1d:f3:f2:1b:08:97:e8:65:8d:43:88:6c:ff:22:c1:1d:5e:2e:
         1c:b2:dd:37:55:ec:3a:4d:0f:eb:e9:69:b2:ac:73:0a:4f:99:
         56:ac:24:19:d9:b4:09:2d:c7:34:ef:1f:0a:75:cc:6d:4a:2b:
         96:28:1a:1b:9b:b5:7f:59:f8:3a:50:e9:18:50:86:3f:7c:ea:
         ff:91:71:15:b7:93:d4:c1:1e:1e:d2:08:13:53:9d:86:b5:8a:
         98:bc:64:9f:30:c2:87:c6:26:9c:a1:46:1f:62:dd:ee:d3:eb:
         05:ce:f5:3c:5a:62:65:32:ef:cf:45:80:ac:64:34:73:1f:75:
         58:45:16:4f:86:ba:a4:5e:9d:22:87:6e:f3:53:05:3d:be:64:
         58:36:85:40:bd:b9:0c:9c:6f:b9:b8:9f:44:a8:f4:9b:c4:f5:
         78:66:46:45:6b:1c:3c:1e:21:f7:ad:7e:25:d7:9e:3f:48:74:
         6f:62:35:85:22:2d:05:74:0c:55:5a:8a:8b:56:d2:36:ae:75:
         6f:99:92:09:99:9c:76:e7:b6:63:82:23:f4:12:3a:06:71:73:
         31:80:d5:be:d3:f0:fe:b7:3b:89:d4:6f:66:5c:b1:80:dc:86:
         b0:fd:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----