Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          N+mNizm3KxtDHIdnEBELPaDgDXvXcFC92WIC1RxcfyI=
Subject key identifier:   A4:C0:5F:C2:15:05:EB:14:C0:BA:FE:D4:EF:1A:17:AD:81:44:7D:BB
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       7F92DB0667760CDBA26E34336DD2C89F877251A3
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 01 Aug 2024 00:03:17 +0000
ROA not before:           Wed 31 Jul 2024 23:58:17 +0000
ROA not after:            Thu 31 Jul 2025 00:03:17 +0000
asID:                     834
IP address blocks:        74.120.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 08:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:92:db:06:67:76:0c:db:a2:6e:34:33:6d:d2:c8:9f:87:72:51:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Jul 31 23:58:17 2024 GMT
            Not After : Jul 31 00:03:17 2025 GMT
        Subject: CN=A4C05FC21505EB14C0BAFED4EF1A17AD81447DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:b8:be:1e:da:c0:d4:06:d8:73:5d:82:19:
                    e3:b7:0d:4a:00:36:ad:78:e3:13:8a:9d:67:87:37:
                    c8:6d:2e:b4:4a:97:1d:2a:71:74:52:61:5c:c8:9e:
                    04:39:da:69:a4:8e:6a:30:91:7e:7e:e3:60:4e:4d:
                    51:11:b4:09:e5:51:5f:01:bd:e6:1b:fe:51:30:60:
                    c5:5d:95:06:4f:8a:da:17:49:fa:44:47:54:9a:cd:
                    43:a0:1c:75:94:dc:c2:d4:d3:c2:31:0c:51:f9:72:
                    f2:2a:80:ec:30:a9:ae:03:bf:48:e3:5f:5f:58:4d:
                    cd:88:21:ff:70:62:7c:83:0d:93:06:53:c7:0f:30:
                    e0:f0:f2:21:7e:0d:67:d6:54:43:3e:ad:8c:e6:b1:
                    23:e7:90:b0:8d:81:cd:6f:0e:0f:67:42:a3:2c:e5:
                    13:57:f8:10:43:45:2f:f6:28:0e:f6:d0:6a:bf:8d:
                    41:8f:49:de:c0:14:f4:16:7e:fd:4a:18:07:d6:d6:
                    0a:3e:14:d8:d2:89:a3:18:7a:3f:2f:f4:70:72:5e:
                    7c:9c:c1:8d:4a:fd:56:ce:45:9c:14:07:6d:65:d9:
                    21:2e:37:c6:c3:e0:42:d5:de:64:fd:35:33:0e:e4:
                    44:68:ee:0f:3b:df:48:9a:90:e8:38:24:f4:8e:2c:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C0:5F:C2:15:05:EB:14:C0:BA:FE:D4:EF:1A:17:AD:81:44:7D:BB
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:04:64:f8:6e:8f:bf:b4:dc:38:42:4c:21:08:7c:8a:15:69:
         72:84:01:e8:7a:d2:07:57:b7:17:56:eb:b5:92:2f:16:4f:c8:
         89:b5:63:34:b2:90:43:0f:0d:ef:b9:5d:ae:2f:c8:eb:bb:24:
         1f:c1:71:e3:2d:5d:8c:64:65:fe:e9:ba:91:3e:f7:fb:80:d2:
         57:24:f1:ce:3b:fc:bc:00:16:05:5a:88:07:e8:05:59:f5:fc:
         d7:b8:a0:85:ad:da:12:f5:52:c0:d5:f7:63:32:dc:06:8a:ab:
         6d:52:2c:ad:9e:d9:4a:5c:e3:a8:38:39:8a:b1:e7:dc:ee:12:
         a0:57:36:fd:91:5b:0e:dc:45:4d:7c:db:a9:22:35:ef:ff:ee:
         11:6c:2c:57:61:06:62:0b:db:bb:64:e0:9d:f2:1c:26:e6:0e:
         a7:48:52:90:b6:57:60:5f:1d:7d:d0:28:35:91:7d:a4:1b:8b:
         5c:f9:26:ff:79:0e:74:56:cc:0e:10:c3:fd:b5:b1:6a:66:af:
         5d:13:31:ed:43:13:22:e3:f8:75:4e:26:8e:a1:04:e3:15:b8:
         f6:bf:1b:2d:59:19:fe:65:69:05:8a:76:0c:30:6e:4d:f2:04:
         65:a2:03:ba:c5:7d:59:ff:32:e3:61:8c:b5:7f:b2:7c:47:c2:
         7d:d2:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----