Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          MEWyGG+RqiZf6Jm2bFw7g1TGZuWCqVShqOgxMBAGnOw=
Subject key identifier:   83:C1:2A:BC:94:95:A0:03:E8:F7:52:45:F5:C3:4F:28:A0:B2:53:68
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       3489C21D272D5E7886DB9C27742487F723D19DDD
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa
Signing time:             Sat 26 Oct 2024 00:01:24 +0000
ROA not before:           Fri 25 Oct 2024 23:56:24 +0000
ROA not after:            Sat 25 Oct 2025 00:01:24 +0000
asID:                     834
IP address blocks:        74.120.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 19:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:89:c2:1d:27:2d:5e:78:86:db:9c:27:74:24:87:f7:23:d1:9d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Oct 25 23:56:24 2024 GMT
            Not After : Oct 25 00:01:24 2025 GMT
        Subject: CN=83C12ABC9495A003E8F75245F5C34F28A0B25368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:52:44:63:f3:94:32:a9:fc:ab:b8:25:87:
                    1c:49:87:9a:4a:92:67:f9:90:ac:6f:fd:70:a7:67:
                    1c:61:8e:19:84:e3:35:e3:c0:4e:e3:5c:f2:2d:b7:
                    73:f1:2c:f6:77:eb:e7:3c:37:5b:20:80:f9:4d:4f:
                    6e:fd:5d:1d:8a:88:2b:67:b7:29:9d:be:42:7c:10:
                    cb:92:95:06:10:41:5b:11:72:73:32:15:b2:ee:99:
                    2e:1d:e6:a5:64:ea:1f:2d:f1:33:d8:28:3b:0e:4a:
                    f6:32:e1:68:5b:dc:5c:59:fd:83:65:3c:36:12:68:
                    a1:6c:50:9b:a6:a8:26:e6:7c:e2:a2:49:80:cf:11:
                    e9:a7:81:37:e9:4c:f0:0b:37:d8:74:a6:c1:e3:1b:
                    4d:61:cc:57:25:11:bd:cd:ca:07:e2:fc:0c:87:8c:
                    5f:86:33:7b:9f:5c:77:8d:08:6f:77:4b:18:b1:00:
                    38:17:06:ae:a2:5c:b2:6e:fb:96:62:81:6d:4f:97:
                    5c:aa:dc:34:95:0d:8f:fc:aa:0c:ed:50:75:00:dc:
                    81:34:1e:e1:bd:5e:a2:02:e1:48:91:b8:ec:8c:95:
                    0b:00:d8:cb:1e:28:e8:e8:6a:eb:18:c1:c5:76:f6:
                    9e:7e:24:0f:0c:14:c6:17:46:2b:9c:74:4c:97:7f:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C1:2A:BC:94:95:A0:03:E8:F7:52:45:F5:C3:4F:28:A0:B2:53:68
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:2f:4a:c9:fd:86:bf:e3:93:5a:f6:16:4a:f6:aa:f0:5f:
         cd:a6:70:b1:fe:ad:88:16:e8:a1:75:eb:4a:91:4f:75:5c:2f:
         b9:80:ef:d3:3a:6f:b7:90:af:33:5f:d8:da:6c:71:64:2a:14:
         c5:2c:b0:f5:06:a8:05:2f:81:b7:e7:22:7d:04:9d:48:32:d0:
         dc:57:39:4e:49:87:43:65:0c:c7:98:6a:e8:07:13:d6:31:5d:
         43:8b:44:e0:e3:ea:a8:d1:df:6b:d8:b1:3d:bf:77:e2:51:db:
         e6:3b:e7:5a:cd:98:4d:a1:c8:3d:1e:f2:a9:99:7f:12:d1:a8:
         4f:2f:94:fe:2b:5d:81:cd:5d:f9:ed:82:e0:17:22:50:65:c3:
         86:26:ce:07:3e:0b:b2:14:b2:2f:c4:30:a1:6e:35:3a:ac:d5:
         8e:9c:2b:f6:c2:4d:d4:f9:4e:2c:3c:85:93:29:92:f7:94:e6:
         e2:f0:23:90:06:cf:f6:28:3f:2e:ee:2c:3b:61:13:c5:01:85:
         d8:59:3e:ab:90:d5:87:d2:79:e9:4a:0f:83:16:2d:2c:d2:10:
         a4:46:90:2c:d2:d1:ab:52:ef:fb:1d:13:3e:09:0e:38:05:c6:
         82:8b:40:7a:44:0e:91:a6:3b:38:bd:ed:9b:10:cb:2d:c8:dd:
         9e:f9:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----