Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Xeli/H9Z6NMZ/L4mtWRjKS6aKRGdJi9oGtUJv2VNd04=
Subject key identifier:   34:68:3E:8B:7F:FD:5A:87:48:21:6F:81:8B:A9:8D:E8:03:C2:1B:0B
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       1BC06860868985392ADCE3FCB302C493EE49C8EE
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20383334.roa
Signing time:             Thu 19 Oct 2023 08:30:13 +0000
ROA not before:           Thu 19 Oct 2023 08:25:13 +0000
ROA not after:            Thu 17 Oct 2024 08:30:13 +0000
asID:                     834
IP address blocks:        104.254.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 30 Nov 2023 18:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c0:68:60:86:89:85:39:2a:dc:e3:fc:b3:02:c4:93:ee:49:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Oct 19 08:25:13 2023 GMT
            Not After : Oct 17 08:30:13 2024 GMT
        Subject: CN=34683E8B7FFD5A8748216F818BA98DE803C21B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:08:6b:05:f4:93:0e:6d:b2:be:91:b7:f7:
                    0d:ca:9a:98:d3:80:3d:da:0c:b7:2a:69:fa:eb:25:
                    73:9d:1e:dd:5a:d2:77:c6:c4:97:1a:4b:ea:52:50:
                    5b:72:8a:f9:8d:40:3c:b9:33:51:f9:fb:47:b8:93:
                    62:4a:6a:71:47:f9:c9:1f:57:15:28:6d:24:4e:d7:
                    7d:95:8e:c3:dd:f0:5c:ad:6f:1a:0a:27:da:98:5b:
                    5d:ac:b3:c7:55:53:86:76:f2:4d:3e:3f:3d:73:1b:
                    a5:6c:b4:2c:89:48:e3:6d:26:55:ea:76:82:e1:12:
                    cf:ef:39:b9:79:56:d6:d4:91:06:c9:bf:f2:89:06:
                    df:ad:80:71:8b:d8:21:e6:40:87:b2:8c:1a:6b:22:
                    d0:cc:ad:75:2b:79:fb:a1:0b:35:32:e8:4c:cf:35:
                    38:eb:8a:42:a2:f4:df:79:f1:17:e0:6f:d5:5c:2c:
                    2d:54:f5:fd:85:c7:57:16:54:6f:36:a1:d5:23:ab:
                    d5:e9:0c:2e:16:ff:55:34:ba:d6:52:9a:c3:e9:7b:
                    b2:d3:de:1f:0f:f5:3d:c7:96:13:6c:48:58:3d:b8:
                    f0:30:21:2f:f5:ea:00:f4:8e:78:e4:c8:b8:35:60:
                    a3:19:a1:8b:2a:a2:3a:91:52:ef:3e:c4:b3:27:fb:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:3E:8B:7F:FD:5A:87:48:21:6F:81:8B:A9:8D:E8:03:C2:1B:0B
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:44:c2:ac:c2:92:bb:e0:7b:ce:37:ca:ee:6d:9e:14:06:aa:
         bb:bf:3a:ab:6a:e4:70:79:b8:41:4d:1a:0a:d6:81:98:ae:74:
         d1:8c:f4:7b:4c:89:cc:fe:54:61:63:d2:b3:c6:2d:09:16:82:
         21:82:58:50:79:38:35:72:bd:47:ac:75:71:6c:a3:7b:b1:ee:
         ec:2d:b6:51:5c:09:3e:85:89:8d:dd:af:5b:d2:3b:f5:e8:fa:
         8d:1f:ac:56:1f:13:c5:9e:07:0c:e6:cf:2d:b7:62:b7:95:4b:
         2c:68:fd:1a:64:0f:a3:2e:f0:d7:c0:20:eb:e1:34:96:48:6d:
         ed:2a:34:05:f3:d9:e4:2b:64:cc:3b:c3:77:ce:a9:f8:06:4a:
         d0:63:f2:44:81:c3:f3:fa:84:98:b1:d7:4e:4e:f1:bd:21:8f:
         2b:52:e6:c5:db:f3:5b:73:dd:ae:b6:31:1c:f5:6e:36:62:ee:
         19:f4:6c:da:db:3d:9e:bc:9c:58:d7:91:c5:fe:27:a4:b6:71:
         19:41:47:e6:2e:59:10:6f:ed:e2:24:c5:2c:7c:40:d2:ce:c7:
         3c:9f:c0:1b:d6:f5:2d:fd:76:88:12:df:58:61:d8:16:48:85:
         d7:cb:af:e6:13:26:70:94:d0:5a:8f:55:28:1f:f5:1c:f2:02:
         25:cd:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----