Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          2D9loc3aLXV6wuNHHZFG0V3dOmws9C2JJIZSGX31tHE=
Subject key identifier:   02:88:F5:A2:7F:1A:FD:06:74:24:87:5F:DA:C7:75:17:7D:5F:57:E0
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       083EC325B278B90D2137A7773718EF0F72836D5B
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa
Signing time:             Thu 19 Oct 2023 08:30:11 +0000
ROA not before:           Thu 19 Oct 2023 08:25:11 +0000
ROA not after:            Thu 17 Oct 2024 08:30:11 +0000
asID:                     834
IP address blocks:        104.254.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 30 Nov 2023 18:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3e:c3:25:b2:78:b9:0d:21:37:a7:77:37:18:ef:0f:72:83:6d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Oct 19 08:25:11 2023 GMT
            Not After : Oct 17 08:30:11 2024 GMT
        Subject: CN=0288F5A27F1AFD067424875FDAC775177D5F57E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:be:4a:ac:03:e0:c8:a1:40:d7:92:36:7a:
                    ad:8d:b8:f0:e7:70:e8:8a:33:76:91:72:6f:c0:4d:
                    d0:9c:1b:10:cc:ac:d5:89:8f:a3:d5:08:e7:7b:b3:
                    d4:88:c7:75:54:16:b8:d8:09:1b:5e:34:5e:6b:c0:
                    c3:52:cd:2e:0b:8f:c8:47:9a:76:c3:c8:01:d1:5e:
                    bf:2b:de:39:e1:ee:54:8e:b5:eb:22:c4:96:05:f2:
                    e0:65:12:67:23:d5:08:18:5d:3c:e1:09:f9:c1:34:
                    85:f5:90:e0:a9:9d:c4:10:4f:c5:04:c9:8a:64:b1:
                    a9:11:00:d7:71:5c:8a:f9:b9:c4:78:2e:9f:a1:87:
                    36:a9:35:39:1e:88:55:41:f4:f2:57:a7:78:d7:58:
                    a2:a0:f8:e2:41:fc:7e:df:0a:8d:4e:9f:01:37:62:
                    e7:65:36:49:b6:f4:3c:32:d4:f9:40:9b:8b:c6:0f:
                    32:6d:74:eb:24:93:0f:88:02:fe:cd:17:6a:12:54:
                    27:3a:8f:1c:2a:37:e2:68:e2:75:a4:6f:63:e7:15:
                    61:d3:8e:6c:be:92:90:51:8a:60:6a:76:45:ad:5f:
                    5b:31:a4:ee:c6:7e:93:9e:ef:46:9b:90:46:5b:ca:
                    ab:42:f2:59:0f:db:5f:9a:38:5a:55:21:e2:5d:37:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:F5:A2:7F:1A:FD:06:74:24:87:5F:DA:C7:75:17:7D:5F:57:E0
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:6b:1f:ae:c2:a0:37:04:61:84:32:19:33:c8:6a:da:12:
         30:74:13:ad:38:20:c9:23:d5:3c:b9:89:4e:04:4f:05:7f:bd:
         7c:fd:0c:45:8d:90:90:35:21:54:44:96:c1:ea:bb:cf:83:fc:
         cd:1f:ce:90:21:df:60:ba:35:77:a5:b3:35:ad:ed:99:2f:fa:
         a5:a8:1e:83:7e:33:20:6a:34:09:1f:1f:2b:81:46:5f:4c:f9:
         24:c7:55:98:22:1a:f8:75:c6:50:66:59:67:58:3d:01:03:fd:
         3a:7e:99:68:15:fa:2e:a6:10:10:a4:f0:a0:c9:dc:03:d5:c8:
         88:2b:93:75:25:06:4d:f3:63:df:46:e8:e8:91:9b:02:dc:e0:
         72:99:a1:17:f6:f3:4d:8f:2b:2a:e6:e2:c1:d1:73:fa:bb:3c:
         c7:cc:5b:a2:d6:b2:87:08:d0:0f:90:65:96:4f:e0:f7:3c:0f:
         ef:07:97:fe:c8:33:ee:b7:e8:7b:9e:24:35:a3:d7:de:d4:eb:
         63:09:2c:99:21:f9:3f:19:71:0e:1a:c7:b4:31:e1:96:a9:a5:
         ad:9b:40:96:bd:25:ad:a6:29:2f:68:bf:6c:96:03:59:51:d3:
         7c:4b:8c:3e:65:20:06:89:2a:95:b5:9f:c2:68:d6:2b:86:17:
         d4:a2:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----