Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203631333137.roa
File:                     3130342e3235342e3231302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          l7l1LHumoAK/gY7l41PnbtgNn+1G+MbUu5qu2hPSgvM=
Subject key identifier:   8B:5E:6E:C6:2B:D5:C6:6A:57:26:AC:2C:48:0D:9B:40:BA:92:AF:8B
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       5F02E11BE813D21DF1FAE79FF1B70BA21139C95E
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203631333137.roa
Signing time:             Sun 30 Jul 2023 08:13:45 +0000
ROA not before:           Sun 30 Jul 2023 08:08:45 +0000
ROA not after:            Sun 28 Jul 2024 08:13:45 +0000
asID:                     61317
IP address blocks:        104.254.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 13 Aug 2023 10:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:02:e1:1b:e8:13:d2:1d:f1:fa:e7:9f:f1:b7:0b:a2:11:39:c9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Jul 30 08:08:45 2023 GMT
            Not After : Jul 28 08:13:45 2024 GMT
        Subject: CN=8B5E6EC62BD5C66A5726AC2C480D9B40BA92AF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:c7:bb:81:e8:3c:a2:65:3f:bc:b6:41:a8:
                    dd:c7:1a:a8:55:35:12:d5:7d:5a:1d:f8:d9:a4:8a:
                    52:19:0e:49:67:c5:6c:c5:39:f7:30:45:75:90:b0:
                    a4:94:39:f1:8b:2d:13:a8:45:91:fa:98:75:93:69:
                    96:ec:c2:db:64:3f:5b:21:1f:4c:d6:1b:f2:03:fc:
                    dd:62:ca:fe:d5:ba:ed:d9:a4:5b:91:de:8c:06:9d:
                    6a:0f:16:69:b5:f5:db:1e:15:9f:76:99:e9:33:c2:
                    06:94:b9:f3:28:ec:10:9c:40:da:eb:6a:35:9e:35:
                    5c:de:55:60:a1:c4:0b:9a:8d:6e:40:42:6f:bb:c1:
                    9c:23:76:28:35:f9:ce:6f:be:3b:6c:d6:bd:a6:00:
                    b9:95:3f:3c:b9:63:2f:38:23:ca:60:58:a6:20:c6:
                    78:e5:03:47:8a:5a:c4:8c:b3:72:ad:54:44:51:96:
                    4b:db:01:41:96:a6:75:e0:d7:d5:d4:68:85:a4:e8:
                    02:0e:7e:c0:22:1d:ad:8d:f7:b6:6d:71:1d:1c:4a:
                    b7:59:42:e8:95:d6:46:e8:0a:cf:50:16:86:e5:73:
                    4e:81:63:76:38:4f:ac:c8:c2:65:46:56:95:48:29:
                    de:1b:bd:0d:f0:df:db:17:c0:55:a4:ae:51:80:9c:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5E:6E:C6:2B:D5:C6:6A:57:26:AC:2C:48:0D:9B:40:BA:92:AF:8B
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:31:88:81:04:a1:e4:8a:25:e3:3e:f6:5a:0a:5e:c5:d4:b2:
         dc:02:2b:95:84:16:f5:a9:00:a6:88:91:70:c8:54:51:b5:9e:
         98:8d:d4:3e:8c:0a:ce:3e:bc:61:d1:ff:e1:6f:d5:b8:5a:85:
         b7:09:ef:03:ef:ed:ab:66:2e:38:6b:12:34:ec:c2:a3:76:b5:
         97:06:65:e2:79:c2:3d:ff:12:e3:3c:92:0e:d9:d7:40:da:d9:
         8c:5e:3e:17:42:36:f2:30:1d:dc:48:e9:14:13:cc:83:ef:5e:
         7f:50:7c:6b:bb:7a:85:a3:ee:fc:e0:00:76:e9:c5:a5:fb:3a:
         12:5a:e0:95:84:b8:dc:f3:60:ff:d9:96:40:11:35:91:1d:9f:
         1d:70:e3:42:35:ba:b8:ae:ba:1f:27:79:59:d4:d9:28:f3:3e:
         62:3a:c4:b1:a7:f8:1a:a1:1f:3a:1f:52:fb:94:0c:57:99:aa:
         d6:d9:5b:30:46:21:fd:5f:53:d8:86:8a:72:2b:4e:71:88:4e:
         91:0a:e9:a4:36:f4:53:20:c9:6e:4f:c0:c6:fd:ab:13:c8:3b:
         4c:9f:64:3f:01:ba:8f:e3:f1:79:40:0a:23:75:5e:ec:7c:d8:
         03:19:cf:2e:fd:7c:1f:81:5b:22:f1:f2:02:0a:7b:a2:0e:73:
         a6:d9:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----