Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3231302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          VcVejdk+UsFaCPdgwtuJyrWobE85tqeak1PEOsk5aMk=
Subject key identifier:   D4:A5:B3:83:98:5E:5C:AD:5C:01:A2:0B:3F:9F:9D:84:66:08:2A:E0
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       5304D6B890ADB4C9F25DE89FF48B9D3BE8B594C0
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e20383334.roa
Signing time:             Thu 19 Oct 2023 08:30:15 +0000
ROA not before:           Thu 19 Oct 2023 08:25:15 +0000
ROA not after:            Thu 17 Oct 2024 08:30:15 +0000
asID:                     834
IP address blocks:        104.254.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Dec 2023 17:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:04:d6:b8:90:ad:b4:c9:f2:5d:e8:9f:f4:8b:9d:3b:e8:b5:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Oct 19 08:25:15 2023 GMT
            Not After : Oct 17 08:30:15 2024 GMT
        Subject: CN=D4A5B383985E5CAD5C01A20B3F9F9D8466082AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:c2:4c:28:cc:fe:39:aa:04:36:33:50:25:
                    48:d6:84:b3:70:9f:35:e7:e1:65:ad:6d:c2:84:ae:
                    aa:06:5b:9d:44:86:00:cf:9d:7c:15:7d:77:b1:a2:
                    67:2c:d0:20:e3:a2:ac:f4:2e:c1:59:96:90:b3:37:
                    d2:94:e1:fe:50:8f:1d:53:bd:e9:de:3d:b0:31:a6:
                    fd:6d:e4:59:83:2b:24:2d:9b:c2:b5:0d:34:fd:54:
                    ba:83:ce:29:53:7b:6e:6a:69:c6:e7:d6:90:aa:01:
                    b2:1c:ea:1f:c4:e0:7c:3f:6e:e3:28:fd:8e:9c:40:
                    36:7e:2a:27:1e:e1:87:e8:ce:b9:49:de:2f:2d:ae:
                    de:9c:dd:75:5f:d1:2a:ad:b7:32:79:a0:51:11:cd:
                    ed:8a:e9:a9:ad:23:27:83:1d:a9:27:49:32:98:56:
                    5a:e5:9e:90:85:40:5b:c8:1d:87:8f:52:dd:ea:3d:
                    92:7f:9c:36:3e:dc:8b:1e:0e:68:b6:d8:89:4e:f8:
                    e8:ed:e1:c9:34:2d:5f:12:a4:51:a9:9e:c1:db:6f:
                    65:4e:b7:0a:61:27:ce:e3:75:87:1a:e3:3f:d1:43:
                    7a:89:d5:79:8b:f9:d7:53:3f:40:e3:11:30:10:80:
                    1c:12:1c:06:b8:ef:4c:8b:82:17:24:5e:a0:10:82:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A5:B3:83:98:5E:5C:AD:5C:01:A2:0B:3F:9F:9D:84:66:08:2A:E0
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:e8:bf:ac:11:fa:45:66:51:6b:42:09:2c:aa:4a:27:69:
         19:0b:7b:7b:9b:72:7c:4f:c2:f0:4c:94:1f:2c:4b:a7:12:12:
         da:36:f1:1a:2b:06:d6:9c:cd:68:d7:b1:54:fb:2b:35:37:de:
         2e:96:44:42:4e:e4:41:2b:66:58:3a:06:80:d9:8a:0b:3a:d6:
         bb:43:4b:1b:34:15:30:13:73:de:e6:7e:12:5b:b4:aa:ed:e1:
         2d:2d:9c:69:d3:c9:c6:a7:b4:e5:b4:82:06:f1:97:58:13:c5:
         10:3d:48:11:d4:40:84:18:e6:2d:90:e9:7c:43:bf:8d:86:61:
         21:4f:f1:ac:7e:08:59:37:66:25:2b:49:c2:cf:bf:7e:f2:ff:
         d0:88:14:b0:fd:08:8c:47:63:c9:8e:52:51:12:d6:6f:8a:36:
         51:5f:0d:75:43:dd:34:f2:35:b4:fd:42:7e:dc:62:bc:9c:4e:
         27:18:79:7f:89:b7:4a:36:96:9c:8d:66:5b:4b:4e:0f:a1:7b:
         6c:2e:53:d6:2e:c4:52:9b:5d:c7:3a:00:26:a6:21:b8:f3:aa:
         83:eb:33:c5:84:87:76:ca:85:ca:84:f4:b0:86:d5:c0:24:04:
         2d:ff:74:dc:0a:7a:f0:f9:de:59:97:07:5f:35:9e:f9:5f:eb:
         a4:20:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----