Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e20393936.roa
File:                     3230342e31342e37342e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier:          Nmb49t+gA5vff0BC3uvu5iqCJoC6glk60yAvf48yJ4Y=
Subject key identifier:   D3:BA:DB:B1:48:E0:76:CD:C2:93:74:A0:D2:FA:7D:C0:C4:0F:DD:45
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       448228D0C17423B6C0F506C6D39A6F18D742D60A
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e20393936.roa
Signing time:             Thu 10 Oct 2024 07:49:02 +0000
ROA not before:           Thu 10 Oct 2024 07:44:02 +0000
ROA not after:            Thu 09 Oct 2025 07:49:02 +0000
asID:                     996
IP address blocks:        204.14.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 15:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:82:28:d0:c1:74:23:b6:c0:f5:06:c6:d3:9a:6f:18:d7:42:d6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Oct 10 07:44:02 2024 GMT
            Not After : Oct  9 07:49:02 2025 GMT
        Subject: CN=D3BADBB148E076CDC29374A0D2FA7DC0C40FDD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:eb:1f:d2:f0:8b:d8:9e:63:b6:1e:81:dd:
                    f3:9f:c7:8e:fa:46:21:13:62:1a:34:35:d0:e0:a8:
                    5b:06:a7:7e:9e:a4:fd:80:87:43:05:56:a5:e7:5e:
                    f4:6a:0d:38:57:41:1c:e3:2b:cf:f3:ac:58:85:a6:
                    88:fe:36:6d:76:a2:6a:46:40:19:e4:9f:8e:1e:5b:
                    33:94:2f:a1:fd:92:b2:15:3d:86:e5:01:7a:4e:54:
                    df:5d:70:70:1a:91:76:85:3e:f9:76:c4:7c:3f:7e:
                    e5:70:9a:01:08:6d:81:d2:46:4b:f3:c2:c2:42:68:
                    f0:67:f8:cc:39:97:dd:e5:a5:6c:0f:61:dd:f1:fe:
                    d3:d4:33:e1:d3:dc:ba:d4:13:63:e9:f2:4e:7b:0b:
                    c2:9d:62:9e:ae:02:98:6c:ef:45:80:cc:a3:63:40:
                    ae:11:53:f2:f5:cd:84:ce:b8:e5:51:5c:2d:09:93:
                    de:10:e6:db:12:78:e7:f5:35:83:a7:52:2a:c4:70:
                    f3:b1:e9:d0:50:63:fa:41:bb:3f:31:9c:a4:01:bf:
                    6a:c7:cb:db:58:01:ed:85:28:d7:95:3f:02:45:4a:
                    4a:db:6e:ae:95:e0:12:6a:25:26:13:30:47:32:44:
                    55:6f:21:16:d6:ee:28:7d:af:10:52:ee:11:7e:fb:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BA:DB:B1:48:E0:76:CD:C2:93:74:A0:D2:FA:7D:C0:C4:0F:DD:45
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e20393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:a7:d1:c9:0c:60:fd:6d:17:3a:eb:4d:fd:d1:49:82:21:
         ce:79:5d:7f:de:f8:79:e2:94:7b:fe:1b:78:1c:68:0c:4f:00:
         13:ae:58:42:36:80:0c:14:c9:b4:3c:f1:ca:d3:27:f5:b6:a8:
         99:38:c0:4c:ef:49:32:4e:6b:62:d0:ca:eb:cc:4b:64:60:cf:
         e8:31:2e:05:49:cd:30:eb:82:bf:3a:d9:7a:1a:11:31:e3:6b:
         52:64:ac:1b:a4:a9:e0:ed:d3:7b:49:11:25:7e:45:54:46:b1:
         58:43:b8:dc:53:bf:0c:65:6c:70:93:e3:b5:ff:a8:37:49:7e:
         2e:18:cc:67:a2:49:77:e2:26:55:73:10:51:3a:13:40:1e:35:
         cd:23:ab:fc:08:0a:af:41:c9:86:c8:2f:74:97:1b:27:84:bd:
         8a:bb:26:86:79:96:76:13:03:8d:4f:8e:cd:ac:94:34:e0:04:
         84:b5:bd:18:e7:5c:09:7a:8d:92:56:90:16:8d:5d:0f:87:c0:
         bf:62:d9:2c:c7:6a:e2:96:20:88:1a:db:c3:af:4a:3a:47:48:
         7f:96:3f:f1:17:bf:7d:cf:12:0f:91:7e:a9:2b:46:51:76:88:
         43:76:b0:22:cc:ff:a3:36:18:86:7f:68:fa:b8:0c:78:58:1c:
         e9:fb:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----