Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
File:                     3230342e31342e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          AOtMHu1FlkAGCshC+0m8lHGxCh7vo4QUG1qXuFGDYD8=
Subject key identifier:   71:C6:2D:BA:CD:19:8A:3E:16:79:C9:00:92:5E:79:A1:6C:F0:CA:D3
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       06EA0DFBF4806B78D1D0A9FF4D647F06DF8A532D
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
Signing time:             Tue 24 Sep 2024 00:01:01 +0000
ROA not before:           Mon 23 Sep 2024 23:56:01 +0000
ROA not after:            Tue 23 Sep 2025 00:01:01 +0000
asID:                     834
IP address blocks:        204.14.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 18:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ea:0d:fb:f4:80:6b:78:d1:d0:a9:ff:4d:64:7f:06:df:8a:53:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Sep 23 23:56:01 2024 GMT
            Not After : Sep 23 00:01:01 2025 GMT
        Subject: CN=71C62DBACD198A3E1679C900925E79A16CF0CAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:8e:44:04:89:f2:32:25:5c:47:6b:4e:c3:
                    f6:52:df:54:ee:07:aa:2a:25:8f:b6:6b:c6:bc:57:
                    ae:19:f8:65:f0:a9:78:40:49:06:25:df:4b:9a:27:
                    48:6a:5f:ff:ac:0a:bf:13:ae:c8:16:4f:ea:84:5d:
                    fc:d0:3d:26:02:f1:12:93:c4:0e:84:de:a4:f6:8e:
                    62:c2:1c:4f:1d:8f:8f:29:9c:2f:45:04:82:dc:05:
                    ac:53:a0:e8:a1:4b:01:2a:81:da:20:ad:1a:c9:f2:
                    a6:d0:f9:e7:11:0d:d8:11:10:ec:b7:8b:a6:35:e6:
                    d3:35:2d:c0:84:32:ce:32:2a:90:46:c6:81:49:b7:
                    ef:72:19:e8:f2:d0:cd:b9:af:9c:05:b0:a0:87:33:
                    29:ef:cd:ee:4b:7a:2a:ab:be:99:3e:29:4a:64:8c:
                    14:41:ef:d5:65:d0:37:86:17:f7:5a:d1:b0:40:81:
                    f7:a4:64:e8:f8:7d:3c:55:3a:cf:dc:c6:d1:f5:2c:
                    35:26:a6:03:bc:f0:f1:de:39:83:2a:ab:5f:71:f4:
                    95:7f:65:b1:2c:2c:8d:1d:55:09:b9:57:98:6a:93:
                    a3:0a:58:3a:96:f7:e2:2d:5d:7a:aa:2b:f1:26:eb:
                    5c:f2:ab:89:b8:45:92:73:a9:63:06:fa:c9:8f:02:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C6:2D:BA:CD:19:8A:3E:16:79:C9:00:92:5E:79:A1:6C:F0:CA:D3
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:7a:67:5d:ca:83:c9:6d:e6:89:34:84:b7:64:1b:75:74:69:
         7c:01:ae:35:c4:24:67:34:90:21:f2:4c:67:a5:6e:65:23:ac:
         74:a8:50:67:51:77:db:14:90:00:98:d9:87:3e:d0:76:2c:d2:
         1f:43:5c:cc:fc:73:8e:7a:8e:e6:51:a1:92:e3:e7:c1:39:e4:
         8b:90:84:78:74:37:85:77:95:63:43:6d:c0:e3:35:f9:e3:79:
         cf:09:b0:81:00:b9:23:98:7b:25:e1:f7:87:38:4d:a1:3c:63:
         5e:fc:57:f3:cf:41:7c:22:6f:09:6f:b3:9d:6b:7c:56:f9:84:
         cd:e6:f1:07:0c:a3:38:62:53:cb:ed:9e:2c:29:e8:70:b7:18:
         1f:c5:a2:b9:e2:bc:e3:94:fa:b8:d3:c9:72:30:05:74:41:ea:
         22:ff:89:0e:ad:de:2a:7a:c6:88:b9:93:0d:7f:28:c1:39:10:
         a2:08:55:ee:c0:e8:65:8d:86:b1:25:a2:b2:3e:59:94:18:69:
         50:53:0f:f4:5a:a9:84:a3:58:9e:5b:11:39:86:2b:48:60:4a:
         7c:69:1b:6a:ad:22:a5:75:64:97:d2:a5:a6:cb:ba:ee:7e:d1:
         ff:a0:b0:9b:f0:a5:47:4e:c8:d7:45:a5:c0:fa:9e:3a:91:26:
         42:bb:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----