Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3234302e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3234302e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          qzp3gbHCw+4pCMVyO0azkNNLTVrTHEGBtFlFQbNq+yA=
Subject key identifier:   F1:85:FD:5C:B3:49:71:83:67:B2:9A:72:29:FA:68:49:EC:1A:8F:BA
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       6FC8BCAA1A80D4E7C53E1DC271E6789FF73BCBB2
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3234302e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 10:59:12 +0000
ROA not before:           Thu 23 May 2024 10:54:12 +0000
ROA not after:            Thu 22 May 2025 10:59:12 +0000
asID:                     17139
IP address blocks:        205.134.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Jun 2024 11:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:bc:aa:1a:80:d4:e7:c5:3e:1d:c2:71:e6:78:9f:f7:3b:cb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:54:12 2024 GMT
            Not After : May 22 10:59:12 2025 GMT
        Subject: CN=F185FD5CB349718367B29A7229FA6849EC1A8FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:38:0c:a3:6d:a1:6b:1a:75:12:42:99:56:
                    dd:f8:83:65:0f:d3:73:6e:da:c1:eb:2d:70:d6:cd:
                    5b:6e:99:a2:d2:b2:17:da:39:2c:2e:d6:90:71:7e:
                    73:bd:8d:b8:61:48:30:1f:0b:24:5e:81:7a:71:70:
                    cc:fc:17:52:84:de:bf:aa:68:49:91:f1:c0:49:5b:
                    c1:80:09:15:d5:10:f9:26:0f:29:2e:6b:56:84:6c:
                    8a:56:1d:f7:fc:cb:cf:81:0a:2f:ab:56:88:e4:4c:
                    0b:e6:3b:cf:9f:d5:f1:28:de:1a:ee:fb:6f:51:81:
                    43:cf:72:eb:4e:1e:e1:d2:d7:e7:80:a7:5e:0b:f5:
                    46:4a:c4:bc:d2:57:cd:c2:b6:31:c5:bb:17:2f:c5:
                    f1:7c:57:31:06:ef:3c:34:f3:b1:0b:44:53:cf:1b:
                    e9:23:50:31:48:81:ec:5b:0c:06:9b:6b:60:43:fd:
                    84:2f:67:fe:e7:1f:4c:9c:7d:5a:bb:12:32:73:b7:
                    db:4e:5d:a9:10:99:eb:d8:3a:86:7c:7c:6d:15:3b:
                    5e:3a:7b:d4:d4:64:08:79:8e:6d:ac:22:55:85:22:
                    c3:c5:8e:b3:9e:58:f0:9a:7a:a6:fc:49:08:14:66:
                    5a:df:77:9a:12:7e:91:b2:57:03:74:8a:1b:e8:19:
                    8c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:85:FD:5C:B3:49:71:83:67:B2:9A:72:29:FA:68:49:EC:1A:8F:BA
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3234302e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:76:49:a6:51:d3:c4:3e:5e:fe:95:35:b4:9f:da:61:85:55:
         5d:a0:35:7f:ff:b4:7b:60:e4:62:16:9a:6f:67:b6:31:7d:e6:
         f8:9d:b5:47:a6:a7:32:33:26:98:ef:7d:40:b0:6e:1a:e6:6b:
         bf:a8:46:98:d5:2d:4d:e7:ee:1a:d7:1b:fb:c2:57:6d:91:dc:
         29:e6:03:90:28:6b:62:ff:f7:31:88:42:ca:6e:74:7b:ba:1f:
         b3:40:48:c3:87:84:c7:8b:81:66:e5:12:e9:08:e3:37:1b:f5:
         9a:be:45:12:f5:db:c7:3a:fe:df:26:83:86:67:1e:8d:e1:11:
         77:59:a7:5a:99:04:fe:30:7c:23:ee:2f:f8:24:0f:38:8f:f8:
         38:c6:0c:a4:0d:4f:35:ee:64:75:3a:d5:7d:ef:03:31:22:bd:
         4e:36:c4:d1:0c:92:ac:e4:52:fa:8a:3f:38:af:f2:1e:a5:e0:
         c0:6f:4a:53:87:4a:9a:b2:e7:7f:9a:12:2d:08:4b:e7:d0:ae:
         45:8f:59:bf:7d:c4:ab:9c:16:22:84:ec:49:41:d7:a2:4a:bb:
         93:d2:6d:88:9b:7d:f7:f6:72:e0:91:98:11:5d:e2:b1:79:b9:
         37:37:af:cc:f5:e0:4a:31:bb:9b:9b:3b:5d:2f:63:84:19:6d:
         e9:9b:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----