Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20383334.roa
File:                     37342e3132342e3139322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          KP8l84bQkuQRoBijKEkIW7kUQDUPigo5vUUVluCwN3M=
Subject key identifier:   69:DB:D6:E3:CC:93:83:B5:E7:30:F2:FA:14:71:0E:42:62:E1:F7:CA
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       3A966CA6E83B3F599757249C84C3DC35CC3731D2
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20383334.roa
Signing time:             Mon 24 Jun 2024 02:11:49 +0000
ROA not before:           Mon 24 Jun 2024 02:06:49 +0000
ROA not after:            Mon 23 Jun 2025 02:11:49 +0000
asID:                     834
IP address blocks:        74.124.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 18:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:96:6c:a6:e8:3b:3f:59:97:57:24:9c:84:c3:dc:35:cc:37:31:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 24 02:06:49 2024 GMT
            Not After : Jun 23 02:11:49 2025 GMT
        Subject: CN=69DBD6E3CC9383B5E730F2FA14710E4262E1F7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:63:ce:16:ff:5f:ee:61:10:ee:c2:b4:fc:
                    2e:4e:b5:aa:54:40:bc:2b:3e:6e:ff:43:0a:3c:c6:
                    9e:51:aa:8f:52:f5:fb:33:8b:e8:72:59:6e:02:23:
                    3e:28:26:ce:f0:7f:b5:33:ab:ae:aa:77:e8:fb:e1:
                    ca:7f:0f:05:f8:06:76:fe:53:08:2e:fc:03:9c:48:
                    87:82:4b:21:41:d9:1a:99:4f:b1:71:d0:90:72:7b:
                    b6:86:b3:37:6f:32:1a:4e:cf:2c:f8:ff:37:d6:54:
                    8d:15:59:29:1b:96:08:fe:67:56:c5:0a:f6:79:6f:
                    19:f4:41:81:2f:4e:c9:a9:49:06:da:64:9e:04:24:
                    9c:de:4e:eb:f0:a6:4a:2f:66:10:5a:f1:28:ef:6c:
                    bc:2f:db:27:ff:c3:2b:dd:d3:e6:33:28:49:49:49:
                    73:d0:27:f2:6a:d2:37:39:ca:25:10:a8:56:08:ce:
                    16:7b:b2:bb:f4:ab:e6:b6:55:18:06:f1:60:1a:93:
                    e8:9b:b4:e2:52:e5:b2:1f:9f:97:a0:ef:f4:7f:63:
                    e6:8b:3a:8e:ae:ab:74:16:0d:a6:81:99:47:6c:3f:
                    14:bf:88:01:c4:f0:c9:d9:08:3c:ed:3f:24:fb:c9:
                    b3:ba:80:f0:43:cc:c2:1a:87:83:e9:6a:f0:89:a3:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DB:D6:E3:CC:93:83:B5:E7:30:F2:FA:14:71:0E:42:62:E1:F7:CA
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:52:e7:9e:dc:d2:c9:18:d5:bc:90:98:cd:4f:4e:9c:23:
         bf:c6:c4:e1:74:0d:2e:88:52:6e:2e:a3:fa:cb:28:e5:fa:aa:
         65:ce:39:d5:0b:98:35:9e:33:50:48:e0:56:df:87:6b:2f:23:
         3b:4a:b0:aa:12:ad:20:93:6c:f9:9a:1c:22:64:1d:c2:32:4d:
         7f:1b:17:60:bf:18:5a:aa:cd:0d:5a:37:77:c1:23:a1:ac:43:
         35:43:f7:3e:f6:a7:3d:c2:07:fa:10:bf:3b:06:fe:9a:ba:ee:
         85:7f:24:80:b6:10:86:5c:fb:35:e5:9e:0b:76:12:52:43:5f:
         b0:b9:0e:6f:d5:02:45:b4:15:66:f0:3a:aa:8e:5e:40:55:e0:
         c4:10:48:20:66:53:8e:5e:12:26:e6:76:c1:66:b0:53:de:00:
         d7:af:0d:e8:e9:e0:9d:62:a8:7f:b9:54:dc:6a:10:cd:cb:69:
         01:30:59:ed:59:ad:f0:48:0d:34:fb:f0:63:9d:fd:9a:e4:c8:
         c2:df:5b:5a:93:fc:68:4f:88:0b:31:d8:b8:9e:d0:e0:24:ec:
         27:c4:92:89:76:bd:78:04:8d:0a:45:44:32:fd:f5:c9:aa:e0:
         d6:55:9c:be:c4:28:40:a5:1d:81:69:20:c0:d6:39:dd:fa:6d:
         79:3c:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----