Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e20333939323735.roa
File:                     37342e3132342e3139362e302f32342d3234203d3e20333939323735.roa (raw, json)
Hash identifier:          ruANR/BGrhp7AWIOp23vb6unDSYR38w4fjdfNR9kDOE=
Subject key identifier:   DA:FB:A5:67:2B:62:4B:37:3C:0B:31:B5:C2:04:A0:1B:A7:BF:74:C2
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       03AC345F7533B8AA30B3120ECB8922B8A9E49952
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e20333939323735.roa
Signing time:             Wed 26 Jun 2024 20:49:28 +0000
ROA not before:           Wed 26 Jun 2024 20:44:28 +0000
ROA not after:            Wed 25 Jun 2025 20:49:28 +0000
asID:                     399275
IP address blocks:        74.124.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 22:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:34:5f:75:33:b8:aa:30:b3:12:0e:cb:89:22:b8:a9:e4:99:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 26 20:44:28 2024 GMT
            Not After : Jun 25 20:49:28 2025 GMT
        Subject: CN=DAFBA5672B624B373C0B31B5C204A01BA7BF74C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:ea:cd:ef:57:1c:a0:33:04:6d:3a:8e:41:
                    83:e3:9c:4b:48:e3:f7:11:36:5b:31:0d:26:8d:bc:
                    2a:15:d4:cb:a6:90:08:8c:0f:1b:d9:c2:64:0d:3c:
                    92:77:0a:53:9e:a5:f2:b7:82:14:9c:33:c8:6b:10:
                    8b:32:af:6a:64:5f:e2:02:bb:40:ea:5a:11:89:f0:
                    9a:9b:7a:4b:e1:af:81:ad:67:63:8d:88:45:91:06:
                    7d:b6:24:47:2f:88:77:c9:50:e5:01:d9:f2:41:0a:
                    5b:ce:95:f9:0b:96:bc:d7:25:85:bc:4d:e4:7a:7f:
                    10:95:c5:0c:75:d8:80:50:d2:57:9d:71:8e:8d:59:
                    89:35:1b:7f:34:af:96:aa:45:3e:b2:d7:d4:02:7b:
                    75:96:b6:f5:d8:88:d2:07:50:9a:5e:ad:e0:85:19:
                    85:cd:e8:36:4f:75:b9:1f:63:25:ed:ea:94:e0:73:
                    81:6a:82:f3:f8:43:7e:04:6f:07:16:36:b8:7e:13:
                    8d:3f:e1:d9:e0:cf:20:87:f4:00:3b:c9:87:53:67:
                    08:7b:8c:73:ed:8f:f5:9a:41:48:bf:c5:39:90:21:
                    b2:10:12:30:db:ad:36:9e:b5:85:0f:7a:24:de:84:
                    c3:50:2d:a7:44:e5:0a:7a:d2:c0:70:ea:7f:9c:94:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:A5:67:2B:62:4B:37:3C:0B:31:B5:C2:04:A0:1B:A7:BF:74:C2
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139362e302f32342d3234203d3e20333939323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:55:3a:3e:f5:09:db:9e:42:19:24:fc:fc:54:22:d6:64:5f:
         ec:60:c5:49:cb:09:68:56:4a:46:9f:13:65:c8:53:23:de:ce:
         8b:87:9f:f0:81:eb:0a:c5:9e:f3:17:0a:f3:1c:1b:e2:91:e5:
         5f:dd:9c:74:bf:2d:2b:61:f5:6e:4c:54:5c:bf:e5:19:20:ec:
         15:92:cb:9b:ad:30:49:0f:9e:f8:13:5a:d4:0b:bf:19:fd:64:
         7e:bb:ef:ce:21:88:57:38:63:cf:ef:f0:cf:22:98:9f:63:ff:
         4a:fc:6e:11:4d:99:3e:1a:ac:93:9e:7e:6a:f7:e0:cd:e5:f6:
         97:e7:a6:66:99:14:d2:da:be:83:32:b1:e2:15:40:33:5c:28:
         6c:26:1a:4b:33:5c:a7:2a:75:df:c0:e4:97:af:32:b0:8f:73:
         99:a3:7e:13:ad:d6:e6:ab:41:80:61:4b:e4:6c:5a:4c:9b:37:
         3c:69:3a:bf:39:0f:40:93:f4:1c:fa:fb:b9:8f:9e:b0:6d:a3:
         1a:81:66:fa:9b:72:bb:c8:1c:0b:c8:57:8d:84:b0:8d:41:e6:
         56:e3:d8:4e:8a:c8:4b:8e:1e:57:3b:49:6b:ed:76:d6:8e:7c:
         11:20:c5:d6:c3:b8:8e:f2:ec:d0:53:2b:3d:ca:91:f4:0d:c3:
         05:9d:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----