Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20383334.roa
File:                     3139322e3230382e352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          jfyyP9ySiaixU867+LkDnBIZVoXSlll/S3Zm+Kt+67I=
Subject key identifier:   9A:56:7B:81:94:D6:1B:0C:4B:97:C8:46:54:C1:36:61:EB:98:3D:28
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       308697AAEA50EFA35F2AD416BEFA5C62ACE400AF
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 16 Oct 2024 00:04:33 +0000
ROA not before:           Tue 15 Oct 2024 23:59:33 +0000
ROA not after:            Wed 15 Oct 2025 00:04:33 +0000
asID:                     834
IP address blocks:        192.208.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 14:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:86:97:aa:ea:50:ef:a3:5f:2a:d4:16:be:fa:5c:62:ac:e4:00:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 15 23:59:33 2024 GMT
            Not After : Oct 15 00:04:33 2025 GMT
        Subject: CN=9A567B8194D61B0C4B97C84654C13661EB983D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0a:ac:6d:a0:ea:8d:ea:19:28:2c:58:d2:76:
                    fd:e5:ae:24:47:57:8c:71:b4:da:94:68:18:f7:c3:
                    15:d3:49:6e:ad:89:86:90:56:df:09:92:95:97:4e:
                    3d:1d:a4:fd:81:f8:0a:b7:53:dc:18:b5:e3:ff:35:
                    6d:b1:26:93:2d:88:a5:7b:8c:90:67:77:eb:15:9d:
                    28:12:b1:dd:d4:93:e5:8f:56:1e:eb:e1:92:d0:81:
                    cb:e7:ec:ae:21:74:76:a7:9d:a3:a3:96:8f:e3:67:
                    f7:ed:e9:cc:7c:e8:61:bd:76:15:9f:40:18:a7:66:
                    8e:1e:1d:fc:dd:91:cf:19:c4:03:ae:8e:ec:40:61:
                    46:b2:51:5c:07:0a:e8:e4:1c:13:0a:c4:30:17:02:
                    b2:79:40:50:36:95:c3:e5:5e:60:60:a4:66:65:d4:
                    71:c7:0d:8a:dd:36:6d:b1:3b:e5:be:f9:f5:ae:c7:
                    b9:62:b9:44:64:87:5a:c2:4a:fd:ae:25:9b:5a:62:
                    6c:0e:ad:41:4b:3b:2e:e2:98:58:2b:21:82:39:50:
                    02:34:c3:c6:64:5d:79:b7:fb:54:1e:2e:05:67:1c:
                    70:d0:5f:d0:93:e0:19:d1:49:5e:b1:34:3c:a7:2b:
                    a1:de:90:9a:32:8b:b9:4e:27:d6:f0:11:28:5a:89:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:7B:81:94:D6:1B:0C:4B:97:C8:46:54:C1:36:61:EB:98:3D:28
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:01:af:a8:97:44:1d:5c:b3:8d:df:d9:88:d1:6c:24:ac:64:
         e9:03:3b:21:cc:e6:b4:20:5e:2f:1e:db:e5:f6:df:b5:cc:99:
         e4:8c:aa:c8:25:5a:e7:53:08:c3:32:1f:98:5c:d1:90:c4:64:
         55:74:37:46:02:30:16:f5:f1:b6:37:d9:f5:b6:42:08:62:b2:
         8c:97:b6:5c:e9:81:00:a2:da:76:44:5b:66:16:6c:d4:61:a5:
         da:d5:f1:12:0e:49:09:b6:37:49:07:d2:01:60:da:fb:94:f5:
         55:d9:19:b2:90:ea:23:e3:73:6c:ac:92:8a:28:3c:23:4d:b2:
         4b:b7:bf:30:5d:89:71:56:c5:78:84:fb:46:b0:61:61:6a:d3:
         7d:28:49:73:ac:d6:8d:fb:7f:00:47:92:95:b6:ad:4a:32:67:
         30:60:c8:37:cf:88:6d:ad:84:d5:4b:06:db:c6:ba:c9:01:38:
         10:04:4b:ac:01:ab:ab:a6:64:81:84:64:b2:09:0e:cf:f6:96:
         fa:e3:58:84:71:47:4a:00:cf:7f:13:a2:5a:75:d0:41:95:6c:
         b3:1a:98:cb:51:ad:d3:69:57:05:95:aa:63:05:5c:f8:f3:78:
         f2:1d:7b:e3:4c:1a:32:00:85:a7:16:e0:50:dc:ba:6c:be:4e:
         e8:00:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----