Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20383334.roa
File:                     36342e3235332e39352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          u6KiCRNtOEQlQSlNYRJRUfC63LBFDlZX+nL7QIKhN+0=
Subject key identifier:   22:49:93:14:29:61:1B:4D:CF:C3:E0:F3:5A:E7:1D:04:DE:0A:80:79
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       1278FC374BA30B03DD353B424E5C545BEB75D428
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20383334.roa
Signing time:             Mon 25 Nov 2024 11:06:57 +0000
ROA not before:           Mon 25 Nov 2024 11:01:57 +0000
ROA not after:            Mon 24 Nov 2025 11:06:57 +0000
asID:                     834
IP address blocks:        64.253.95.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 26 Nov 2024 16:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:78:fc:37:4b:a3:0b:03:dd:35:3b:42:4e:5c:54:5b:eb:75:d4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 25 11:01:57 2024 GMT
            Not After : Nov 24 11:06:57 2025 GMT
        Subject: CN=2249931429611B4DCFC3E0F35AE71D04DE0A8079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:b7:1c:1f:cf:c9:21:e2:22:fb:e6:10:ea:
                    31:e5:ea:91:fb:6c:84:a4:96:1d:0b:92:dd:14:8f:
                    fe:51:4c:bd:e4:2b:39:6d:0a:ea:fc:21:1f:8d:99:
                    08:93:4e:bb:5a:7c:2c:fc:8b:2f:35:a4:7a:9d:32:
                    51:83:7b:10:36:be:aa:98:5c:62:ca:f1:de:35:06:
                    18:a7:ab:3b:56:a9:c6:b6:ff:e6:60:14:31:5d:b4:
                    7f:bc:e7:bc:b0:56:b0:07:fb:8b:94:3d:c1:0e:bb:
                    82:fe:88:f3:a7:88:e5:15:72:a0:b5:06:d0:8b:c0:
                    96:66:dd:23:21:09:bd:ec:1b:e4:e5:0f:0b:91:d1:
                    93:5b:c4:30:b0:57:0b:1c:cf:bc:68:d0:2e:99:3e:
                    aa:f0:49:47:9f:e4:49:a4:00:78:be:01:25:c6:78:
                    80:0a:29:c7:49:67:db:5a:5b:1b:d8:61:e8:13:52:
                    4d:58:10:df:d7:f2:3f:3f:77:ed:f7:d1:fc:f1:4d:
                    a5:1d:61:4b:31:99:f4:32:c4:9c:68:aa:75:46:c5:
                    2c:2f:59:29:d7:d6:57:74:0c:cf:7e:16:66:35:07:
                    51:1d:18:df:2f:29:be:8c:dc:7d:5f:33:cc:77:89:
                    2a:b1:cb:eb:d8:a6:9b:5b:60:b0:ec:44:bb:a8:7a:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:49:93:14:29:61:1B:4D:CF:C3:E0:F3:5A:E7:1D:04:DE:0A:80:79
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:6c:da:27:2b:2a:3b:87:40:64:89:5f:c0:49:cb:6c:52:
         67:ec:e4:3e:f8:78:4e:a0:92:31:0e:2a:ad:86:bc:ef:80:29:
         19:c3:f3:47:07:82:32:5a:cc:2e:8c:ba:86:bf:30:a1:32:a9:
         ab:c4:2f:96:09:b7:02:48:c1:4a:d4:ea:dc:ad:ab:7d:6e:3e:
         9c:a0:f9:1d:61:1a:5d:a1:c2:a5:f4:48:a3:d0:33:61:25:20:
         f3:c9:f4:d1:64:29:3e:8f:0b:a6:80:5c:d2:f8:43:af:50:5d:
         6c:0e:8b:3a:78:4e:51:51:25:72:11:4f:f5:66:de:9d:61:c0:
         6a:7d:ab:7d:53:9e:a3:a5:43:f4:45:69:3f:e0:9a:49:18:bd:
         86:4c:b8:14:92:ce:44:aa:34:40:7a:7c:3c:a4:c7:bc:85:6e:
         97:58:5e:13:a3:d6:70:a5:31:59:8e:de:3e:ae:2b:80:f9:ce:
         3d:94:e8:44:68:1a:5f:b5:92:94:5d:59:ba:ec:00:7c:0c:4c:
         92:83:57:db:4f:87:af:ce:08:52:f9:e2:41:0a:2a:72:47:af:
         5f:a3:91:2f:e8:95:ed:93:98:d0:4c:b0:08:b7:bf:c6:a5:1a:
         09:3e:92:7a:02:1b:a3:28:0d:4e:17:88:8c:43:56:d8:e5:3f:
         87:42:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----