Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137302e3231352e37352e302f32342d3234203d3e2035363530.roa
File:                     3137302e3231352e37352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          MCPkEfMmLn7FMy9ByKAm1rV+xNpxoMoGzCqD8m6qb8c=
Subject key identifier:   A9:E3:AF:7E:A9:F8:22:48:11:4A:E9:A0:AF:C4:0F:1C:71:03:47:EE
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       389B03FBC2E5E29457C585BB3DCBE88243FC890A
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137302e3231352e37352e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:37:04 +0000
ROA not before:           Thu 02 Nov 2023 11:32:04 +0000
ROA not after:            Thu 31 Oct 2024 11:37:04 +0000
asID:                     5650
IP address blocks:        170.215.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9b:03:fb:c2:e5:e2:94:57:c5:85:bb:3d:cb:e8:82:43:fc:89:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Nov  2 11:32:04 2023 GMT
            Not After : Oct 31 11:37:04 2024 GMT
        Subject: CN=A9E3AF7EA9F82248114AE9A0AFC40F1C710347EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:76:0e:0a:fc:fc:e1:a7:4c:e9:d8:91:83:
                    79:04:f7:96:ee:8f:5f:e5:6e:42:99:9f:2d:b9:0e:
                    53:61:3c:4e:b5:4d:27:b8:c2:f8:10:a4:6d:8e:45:
                    22:f1:50:9a:88:a5:04:83:97:68:c0:ac:95:31:a5:
                    c3:50:1d:55:66:d0:c7:92:0c:69:9b:4a:ac:84:f5:
                    d9:ed:aa:f8:12:82:36:a2:17:0c:d2:30:9a:ec:c2:
                    2e:e2:c1:b3:40:89:93:0e:fa:ee:dc:b0:84:bd:b8:
                    69:14:f7:3d:f5:1a:68:12:ce:e5:3c:26:65:03:1d:
                    0e:18:78:70:41:e3:3a:00:16:72:61:19:64:fd:1e:
                    8d:c7:a4:a3:9d:fa:2b:2e:e7:60:87:16:e9:b2:8f:
                    1b:78:39:1b:9e:4b:af:44:72:bf:59:10:89:72:60:
                    e5:3d:c7:f6:de:20:9e:10:fa:e1:7f:7a:f5:a8:d2:
                    64:53:8e:25:67:48:f7:92:27:8b:8f:24:9d:33:61:
                    25:c7:a0:17:47:6a:f7:93:de:b2:e6:fe:b7:ee:27:
                    47:69:ce:cc:bd:2f:dc:e3:43:59:32:a1:15:12:fb:
                    7b:80:87:1a:03:c8:0b:10:00:24:07:43:f3:89:0e:
                    ce:2c:73:99:87:cd:f6:76:23:04:46:f3:00:a6:c8:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E3:AF:7E:A9:F8:22:48:11:4A:E9:A0:AF:C4:0F:1C:71:03:47:EE
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3137302e3231352e37352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.215.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:bc:c1:f3:5e:be:a0:12:1b:5c:8b:62:b6:c1:21:18:f4:db:
         69:a9:8c:fd:0a:6d:79:a6:76:a8:61:4e:70:e3:41:34:a1:c4:
         67:26:20:9b:a8:dc:5d:7c:77:a3:95:f6:01:2c:23:1f:34:57:
         78:23:5b:71:e0:ea:5f:e3:57:98:ef:22:64:0a:3d:21:a9:62:
         9c:36:27:ec:b3:54:43:5a:59:18:ea:70:45:61:4b:c9:ba:3d:
         2c:a0:8b:86:39:49:61:0a:18:70:30:07:0c:59:b4:44:15:37:
         ad:97:88:f5:06:35:c3:e5:04:9e:87:33:a3:8f:ce:90:2f:f6:
         a7:91:56:a0:0a:41:a1:e5:82:16:ad:18:30:41:2a:f9:b9:e3:
         d4:17:84:0f:d7:74:41:20:81:55:cc:f4:20:15:ba:5b:2f:5a:
         12:ca:d0:2d:02:02:5a:37:45:c9:68:7d:33:49:3e:db:3f:1d:
         8b:d1:23:14:11:68:28:fc:36:8c:27:ad:b1:ab:91:c5:10:0f:
         53:de:40:df:8c:b0:dd:82:59:cd:cd:a1:16:b9:dc:4e:d7:b9:
         02:0b:6f:ca:c7:9f:ee:4e:55:89:36:8c:2a:4e:93:35:e4:94:
         08:ed:a3:a5:4a:14:b3:80:05:98:65:5e:fe:1b:f4:0c:02:75:
         f6:61:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----