Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3139392e3232342e3130372e302f32342d3234203d3e2033353933.roa
File:                     3139392e3232342e3130372e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          r33AjR890CqkZBrvxYTrB2uBcQBJWP6yniqQFdnDP4U=
Subject key identifier:   37:92:A8:72:2D:B7:6E:A0:D1:0D:22:B2:D3:EE:35:F6:FE:E3:6B:46
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       42BD1D527F106BBF27BD5ACC6F9901778D3F6CBA
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3139392e3232342e3130372e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:56:36 +0000
ROA not before:           Thu 26 Oct 2023 04:51:36 +0000
ROA not after:            Thu 24 Oct 2024 04:56:36 +0000
asID:                     3593
IP address blocks:        199.224.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bd:1d:52:7f:10:6b:bf:27:bd:5a:cc:6f:99:01:77:8d:3f:6c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:51:36 2023 GMT
            Not After : Oct 24 04:56:36 2024 GMT
        Subject: CN=3792A8722DB76EA0D10D22B2D3EE35F6FEE36B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:6f:53:f9:3d:90:a0:9d:98:f3:31:98:a2:
                    af:bb:4c:5b:b0:8f:ab:7b:dc:e1:4a:08:10:52:32:
                    b0:87:0e:75:cf:69:34:b8:f4:27:a1:bb:17:c9:6b:
                    c8:33:40:ac:89:14:4f:bb:9e:e8:05:25:30:3f:c4:
                    42:f1:49:d4:e5:35:5a:18:15:ba:3d:16:91:8a:1f:
                    fe:41:12:f3:3b:4f:d6:16:20:69:8f:6e:c2:4f:e7:
                    eb:42:02:70:c5:a3:7b:60:98:ce:5e:95:df:1e:fd:
                    19:d9:a5:71:63:70:51:93:fb:7e:5c:2d:45:0a:ae:
                    4d:d9:2b:40:b9:af:e8:04:c0:8a:53:c9:d2:a2:31:
                    75:26:b7:8f:52:ea:02:c8:5c:95:29:18:b4:a4:38:
                    f5:21:18:bd:45:97:48:18:e1:39:33:12:a2:fd:af:
                    14:c7:0d:fd:80:8c:0f:7f:37:fd:1c:67:96:2a:9e:
                    1c:d1:d1:e8:9e:23:3a:f1:4c:20:27:35:24:54:94:
                    ea:31:6e:ea:8a:b5:44:35:0e:e6:a5:39:6d:15:c4:
                    76:2b:bc:3f:a0:4d:9f:5c:cb:f0:63:0d:98:cf:57:
                    a6:48:6b:de:d7:75:31:4e:f0:b4:fa:ab:7b:06:11:
                    30:a7:35:ef:6b:8b:4b:27:6e:a3:51:43:71:f0:f8:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:92:A8:72:2D:B7:6E:A0:D1:0D:22:B2:D3:EE:35:F6:FE:E3:6B:46
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3139392e3232342e3130372e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.224.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:94:e1:64:92:f7:ba:c2:5c:19:c0:b6:5c:d2:75:82:84:ef:
         24:21:4b:f5:90:6d:07:4d:83:3e:47:b5:a2:6d:cb:ae:03:92:
         5b:d4:70:08:0d:cc:b1:8d:bc:77:1c:94:53:29:df:3e:9d:1a:
         e6:af:78:55:1a:a6:15:22:30:5e:60:f4:2c:9f:b3:de:54:d9:
         f2:dd:6c:cf:b5:5a:a7:dd:ea:29:18:8f:06:02:0c:59:3e:b6:
         de:a3:c9:cb:7f:f4:55:09:07:40:6f:29:8e:dd:ea:45:3f:92:
         3d:b3:23:3e:b9:b8:ad:b5:52:94:a6:99:35:fa:40:ac:9e:35:
         03:f3:4c:8d:03:96:a8:ae:5f:3f:68:0c:07:27:76:b1:52:60:
         3e:91:0d:d3:8f:be:af:e6:ed:9f:6f:68:9e:d4:7d:97:d6:80:
         52:57:40:fe:02:a3:c4:50:8b:90:a2:eb:2b:62:e2:63:f6:c5:
         2f:f3:e3:d3:c8:20:8f:62:b8:a1:19:fb:83:7a:57:63:35:fd:
         b3:83:70:43:60:9a:af:0a:b5:ee:07:85:30:df:cb:7e:94:d7:
         0a:94:72:55:36:18:35:96:1f:e8:77:62:43:e0:2a:a6:ab:66:
         b8:64:b8:ad:82:07:b3:48:39:aa:a4:b6:09:e7:6e:7c:2a:19:
         16:3f:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----