Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3234372e302f32342d3234203d3e2033353933.roa
File:                     3230352e3233382e3234372e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          dtOwNwN1JeRwEiEcwmPG+fTLQ3p58FzavBdOi4r3kC4=
Subject key identifier:   38:9A:64:1C:2F:5B:8F:DF:DD:FA:C8:C5:E3:E4:29:44:40:9C:53:F3
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       0A75154EDD611154B11653679BE80B14C3C64869
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3234372e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:58:26 +0000
ROA not before:           Thu 26 Oct 2023 04:53:26 +0000
ROA not after:            Thu 24 Oct 2024 04:58:26 +0000
asID:                     3593
IP address blocks:        205.238.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:75:15:4e:dd:61:11:54:b1:16:53:67:9b:e8:0b:14:c3:c6:48:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:53:26 2023 GMT
            Not After : Oct 24 04:58:26 2024 GMT
        Subject: CN=389A641C2F5B8FDFDDFAC8C5E3E42944409C53F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:c8:24:3a:43:eb:a2:51:11:b1:c1:51:c1:
                    b9:03:de:8c:6a:8a:31:d3:76:48:77:84:26:ca:e1:
                    be:62:f3:11:e6:18:3c:72:73:d0:af:7a:64:0d:c8:
                    50:27:63:65:11:85:7d:5e:4d:cf:0b:57:e2:85:54:
                    41:cb:8c:16:18:5a:c0:ad:d5:76:1d:05:e1:17:8e:
                    24:f6:0b:94:c6:0c:36:be:d4:ca:49:c5:11:02:e3:
                    1b:4d:3c:e8:b7:66:eb:55:db:89:5a:c1:b1:4e:b7:
                    aa:eb:8e:cb:26:42:e7:e9:c6:7d:07:64:0e:a6:e0:
                    82:11:21:ba:53:bc:e1:e4:26:cc:96:7b:53:f0:01:
                    1a:4d:4f:03:68:82:60:ea:1f:4b:1f:83:11:cd:55:
                    83:80:c8:6d:61:94:0e:7a:91:b2:13:e1:f6:0f:0e:
                    47:2d:c8:49:cb:f0:54:68:64:c4:5a:3c:b7:76:e0:
                    dc:b5:6e:72:ce:4f:c4:8c:2e:38:e2:ad:3f:31:52:
                    43:a8:e9:ad:0c:f5:b5:bd:c9:25:7f:26:b4:1f:97:
                    c3:8f:a0:a0:00:e0:7a:ec:7a:88:48:b5:d0:e2:94:
                    49:8b:a1:00:27:82:7e:fd:d9:9f:f2:93:9c:9e:8e:
                    75:97:5c:53:1c:c4:82:31:e0:83:a8:8e:74:bf:12:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:64:1C:2F:5B:8F:DF:DD:FA:C8:C5:E3:E4:29:44:40:9C:53:F3
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230352e3233382e3234372e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.238.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:fa:9b:1e:81:15:29:25:6c:23:d4:ef:35:64:fc:eb:1e:49:
         2c:02:bd:8d:38:7d:cb:f5:21:1a:cd:ea:ce:04:21:5a:c2:35:
         19:7b:05:16:a3:ee:89:21:fc:a3:65:6e:3e:c6:ae:d2:93:91:
         0b:df:bd:ab:29:af:cf:b3:a8:25:20:eb:9b:a4:4b:f3:a7:7f:
         50:3f:84:f3:a2:a8:b2:5f:d5:1c:7d:ce:35:5c:48:81:cc:76:
         d9:65:fe:9b:71:fd:c9:43:08:e3:ef:94:04:fe:b1:1b:4f:e1:
         b0:f3:ab:75:c7:22:54:c3:ba:0b:66:1d:0d:e4:36:17:0b:bb:
         7f:ea:65:3b:b6:c0:c9:76:92:dd:0e:3a:78:41:9f:21:44:73:
         14:0a:e3:35:f7:28:36:34:b6:ee:ee:07:51:d2:87:69:b9:fe:
         83:c1:7c:81:84:e8:58:a8:24:d8:9f:68:ca:a3:c5:e9:4d:82:
         e3:73:e3:b9:49:65:55:fc:42:5a:3f:d8:c5:60:9e:c8:dc:c9:
         ca:42:9c:91:cc:13:45:40:ee:04:7a:20:0e:d5:5a:44:03:20:
         9e:e2:72:4a:9a:db:c1:86:51:1b:d5:e1:8c:fe:9a:6b:20:27:
         39:52:04:d6:f6:61:4e:54:32:46:50:d1:cb:07:72:2c:49:16:
         7b:5a:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----