Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e342e302f32342d3234203d3e2033353933.roa
File:                     3230392e37342e342e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          mEw78iB5E3PwOfZY9oWo7NLFMo+rIK8e8P1517nD97s=
Subject key identifier:   46:54:91:B9:57:22:A4:BB:6D:23:2E:E9:72:06:52:55:D2:47:D2:2B
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       6FFF93F09BF8D44B9BD24102530785DE5B5574E5
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e342e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:58:56 +0000
ROA not before:           Thu 26 Oct 2023 04:53:56 +0000
ROA not after:            Thu 24 Oct 2024 04:58:56 +0000
asID:                     3593
IP address blocks:        209.74.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ff:93:f0:9b:f8:d4:4b:9b:d2:41:02:53:07:85:de:5b:55:74:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:53:56 2023 GMT
            Not After : Oct 24 04:58:56 2024 GMT
        Subject: CN=465491B95722A4BB6D232EE972065255D247D22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:b0:30:ff:06:19:51:72:30:2c:c1:a9:05:
                    5f:06:a7:62:f4:16:c1:15:ee:51:0e:ae:b7:c9:7e:
                    18:4c:cc:dd:b2:7c:f4:ec:5f:72:f7:60:0d:76:26:
                    b4:ab:6d:06:1c:0d:9f:d4:7d:8b:3b:ee:1c:1a:fb:
                    b4:04:9f:cc:70:7e:72:24:aa:0b:bc:fd:ad:99:a5:
                    21:11:6e:47:5b:25:5d:fb:b2:0c:8c:c7:be:32:1a:
                    56:41:ab:43:38:4e:11:66:27:19:57:84:de:96:c4:
                    87:09:5c:de:39:14:35:fb:40:ed:99:fd:c3:9a:17:
                    e7:78:28:87:e6:eb:fa:98:3a:98:d8:72:0c:83:1d:
                    e2:d0:8e:37:c5:4c:91:b7:36:17:11:ad:9f:27:2f:
                    f8:d4:da:dd:4b:3f:07:c2:85:88:4a:01:7c:0d:77:
                    20:55:2f:86:4d:6e:17:8f:b4:49:cb:ac:4e:71:2b:
                    1d:76:c6:6f:39:db:78:ae:23:12:ef:2c:d2:6f:ee:
                    44:d3:9e:e8:8a:58:79:8f:25:2b:1b:e3:be:89:69:
                    0c:34:b8:28:a4:12:0c:71:1c:1c:df:09:f4:02:88:
                    f1:08:9d:f8:4a:1c:fa:eb:2b:08:22:47:2b:83:15:
                    1f:d3:05:01:f6:f5:86:00:fa:2f:bc:0d:aa:18:99:
                    e6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:54:91:B9:57:22:A4:BB:6D:23:2E:E9:72:06:52:55:D2:47:D2:2B
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e342e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.74.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:66:ed:a6:51:68:8f:0e:c6:27:6b:c6:ca:16:73:aa:46:ca:
         44:96:07:d8:0f:da:c9:93:d7:e3:c4:81:0d:ae:e7:d7:26:a3:
         2d:d2:3e:5d:e9:6d:da:16:eb:ac:f9:da:e4:fb:41:5f:4c:a2:
         5d:7b:9a:ef:de:1a:6a:db:02:94:59:25:ca:c6:d2:d2:a0:1c:
         6a:d0:45:b0:70:9c:cf:5a:65:e3:5c:38:3c:22:74:b1:b5:67:
         a6:38:d9:50:af:09:9e:e2:48:70:7a:8c:e6:5a:90:e3:f9:78:
         3b:76:30:22:2b:47:b5:af:03:ed:f8:09:28:08:36:98:21:e0:
         e1:3b:05:05:77:74:e8:fc:b8:b5:01:3f:ff:b8:f6:9c:53:89:
         b4:7e:62:b9:ed:db:e3:28:d3:b7:19:97:82:81:c6:ac:8b:43:
         91:00:da:aa:26:34:ef:25:b8:80:85:fa:61:a3:e9:ee:30:ef:
         8c:58:53:e2:e2:57:34:82:82:df:a9:54:10:7b:18:96:a0:5c:
         10:40:44:fc:fd:05:9b:9d:f9:5e:ea:0a:d5:32:c9:80:6b:1c:
         53:4e:c7:57:76:65:5c:8f:7f:ab:0e:96:62:d3:d2:8d:b8:fe:
         09:48:d5:55:fc:bc:f3:77:62:11:2e:c3:1d:2e:7c:bd:04:fb:
         f3:9e:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----