Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e382e302f32342d3234203d3e2033353933.roa
File:                     3230392e37342e382e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          H1oMUyZ/dPHpjHf7KDGRiMAqgb/kwgaA2wbR15L2sAg=
Subject key identifier:   8E:61:37:CB:40:47:7D:EF:95:50:0A:EE:CB:1C:A1:8E:D4:1D:6D:0D
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       34123AB9262B4A61B4C7AB887FEA45A3D9CF240F
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e382e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:59:28 +0000
ROA not before:           Thu 26 Oct 2023 04:54:28 +0000
ROA not after:            Thu 24 Oct 2024 04:59:28 +0000
asID:                     3593
IP address blocks:        209.74.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:12:3a:b9:26:2b:4a:61:b4:c7:ab:88:7f:ea:45:a3:d9:cf:24:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:54:28 2023 GMT
            Not After : Oct 24 04:59:28 2024 GMT
        Subject: CN=8E6137CB40477DEF95500AEECB1CA18ED41D6D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:41:96:9c:f8:85:17:60:ce:4a:e9:9e:05:
                    96:ad:d5:4c:8d:31:9e:6b:77:2b:31:2f:91:23:89:
                    d8:df:c1:8c:04:ec:3d:3b:2f:3d:9f:19:22:8b:e1:
                    db:d0:6f:7b:40:e0:29:35:3e:3d:32:c3:ee:a8:1f:
                    cb:48:03:e4:0f:b0:d5:6e:4a:59:a7:0c:f2:3f:4e:
                    3a:b6:51:81:06:3a:85:4e:91:5e:54:2a:9c:5e:5f:
                    b4:8f:11:39:19:2e:ad:50:16:28:36:c8:c5:d3:ff:
                    eb:1a:61:c7:b1:4d:f7:f5:84:f3:22:f3:8d:89:c0:
                    bd:d0:81:df:8e:db:fe:52:c2:ca:6c:03:8b:49:d0:
                    6d:eb:ec:1a:70:17:fc:89:64:a3:2b:ba:ea:5f:84:
                    f5:11:71:03:c0:f1:25:7a:50:6d:28:ab:56:0a:f8:
                    fb:a1:3c:cc:82:2f:ba:30:e7:f7:27:0b:7e:5b:b8:
                    ac:d8:2b:54:49:43:3d:0e:07:2a:61:2e:38:03:f2:
                    32:b3:07:7b:84:90:4c:ed:64:37:b1:3e:cb:7e:7a:
                    f2:55:a5:90:54:a7:41:1f:f5:e7:40:38:6e:76:db:
                    af:c9:2f:be:3c:d9:6a:df:a8:12:52:76:22:c1:df:
                    e6:d9:50:da:4b:7e:ad:b7:b8:91:15:a6:63:57:d8:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:61:37:CB:40:47:7D:EF:95:50:0A:EE:CB:1C:A1:8E:D4:1D:6D:0D
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3230392e37342e382e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.74.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a8:13:88:cb:6e:ea:c7:2b:f0:84:45:00:75:7f:1b:c5:ed:
         17:db:ce:c8:51:1a:d2:40:42:c7:c1:af:4f:89:35:ec:a3:4a:
         39:43:3e:34:68:26:0a:0f:7f:63:a9:2a:e0:45:f6:d8:a3:bc:
         cf:84:2f:a9:0e:1d:0c:58:18:c8:d2:a4:e3:c9:4e:f1:6e:64:
         18:59:74:d6:eb:83:3e:36:35:db:fe:96:61:2b:6b:42:d6:70:
         95:14:f1:4d:81:12:05:b0:ac:9e:82:7d:80:9b:df:a5:84:4d:
         d4:4b:f5:87:e4:9c:f7:88:6f:19:9c:0b:ae:14:d4:b1:75:39:
         f2:8c:17:9a:7b:42:7c:e0:9e:da:e2:1d:3a:45:71:16:f0:dd:
         5f:90:db:36:61:47:3b:81:70:48:fe:32:2c:5a:9f:3d:15:7f:
         63:a7:eb:a0:3e:c3:b7:d2:4d:4f:7f:43:f5:df:3f:c7:7f:d4:
         91:9e:c7:42:9e:cf:01:90:b2:15:51:3d:d0:31:4c:10:da:60:
         4f:2f:01:fa:79:88:19:ce:61:67:fd:cf:c4:4c:11:16:d7:67:
         1b:ab:f3:55:fe:ba:a5:cb:d3:f8:5e:8f:26:89:fa:38:cb:f2:
         8c:67:0e:b1:df:62:b4:f8:75:0e:af:64:ff:f2:28:6b:a1:b9:
         70:9d:a1:64
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUNBI6uSYrSmG0x6uIf+pFo9nPJA8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMDI2MDQ1NDI4WhcNMjQxMDI0MDQ1OTI4
WjAzMTEwLwYDVQQDEyg4RTYxMzdDQjQwNDc3REVGOTU1MDBBRUVDQjFDQTE4RUQ0
MUQ2RDBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjtBlpz4hRdg
zkrpngWWrdVMjTGea3crMS+RI4nY38GMBOw9Oy89nxkii+Hb0G97QOApNT49MsPu
qB/LSAPkD7DVbkpZpwzyP046tlGBBjqFTpFeVCqcXl+0jxE5GS6tUBYoNsjF0//r
GmHHsU339YTzIvONicC90IHfjtv+UsLKbAOLSdBt6+wacBf8iWSjK7rqX4T1EXED
wPElelBtKKtWCvj7oTzMgi+6MOf3Jwt+W7is2CtUSUM9DgcqYS44A/Iyswd7hJBM
7WQ3sT7LfnryVaWQVKdBH/XnQDhudtuvyS++PNlq36gSUnYiwd/m2VDaS36tt7iR
FaZjV9hEUwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFI5hN8tAR33vlVAK7sscoY7U
HW0NMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzQvMzIzMDM5MmUzNzM0MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMzMzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0UoIMA0GCSqGSIb3DQEBCwUAA4IBAQAx
qBOIy27qxyvwhEUAdX8bxe0X287IURrSQELHwa9PiTXso0o5Qz40aCYKD39jqSrg
RfbYo7zPhC+pDh0MWBjI0qTjyU7xbmQYWXTW64M+NjXb/pZhK2tC1nCVFPFNgRIF
sKyegn2Am9+lhE3US/WH5Jz3iG8ZnAuuFNSxdTnyjBeae0J84J7a4h06RXEW8N1f
kNs2YUc7gXBI/jIsWp89FX9jp+ugPsO30k1Pf0P13z/Hf9SRnsdCns8BkLIVUT3Q
MUwQ2mBPLwH6eYgZzmFn/c/ETBEW12cbq/NV/rqly9P4Xo8mifo4y/KMZw6x32K0
+HUOr2T/8ihroblwnaFk
-----END CERTIFICATE-----