Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3231362e33372e3231342e302f32342d3234203d3e2033353933.roa
File:                     3231362e33372e3231342e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          G1zyYK5DU3tGseUz0ZU6n1yHl+NQm0YwGvVEGr77IuU=
Subject key identifier:   62:F7:B7:B2:9A:8D:25:FA:5A:14:04:82:DF:2A:5E:16:2C:14:22:45
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       5CFEA67CF36192F5F39F0466016094DF55287234
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3231362e33372e3231342e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 05:02:23 +0000
ROA not before:           Thu 26 Oct 2023 04:57:23 +0000
ROA not after:            Thu 24 Oct 2024 05:02:23 +0000
asID:                     3593
IP address blocks:        216.37.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fe:a6:7c:f3:61:92:f5:f3:9f:04:66:01:60:94:df:55:28:72:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:57:23 2023 GMT
            Not After : Oct 24 05:02:23 2024 GMT
        Subject: CN=62F7B7B29A8D25FA5A140482DF2A5E162C142245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:81:67:62:8b:65:d8:61:3a:d2:d6:66:a3:
                    59:65:af:89:58:ba:f2:ff:e0:91:c2:e0:d0:c4:93:
                    c2:89:21:eb:9f:ac:a5:ed:19:0a:26:1d:40:e5:af:
                    83:d2:ea:4c:53:58:bb:9c:f9:c9:03:ce:da:97:4a:
                    5c:7d:1a:62:2a:86:52:37:a2:92:6a:a8:e4:6f:7a:
                    a6:90:2f:97:cd:b0:c3:90:8e:fa:95:1e:f6:36:46:
                    7f:38:63:4e:52:58:4a:60:9b:82:d7:8f:85:d4:10:
                    95:0d:15:4d:21:62:7c:8f:d0:d5:8a:61:dc:78:4c:
                    78:dd:3e:fc:6e:0f:bb:e8:5f:3a:c2:32:ef:85:56:
                    2b:11:a2:28:18:e2:ef:2c:62:ae:5d:5b:75:0d:e0:
                    14:f2:bc:3b:20:e8:17:9a:38:9f:fc:12:1b:9a:49:
                    ea:db:96:90:f4:94:6f:6a:33:02:cf:e6:29:c7:39:
                    b4:23:0c:d5:3c:65:b3:d4:bc:19:c1:3d:3b:7e:0c:
                    c3:41:e3:92:3c:38:6a:02:f6:8f:c6:78:49:29:3a:
                    79:88:3d:72:84:e8:16:b6:52:d0:3d:d2:eb:9d:92:
                    ec:69:1a:d8:d4:12:65:cd:6d:95:ac:60:f2:6a:90:
                    c4:ec:68:7c:70:0f:ce:ba:8e:51:37:66:bb:5e:de:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F7:B7:B2:9A:8D:25:FA:5A:14:04:82:DF:2A:5E:16:2C:14:22:45
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3231362e33372e3231342e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:ae:c7:24:00:67:c6:ab:ac:38:44:a1:ad:41:ba:47:69:38:
         e9:b5:1c:2a:0e:27:3c:25:d6:46:85:d8:7c:93:f1:64:31:72:
         f0:7b:37:bb:1e:03:83:2f:50:eb:d8:3f:44:fb:6b:dc:b7:10:
         64:e6:78:47:dd:b1:f1:34:61:07:d1:ad:bf:0a:09:32:c4:01:
         ab:f4:d4:96:21:66:27:4e:9a:59:f8:71:c2:07:48:a1:0c:4d:
         90:c4:58:fa:d3:c7:ca:b1:e0:fe:b6:34:26:09:96:39:be:69:
         30:ca:f9:f9:f1:06:fb:b5:c6:db:ed:18:39:12:67:47:33:e2:
         0b:ac:c3:cd:b3:d1:db:b8:1c:e4:db:76:25:c8:13:87:ef:55:
         e6:e6:6d:a3:a0:a3:b6:aa:e9:4e:66:4a:3f:81:4c:b0:22:29:
         82:ea:77:8d:db:28:6e:ef:b6:36:9f:75:4a:e4:4a:b5:e1:44:
         fa:f6:55:b2:45:29:46:60:aa:6e:78:9a:9d:e9:87:76:83:33:
         5e:c7:43:fa:3d:68:31:36:82:86:d9:d5:47:a2:e9:d2:6d:59:
         67:cd:fb:bc:53:8a:e4:46:60:33:cd:9f:6c:7c:a7:56:8f:53:
         36:69:f0:d5:80:00:fb:33:75:c5:b2:e7:9e:f1:1a:f4:4f:cb:
         87:09:e0:42
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUXP6mfPNhkvXznwRmAWCU31UocjQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMDI2MDQ1NzIzWhcNMjQxMDI0MDUwMjIz
WjAzMTEwLwYDVQQDEyg2MkY3QjdCMjlBOEQyNUZBNUExNDA0ODJERjJBNUUxNjJD
MTQyMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnyBZ2KLZdhh
OtLWZqNZZa+JWLry/+CRwuDQxJPCiSHrn6yl7RkKJh1A5a+D0upMU1i7nPnJA87a
l0pcfRpiKoZSN6KSaqjkb3qmkC+XzbDDkI76lR72NkZ/OGNOUlhKYJuC14+F1BCV
DRVNIWJ8j9DVimHceEx43T78bg+76F86wjLvhVYrEaIoGOLvLGKuXVt1DeAU8rw7
IOgXmjif/BIbmknq25aQ9JRvajMCz+Ypxzm0IwzVPGWz1LwZwT07fgzDQeOSPDhq
AvaPxnhJKTp5iD1yhOgWtlLQPdLrnZLsaRrY1BJlzW2VrGDyapDE7Gh8cA/Ouo5R
N2a7Xt7wKwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGL3t7KajSX6WhQEgt8qXhYs
FCJFMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi80LzMyMzEzNjJlMzMzNzJlMzIzMTM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzNTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYJdYwDQYJKoZIhvcNAQELBQAD
ggEBAMCuxyQAZ8arrDhEoa1BukdpOOm1HCoOJzwl1kaF2HyT8WQxcvB7N7seA4Mv
UOvYP0T7a9y3EGTmeEfdsfE0YQfRrb8KCTLEAav01JYhZidOmln4ccIHSKEMTZDE
WPrTx8qx4P62NCYJljm+aTDK+fnxBvu1xtvtGDkSZ0cz4gusw82z0du4HOTbdiXI
E4fvVebmbaOgo7aq6U5mSj+BTLAiKYLqd43bKG7vtjafdUrkSrXhRPr2VbJFKUZg
qm54mp3ph3aDM17HQ/o9aDE2gobZ1Uei6dJtWWfN+7xTiuRGYDPNn2x8p1aPUzZp
8NWAAPszdcWy557xGvRPy4cJ4EI=
-----END CERTIFICATE-----