Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130342e3136382e302f32342d3234203d3e203236313237.roa
File:                     35302e3130342e3136382e302f32342d3234203d3e203236313237.roa (raw, json)
Hash identifier:          P9LTyGXyEdqQZUlST1MTVDU6eLhQYKzEM5C3kzpYDTs=
Subject key identifier:   87:38:A9:C7:2B:7D:A7:10:28:8D:FF:F2:AA:16:21:A6:46:2A:A3:E2
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       0D304DC7E4B8CE9FBC41AF362400BFC77B478355
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130342e3136382e302f32342d3234203d3e203236313237.roa
Signing time:             Wed 12 Jul 2023 13:14:44 +0000
ROA not before:           Wed 12 Jul 2023 13:09:44 +0000
ROA not after:            Wed 10 Jul 2024 13:14:44 +0000
asID:                     26127
IP address blocks:        50.104.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:30:4d:c7:e4:b8:ce:9f:bc:41:af:36:24:00:bf:c7:7b:47:83:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jul 12 13:09:44 2023 GMT
            Not After : Jul 10 13:14:44 2024 GMT
        Subject: CN=8738A9C72B7DA710288DFFF2AA1621A6462AA3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:5b:00:c5:29:6d:29:e0:eb:09:79:4a:f6:
                    1c:a4:e4:ea:27:ee:d0:6f:9c:c5:a7:40:1f:c5:87:
                    0f:3f:6a:27:c9:d9:80:2c:2b:4e:6b:3f:9f:22:10:
                    2f:02:40:1a:c6:3e:a5:54:2a:c4:e7:53:4b:35:6c:
                    12:36:65:85:4f:5c:65:d5:59:03:5d:52:51:35:68:
                    c4:c7:a6:80:f4:87:64:39:c1:65:2f:dd:b1:92:e1:
                    db:46:14:bb:5b:6e:6e:75:bf:65:60:75:eb:68:d9:
                    26:f0:75:d7:18:9d:8c:db:2f:aa:2a:e6:32:f4:9f:
                    aa:54:18:56:d2:14:fc:1c:80:c1:2c:7b:e6:18:34:
                    80:23:cb:bf:6d:f3:61:ae:a2:fb:9b:0f:dc:0e:66:
                    46:0b:9a:c0:47:7d:14:f6:9b:e6:10:ab:04:8a:f9:
                    e7:f9:89:36:76:ef:26:87:68:f5:14:88:ab:cf:26:
                    30:0e:92:7c:2a:3b:f6:83:94:63:58:88:8c:4f:c9:
                    51:89:3f:6e:ed:15:1d:16:dd:70:1d:6f:8b:dc:e6:
                    8c:7b:7c:fb:6f:76:1d:03:06:96:c4:39:7e:5d:e0:
                    d2:6e:60:11:45:69:04:df:02:8f:b0:52:04:a7:30:
                    16:5a:7a:ec:4c:0c:8f:1b:9f:87:3a:29:b5:d1:75:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:38:A9:C7:2B:7D:A7:10:28:8D:FF:F2:AA:16:21:A6:46:2A:A3:E2
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130342e3136382e302f32342d3234203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.104.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:2d:aa:29:8b:f3:13:75:04:6a:e6:1a:c0:2b:ee:96:5a:bd:
         a9:bd:92:9e:ea:b1:44:83:67:cc:75:25:82:e5:e0:c5:9d:5a:
         8e:be:5c:af:da:25:36:2c:43:f3:b4:1f:1a:0f:d7:35:76:41:
         94:98:42:49:a4:5c:fa:9d:f9:be:b5:28:d7:60:94:f9:f6:cd:
         36:f3:7a:16:9a:47:40:3a:16:e1:1d:77:ff:dc:53:be:a9:77:
         c9:2c:02:12:7d:77:3a:3a:f4:f7:e0:0b:b4:be:dc:01:c1:a7:
         d9:2f:ba:b7:12:21:ad:6f:2a:c0:8f:d5:c4:da:ab:b5:ec:b5:
         3a:0a:20:e4:a5:bd:a1:b1:d1:a8:16:61:f5:88:8b:7c:e2:bc:
         a4:fc:6c:2e:c7:fd:7c:f5:93:b6:d4:cd:07:31:6f:bd:e9:63:
         60:19:56:87:ba:46:45:af:80:bd:21:fa:4f:d8:b4:ab:f9:45:
         dd:06:04:9d:07:1a:9a:03:72:0e:95:9c:c7:8e:c4:84:ed:ac:
         aa:66:ef:f6:07:3b:e8:07:00:62:07:52:be:e7:b6:c3:8a:96:
         6d:66:ae:e3:c8:d2:03:9f:66:a2:17:7c:a2:fd:cf:f9:f1:1d:
         81:ba:3a:fc:42:66:26:38:63:43:ab:76:62:c8:0d:34:47:48:
         31:67:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----