Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130362e38342e302f32342d3234203d3e203236313237.roa
File:                     35302e3130362e38342e302f32342d3234203d3e203236313237.roa (raw, json)
Hash identifier:          ie44OtVY9JdGO+CWXjE3EIIMTq76BPK4biajVarsu9g=
Subject key identifier:   74:89:97:EB:60:E9:71:D2:5F:58:A1:89:D3:68:C0:4C:8C:A6:88:98
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       1A71C4B3709788A1656DEA78B50F1FBCCAC9CFFD
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130362e38342e302f32342d3234203d3e203236313237.roa
Signing time:             Fri 27 Oct 2023 16:55:16 +0000
ROA not before:           Fri 27 Oct 2023 16:50:16 +0000
ROA not after:            Fri 25 Oct 2024 16:55:16 +0000
asID:                     26127
IP address blocks:        50.106.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:c4:b3:70:97:88:a1:65:6d:ea:78:b5:0f:1f:bc:ca:c9:cf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 27 16:50:16 2023 GMT
            Not After : Oct 25 16:55:16 2024 GMT
        Subject: CN=748997EB60E971D25F58A189D368C04C8CA68898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:bd:c9:55:f8:95:c0:e8:b9:7c:b7:73:ad:
                    46:f0:aa:a3:0e:97:f1:1e:06:66:e4:b6:6c:27:01:
                    c6:8d:dd:d1:4e:f9:f9:e9:7f:ad:4d:28:0c:50:d1:
                    13:fb:3a:c4:77:73:79:be:a9:15:0c:35:d5:a4:7e:
                    fc:fb:51:3f:4a:38:21:b0:89:f0:ab:a2:8e:07:1c:
                    48:b1:1a:eb:5c:81:2c:74:21:73:bf:21:3b:4d:76:
                    b8:ff:38:2f:99:d2:c8:41:79:f2:63:9c:14:56:59:
                    3c:ce:c8:09:d5:ed:35:71:18:72:89:4e:81:2f:e6:
                    02:f6:56:a6:86:64:da:18:dd:b4:10:87:34:aa:eb:
                    89:84:36:40:36:60:27:c3:62:27:27:35:f9:9d:ed:
                    48:06:7d:cb:fc:94:e3:38:c4:54:2a:ff:86:8d:ac:
                    e2:c3:bd:b2:64:e9:5b:25:0d:e4:76:db:95:8f:8d:
                    b0:21:6f:b3:a2:f8:d9:47:03:a6:38:45:44:01:0f:
                    11:e4:18:a0:d5:de:80:3d:e5:5c:b9:b8:6b:fe:53:
                    46:67:cc:42:de:15:7c:ec:67:20:45:a6:57:cf:ec:
                    1c:a9:66:58:7b:99:27:b5:c7:b0:4b:a8:91:00:98:
                    7a:d3:0c:bc:d9:73:66:7e:af:eb:29:ce:d4:6f:1f:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:89:97:EB:60:E9:71:D2:5F:58:A1:89:D3:68:C0:4C:8C:A6:88:98
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3130362e38342e302f32342d3234203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.106.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:79:19:fc:c0:dc:5e:48:47:02:e3:1a:e9:13:4b:7c:92:
         0a:33:c0:1d:82:11:ef:7d:f6:2b:c0:ed:dc:7e:5d:a5:6a:20:
         47:81:7c:38:1c:74:ae:46:90:25:cf:13:72:de:28:ca:e2:90:
         b1:51:e0:fd:c3:08:fe:1a:d7:23:46:ba:b5:cd:49:41:42:02:
         e8:f9:7d:cc:8e:bb:6e:77:79:d2:d6:4f:1c:0e:2e:df:9d:2f:
         4b:f6:e9:f8:3e:e4:3e:fa:2f:97:4f:cb:d7:e2:69:79:e8:06:
         46:7f:65:04:a3:4a:7a:5c:9e:23:3e:73:27:d2:aa:f2:15:05:
         56:bb:24:16:6e:91:61:c5:64:52:da:43:b2:e6:cd:d4:08:70:
         d6:06:7b:0c:f0:02:84:6c:72:58:0b:d3:f9:d8:d4:92:7a:5f:
         2e:48:41:fb:58:f9:49:ff:75:5a:0f:eb:4f:92:98:4a:25:7f:
         8c:ab:7f:04:c7:71:a3:97:0f:04:d8:a2:45:bc:22:ca:70:7b:
         82:da:86:43:ad:5b:ad:d0:3b:ce:18:70:c9:fb:b4:a6:6f:d5:
         87:84:5f:1d:92:a7:f0:d1:e5:56:76:d0:37:93:80:c7:19:dc:
         aa:63:4b:e6:cd:4a:50:33:92:fc:97:cd:50:ae:5e:64:76:cf:
         23:be:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----