Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132302e3139392e302f32342d3234203d3e2033353933.roa
File:                     35302e3132302e3139392e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          AeHIECfHqXNLG6hX2t3thF6HB1Ovy/A5QyhkvLqVZWw=
Subject key identifier:   7B:8D:0D:31:58:8A:7C:0F:1B:28:A6:A1:2C:3C:58:35:EF:01:9D:A5
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       5E224A0EE1215A983F58A180A6F4CF0903B0FF13
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132302e3139392e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:11:54 +0000
ROA not before:           Thu 26 Oct 2023 04:06:54 +0000
ROA not after:            Thu 24 Oct 2024 04:11:54 +0000
asID:                     3593
IP address blocks:        50.120.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:22:4a:0e:e1:21:5a:98:3f:58:a1:80:a6:f4:cf:09:03:b0:ff:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:06:54 2023 GMT
            Not After : Oct 24 04:11:54 2024 GMT
        Subject: CN=7B8D0D31588A7C0F1B28A6A12C3C5835EF019DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:ea:22:f1:a1:eb:fb:4f:83:c8:05:81:f9:
                    e3:a0:f6:45:6c:86:16:36:f8:c4:16:d2:fc:c6:69:
                    b8:d3:b1:ee:98:a3:c3:59:16:e8:9a:82:64:95:33:
                    e2:a3:09:b7:0f:79:d7:cb:87:b1:f4:3b:93:05:a8:
                    f6:5c:65:8e:6f:d6:3e:8e:7e:3e:02:61:d1:dc:dc:
                    7e:b4:be:d2:35:65:53:7b:07:c4:d0:0b:1b:40:f6:
                    38:29:9e:5d:9f:11:7c:26:ce:43:50:75:26:9e:6a:
                    a6:93:73:4f:c6:34:26:a1:a1:16:65:0d:37:c6:44:
                    06:3b:34:a2:a7:19:2d:57:53:bf:97:39:92:0a:e8:
                    90:57:ea:31:99:07:64:26:51:1e:d6:8b:ca:db:10:
                    79:7d:64:57:d7:1d:08:a2:dd:c5:a5:ac:c5:a9:81:
                    a8:20:b4:16:d5:ca:71:ec:20:d4:9c:cd:3b:88:e8:
                    ea:c3:c9:a6:c0:53:b8:5f:13:6f:90:c1:5a:e0:da:
                    b7:a8:43:e1:90:d4:2a:e8:f7:94:c4:3c:52:26:5c:
                    79:bf:f7:ee:24:bc:53:19:17:a0:ae:c4:77:69:2e:
                    64:57:56:db:fd:a0:44:a8:fe:ec:f5:bd:de:a1:25:
                    db:88:81:95:82:16:07:75:52:94:e9:2a:c5:f2:c0:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:0D:31:58:8A:7C:0F:1B:28:A6:A1:2C:3C:58:35:EF:01:9D:A5
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132302e3139392e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.120.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:59:06:06:f7:da:a6:1f:cd:09:5f:45:5a:67:7b:4d:7e:50:
         4d:25:bc:56:57:83:5b:07:00:ac:07:0a:48:d3:1c:6a:38:70:
         33:20:2f:f1:51:c4:da:bb:a3:6e:27:08:0a:b4:5e:e5:8a:66:
         d6:b7:24:c4:44:8d:1c:4b:29:79:ca:e8:1a:3b:51:2e:f3:20:
         57:da:b3:9c:71:6c:71:1b:10:f5:69:7e:8f:48:1d:30:ff:3e:
         ab:2c:67:ef:c1:5b:d6:e6:2b:40:7a:12:32:af:4c:5e:34:de:
         76:15:0c:6e:da:1b:37:c7:8e:57:ff:31:9b:08:6d:ca:34:e4:
         26:28:0b:ca:10:c3:19:07:52:58:35:ed:14:54:84:98:ea:0d:
         11:2e:c6:b2:9f:ae:e8:56:d9:5c:b4:0f:70:ba:72:74:65:17:
         7b:dd:62:5c:20:f0:6b:47:94:df:a3:a7:be:ed:e4:df:3e:13:
         9b:e6:c7:05:8b:55:3f:00:8c:09:f1:56:c6:10:84:a2:7c:d0:
         a1:ef:4b:f2:b9:70:24:8a:72:ba:6b:98:e8:4c:a5:a8:c9:d3:
         04:e4:63:e8:d2:92:35:d0:10:44:1c:d5:18:05:2c:5d:32:c5:
         a5:1e:46:46:e1:e1:21:bb:87:7c:6a:0b:01:71:de:77:14:fe:
         f6:84:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----