Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132302e3230382e302f32342d3234203d3e2033353933.roa
File:                     35302e3132302e3230382e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          NSm8b118FHD/dE9ObqYCZLXP0gOjAs/hKnQVKyUcVDQ=
Subject key identifier:   04:E2:8F:1D:9E:AD:45:26:DB:AE:0E:82:05:6F:30:80:31:88:A5:2F
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       6D116BBFE6FA20DC0FB03707AC5EDF27328EC753
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132302e3230382e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:12:05 +0000
ROA not before:           Thu 26 Oct 2023 04:07:05 +0000
ROA not after:            Thu 24 Oct 2024 04:12:05 +0000
asID:                     3593
IP address blocks:        50.120.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:6b:bf:e6:fa:20:dc:0f:b0:37:07:ac:5e:df:27:32:8e:c7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:07:05 2023 GMT
            Not After : Oct 24 04:12:05 2024 GMT
        Subject: CN=04E28F1D9EAD4526DBAE0E82056F30803188A52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:51:c6:82:f3:b4:d3:6c:fa:95:37:b2:f1:
                    e8:b4:c7:34:a6:13:de:a1:be:53:9f:45:40:96:b9:
                    af:53:cd:89:04:62:d9:b2:25:24:65:75:a9:40:27:
                    4e:d4:f5:af:57:ff:99:27:9b:02:76:52:10:5c:61:
                    92:60:2a:f3:6c:80:b7:be:cb:73:74:23:bb:26:af:
                    9a:7b:0e:df:3d:80:57:5d:7f:84:a9:ab:8c:7b:d9:
                    6c:1d:fd:65:ea:57:6b:84:89:eb:73:9f:b8:db:ba:
                    5a:d2:4c:45:77:b4:a2:0f:0c:44:8f:72:1b:d9:3d:
                    4d:fa:56:4a:c2:e8:17:46:12:d4:03:e9:74:d7:e0:
                    7f:ab:8b:59:50:9e:ab:54:b3:57:0e:9b:3a:55:01:
                    5b:a1:21:18:fb:9b:d9:c8:a5:78:bc:94:4c:54:4a:
                    7e:81:16:4b:4d:99:1b:d5:dc:02:d3:4d:7c:9f:20:
                    23:39:61:bd:a0:0a:d0:4a:39:e9:9b:ed:f5:97:12:
                    78:1a:a3:1a:3d:2b:ea:9b:8d:40:10:0c:d2:1c:ff:
                    2f:70:6c:51:ab:2f:2b:24:47:0d:b6:d8:d4:57:fd:
                    e9:0f:8f:23:6b:fe:bc:8c:f4:4e:cc:b9:b4:99:c5:
                    72:a8:93:23:7f:4f:0d:49:02:61:49:06:64:fd:b9:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:8F:1D:9E:AD:45:26:DB:AE:0E:82:05:6F:30:80:31:88:A5:2F
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132302e3230382e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.120.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:f6:5a:d9:0a:84:c8:52:21:5f:34:19:d8:64:ec:36:1d:
         f5:37:d5:48:81:58:9a:bb:bb:4f:a5:0d:db:cb:da:98:05:2d:
         6d:2a:79:6d:7f:0a:a1:8e:7c:c5:03:df:76:98:36:f2:80:b2:
         30:e6:b8:36:0f:14:43:b5:0f:90:43:4d:a6:97:e1:15:77:a5:
         e0:e0:30:dc:36:85:f8:43:6b:90:b6:af:a9:0c:a7:0d:c1:42:
         00:50:0d:35:f7:46:d4:a7:a4:4a:b8:60:ec:b3:25:38:f7:c2:
         9b:af:ff:6a:22:68:09:93:8b:3d:c8:60:4c:eb:9c:d8:b2:0b:
         8b:3b:8f:37:8e:90:3b:53:78:d7:43:81:79:c8:50:08:a5:03:
         1b:1f:a9:c3:ab:c2:e9:7c:cc:f6:f0:a8:cb:c9:d0:80:ae:99:
         87:ad:d1:14:ef:e5:57:36:e0:eb:91:04:df:39:35:ea:0a:d9:
         af:77:2f:8e:a4:f7:ee:5a:b0:fc:dd:ea:7f:20:56:6a:98:c7:
         f9:d3:dc:48:81:d8:63:04:39:6e:39:48:3e:f7:4c:63:d8:80:
         9e:31:c1:f6:01:a3:3e:10:37:49:6e:14:cc:ad:ee:8f:0c:df:
         7d:77:7d:ed:8c:d9:48:1b:9d:cc:9a:1c:f1:81:30:72:35:d7:
         e6:ff:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----