Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e33392e33312e302f32342d3234203d3e2035363530.roa
File:                     37342e33392e33312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          jmHoXWcXC6tB8+5Q819mWCLxEkT0/OIIcEYeSBUSQqA=
Subject key identifier:   09:76:07:61:7E:EE:8D:52:55:CC:E6:EF:2E:80:C5:29:44:C7:42:5A
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       474D773314C3C382B5939300E3E04043670C95DD
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e33392e33312e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:34:55 +0000
ROA not before:           Thu 02 Nov 2023 11:29:55 +0000
ROA not after:            Thu 31 Oct 2024 11:34:55 +0000
asID:                     5650
IP address blocks:        74.39.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4d:77:33:14:c3:c3:82:b5:93:93:00:e3:e0:40:43:67:0c:95:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Nov  2 11:29:55 2023 GMT
            Not After : Oct 31 11:34:55 2024 GMT
        Subject: CN=097607617EEE8D5255CCE6EF2E80C52944C7425A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:4b:66:a9:00:11:1a:eb:4c:4b:31:bc:87:
                    23:4d:2b:7f:f4:1d:21:43:a7:93:50:58:82:4c:20:
                    6a:e6:b9:4f:af:42:c3:fe:f9:82:1a:c7:f2:24:1c:
                    b7:b1:7e:15:67:8f:10:5f:a4:be:25:47:ec:20:bb:
                    94:df:14:57:49:9d:9c:09:b9:1c:29:93:84:24:8b:
                    ee:bc:5e:93:bb:ae:42:33:b2:fc:af:b0:6d:76:8e:
                    ca:c3:fa:5b:cd:f7:a2:83:45:a3:b9:25:99:e7:47:
                    4f:4b:ad:fd:27:ef:c9:c5:e1:ee:ac:6f:cf:de:65:
                    44:d0:7a:66:18:da:34:9e:f2:ad:5d:0b:48:3e:8e:
                    cf:41:31:f3:61:b6:5c:51:a7:5c:be:04:e0:b4:5d:
                    13:39:ab:bd:34:d4:d4:72:7a:10:8c:3f:b6:15:ed:
                    29:50:2c:4f:ef:7a:94:cf:79:11:bc:f2:64:68:b1:
                    3b:c9:09:15:dd:70:9f:21:b4:0a:dd:50:50:91:7f:
                    46:1e:53:78:d0:da:61:c7:50:5a:aa:9e:58:b2:53:
                    72:a4:91:a2:74:c0:4e:78:9c:20:f5:91:0e:75:2b:
                    59:56:70:b9:8a:77:b2:69:04:f2:df:c2:92:b1:0b:
                    60:b7:85:30:53:f9:0e:e5:d7:f4:82:64:02:e2:28:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:76:07:61:7E:EE:8D:52:55:CC:E6:EF:2E:80:C5:29:44:C7:42:5A
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e33392e33312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.39.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:43:ab:a0:ba:a3:6d:11:cb:f5:74:1d:33:ba:13:fc:a4:4b:
         ae:0d:15:74:90:88:30:f2:64:b1:99:61:4d:f4:3f:95:7e:bb:
         34:e3:d0:c8:a8:84:b5:54:8c:31:57:4e:38:91:26:5b:88:b5:
         a2:69:3a:7b:78:57:db:81:61:77:dd:32:3f:5e:35:6f:92:09:
         f4:fa:4d:03:9c:f9:5e:1a:bb:ec:40:08:f5:41:95:bd:58:6c:
         8e:d9:03:5c:66:53:d0:a0:cd:39:43:03:8d:3a:15:3d:ad:b8:
         44:bc:71:d8:f5:11:38:ca:91:23:b5:b9:11:a9:ca:3f:6e:7e:
         c4:cb:1f:c2:c4:58:93:23:c7:1f:72:fb:13:30:24:03:b1:db:
         87:e7:cc:01:3d:18:1f:ec:2b:3f:d5:e6:c5:c7:d0:c9:30:9b:
         ea:dc:6f:73:c9:7b:ee:b5:30:6e:74:71:81:0a:40:50:c1:88:
         b9:9a:cd:97:84:eb:d7:29:5c:fe:09:b7:63:c5:1f:c7:d6:8e:
         60:e0:e3:44:e8:ae:06:a2:01:41:64:44:a4:a4:4c:98:96:1c:
         70:ef:bd:57:c8:d7:cb:4a:93:98:ff:51:a9:93:86:11:e4:b7:
         05:31:07:71:2f:9e:cb:db:fc:1d:81:37:98:f8:90:62:c2:25:
         33:7e:75:2b
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUR013MxTDw4K1k5MA4+BAQ2cMld0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMTAyMTEyOTU1WhcNMjQxMDMxMTEzNDU1
WjAzMTEwLwYDVQQDEygwOTc2MDc2MTdFRUU4RDUyNTVDQ0U2RUYyRTgwQzUyOTQ0
Qzc0MjVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1VLZqkAERrr
TEsxvIcjTSt/9B0hQ6eTUFiCTCBq5rlPr0LD/vmCGsfyJBy3sX4VZ48QX6S+JUfs
ILuU3xRXSZ2cCbkcKZOEJIvuvF6Tu65CM7L8r7Btdo7Kw/pbzfeig0WjuSWZ50dP
S639J+/JxeHurG/P3mVE0HpmGNo0nvKtXQtIPo7PQTHzYbZcUadcvgTgtF0TOau9
NNTUcnoQjD+2Fe0pUCxP73qUz3kRvPJkaLE7yQkV3XCfIbQK3VBQkX9GHlN40Nph
x1Baqp5YslNypJGidMBOeJwg9ZEOdStZVnC5ineyaQTy38KSsQtgt4UwU/kO5df0
gmQC4iigjwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAl2B2F+7o1SVczm7y6AxSlE
x0JaMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzQvMzczNDJlMzMzOTJlMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASicfMA0GCSqGSIb3DQEBCwUAA4IBAQAI
Q6uguqNtEcv1dB0zuhP8pEuuDRV0kIgw8mSxmWFN9D+Vfrs049DIqIS1VIwxV044
kSZbiLWiaTp7eFfbgWF33TI/XjVvkgn0+k0DnPleGrvsQAj1QZW9WGyO2QNcZlPQ
oM05QwONOhU9rbhEvHHY9RE4ypEjtbkRqco/bn7Eyx/CxFiTI8cfcvsTMCQDsduH
58wBPRgf7Cs/1ebFx9DJMJvq3G9zyXvutTBudHGBCkBQwYi5ms2XhOvXKVz+Cbdj
xR/H1o5g4ONE6K4GogFBZESkpEyYlhxw771XyNfLSpOY/1Gpk4YR5LcFMQdxL57L
2/wdgTeY+JBiwiUzfnUr
-----END CERTIFICATE-----