Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34302e32322e302f32332d3233203d3e203236313237.roa
File:                     37342e34302e32322e302f32332d3233203d3e203236313237.roa (raw, json)
Hash identifier:          VSF5TCg9aa4f6OM7ifJVBCtvPCmKHM8ihpfNmJBQcjA=
Subject key identifier:   F5:4E:80:BE:9B:67:8D:CD:E7:28:A2:64:95:74:98:55:8E:2B:21:7D
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       5F75D0417B828F08E09C8EBF50AFD7CC3E31C5B5
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34302e32322e302f32332d3233203d3e203236313237.roa
Signing time:             Mon 02 Oct 2023 19:16:33 +0000
ROA not before:           Mon 02 Oct 2023 19:11:33 +0000
ROA not after:            Mon 30 Sep 2024 19:16:33 +0000
asID:                     26127
IP address blocks:        74.40.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:75:d0:41:7b:82:8f:08:e0:9c:8e:bf:50:af:d7:cc:3e:31:c5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct  2 19:11:33 2023 GMT
            Not After : Sep 30 19:16:33 2024 GMT
        Subject: CN=F54E80BE9B678DCDE728A264957498558E2B217D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:cb:bc:81:64:b9:fa:fe:3d:01:48:ef:e8:
                    d5:32:24:7b:eb:36:8e:df:5c:b4:c6:3d:82:3f:eb:
                    ca:80:4f:b3:d8:e8:35:d9:02:96:e6:6e:ea:79:0b:
                    17:e1:bd:d5:d2:5f:44:01:38:5f:30:ee:e2:96:8a:
                    1a:00:c6:97:25:4a:42:85:2c:b9:f3:f4:1e:57:16:
                    58:72:d4:ab:9a:71:f4:0d:a7:c8:0a:5c:8e:62:53:
                    33:a0:ad:86:49:5d:c8:43:2d:53:ee:48:e8:20:ef:
                    a0:85:d7:d1:fd:99:08:a4:f3:d2:8b:fc:66:82:79:
                    91:9b:e4:47:04:c5:02:2a:71:c0:12:7f:83:5f:89:
                    16:e0:74:0f:fc:62:94:80:0c:e4:9a:94:77:d4:72:
                    25:f1:03:07:b6:9b:94:c3:34:b7:69:2f:db:89:82:
                    74:03:9e:b0:f6:9b:2d:0e:6d:71:f1:f5:17:d0:aa:
                    d2:2d:ca:67:07:59:1e:65:b9:9c:be:53:88:25:20:
                    dc:59:2a:e4:ec:bb:bd:19:0e:24:fb:a9:4c:f5:2e:
                    e5:0b:94:f6:41:43:34:23:d6:1f:8a:87:52:61:4b:
                    45:43:14:91:2c:76:71:ab:39:98:f7:4a:a3:fe:07:
                    f3:69:af:ef:8d:fa:76:1b:79:78:7e:f2:eb:8e:0d:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:80:BE:9B:67:8D:CD:E7:28:A2:64:95:74:98:55:8E:2B:21:7D
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34302e32322e302f32332d3233203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.40.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:77:bb:90:1d:f2:c5:6a:66:33:01:62:76:d7:54:35:0b:3f:
         24:e6:41:44:f0:48:55:00:17:80:15:6c:ec:62:6f:83:97:af:
         fc:cb:8a:6a:48:47:46:65:22:9b:65:1e:06:de:f9:51:ba:1f:
         3d:15:77:6c:4e:26:77:54:a2:b4:fb:e5:3c:32:3a:4f:3a:82:
         93:7f:45:19:c7:18:3e:4e:73:9d:77:6d:bd:b4:d2:27:b0:f2:
         fb:71:ed:2e:f3:c3:8a:5a:d0:57:03:f1:9d:aa:c2:b3:95:09:
         06:9e:15:9f:92:97:e9:ce:52:28:8a:9a:ab:d9:a7:9f:74:78:
         c0:ce:59:56:16:48:eb:8f:5e:8a:aa:73:f2:49:2c:83:a8:f6:
         c8:f9:cd:e5:3d:ac:01:35:0e:dd:9e:9a:c4:53:a4:27:5c:c7:
         4b:ea:79:a7:c1:a4:75:a8:ff:38:e4:7c:5d:8c:c4:42:66:6b:
         64:2f:89:97:16:c5:5d:30:b4:68:2d:89:47:06:15:05:b4:17:
         7b:a6:c8:91:6a:76:07:88:06:e5:8e:ed:d3:65:f1:72:fe:bc:
         f9:d1:ff:c3:12:33:c0:ca:81:a0:e7:fd:9f:25:3a:f3:45:b6:
         24:47:48:9e:37:e5:08:f0:14:17:8c:94:f0:10:bb:d3:bf:a3:
         e6:d1:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----