Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34302e32392e302f32342d3234203d3e2033353933.roa
File:                     37342e34302e32392e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          DfNvsrbbAhoiKNM2BXDYkyujXdhpIVPZvXv+fmDV+5w=
Subject key identifier:   6F:49:E1:AC:28:54:5F:AC:6D:13:95:74:5C:EE:83:C0:FA:62:29:A4
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       502CDF8BF738EBC2EA385D66AB40A60F5581DBA8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34302e32392e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:23:49 +0000
ROA not before:           Thu 26 Oct 2023 04:18:49 +0000
ROA not after:            Thu 24 Oct 2024 04:23:49 +0000
asID:                     3593
IP address blocks:        74.40.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2c:df:8b:f7:38:eb:c2:ea:38:5d:66:ab:40:a6:0f:55:81:db:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:18:49 2023 GMT
            Not After : Oct 24 04:23:49 2024 GMT
        Subject: CN=6F49E1AC28545FAC6D1395745CEE83C0FA6229A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:fc:9f:90:bf:41:3a:8c:c0:68:f2:d2:81:
                    0c:78:6f:e1:8e:69:e4:82:b9:22:17:35:d6:96:07:
                    c8:6e:ab:9c:89:de:53:88:1b:c0:01:f0:a2:29:fb:
                    38:63:89:e1:e8:b4:83:8f:ee:aa:43:e3:89:b3:19:
                    94:0b:fb:38:ef:b8:de:25:59:9d:94:51:d4:ef:bc:
                    59:da:51:e7:1d:38:c7:6f:e6:4d:8a:a7:23:54:37:
                    9d:59:d8:dc:33:a2:83:31:6a:84:21:2f:57:46:5f:
                    c1:2e:9e:11:62:42:1e:4a:1f:40:e6:4b:6b:4a:d2:
                    60:93:51:73:b1:73:fc:94:8a:cd:57:b8:fd:4d:ee:
                    53:d0:0a:a1:11:aa:36:5d:04:5e:dc:ae:ce:e6:bd:
                    1d:1e:68:a8:ff:fc:a5:f6:b7:77:93:fb:a7:87:d0:
                    1f:a8:95:06:62:37:2c:1f:67:0f:72:94:7d:a4:7e:
                    ac:b7:0a:c0:4b:38:31:14:7f:08:ee:91:ad:62:73:
                    d8:b8:f4:ad:45:4b:24:85:be:f4:a8:9d:fa:df:35:
                    13:a3:8b:59:88:39:3f:a0:d4:c0:44:23:f7:c7:7e:
                    07:1e:2a:bf:a2:b4:19:7a:59:06:6e:73:a4:5c:c1:
                    55:9f:11:60:58:40:c2:88:75:61:15:29:e4:51:e9:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:E1:AC:28:54:5F:AC:6D:13:95:74:5C:EE:83:C0:FA:62:29:A4
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34302e32392e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.40.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:21:d9:47:ea:67:b6:e7:70:86:65:0d:63:83:54:81:ac:ea:
         54:c8:c8:73:1f:9f:58:04:9b:90:03:f9:a5:96:19:79:3c:95:
         b0:52:c9:38:87:ae:87:a4:d0:70:95:69:d5:ae:50:d5:68:ee:
         39:2b:70:df:27:e5:cf:6f:75:79:ae:d8:5e:21:35:9f:6a:9a:
         2a:44:0e:8c:e2:b5:09:87:85:da:a3:55:22:1a:cd:a8:0d:d2:
         f3:65:ab:f3:90:81:71:ff:19:54:bf:d1:c8:62:a6:83:ba:fa:
         0c:84:8d:2f:df:d5:ee:10:b2:b5:33:fb:af:96:0c:0c:41:85:
         80:1a:68:d7:12:96:c0:d1:73:ae:e0:c8:43:44:c7:79:7d:e0:
         ed:99:aa:52:0f:45:1c:4b:f2:94:8f:50:a4:7e:9a:a7:fd:98:
         fe:a7:37:2a:3e:37:65:fd:84:ad:de:42:52:f1:73:ca:2e:0d:
         cd:de:f2:b3:4b:63:93:4a:e6:b6:31:b9:7a:16:dd:73:13:ff:
         85:44:7b:de:33:9d:36:94:42:52:e5:7d:ea:8a:8a:b1:9e:21:
         a1:e4:40:68:fe:f1:6b:28:25:6d:51:46:ef:7f:64:35:0b:63:
         6e:b1:09:6e:09:96:2c:30:2f:d5:d0:fa:e2:41:76:b7:34:a8:
         7b:df:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----