Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31322e302f32342d3234203d3e2033353933.roa
File:                     37342e34332e31322e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          YlX1HLoRVdPXekVrtnINCNEjUXaafDrY14mBwBv1wKQ=
Subject key identifier:   A2:96:66:ED:33:97:42:6A:0A:7E:AB:50:A0:7B:CE:E5:C8:C2:8E:C8
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       083288EC5C3A13574925A1198AB170E495D5E7
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31322e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:24:05 +0000
ROA not before:           Thu 26 Oct 2023 04:19:05 +0000
ROA not after:            Thu 24 Oct 2024 04:24:05 +0000
asID:                     3593
IP address blocks:        74.43.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:32:88:ec:5c:3a:13:57:49:25:a1:19:8a:b1:70:e4:95:d5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:19:05 2023 GMT
            Not After : Oct 24 04:24:05 2024 GMT
        Subject: CN=A29666ED3397426A0A7EAB50A07BCEE5C8C28EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3c:bf:ad:54:85:97:2c:98:8f:c7:21:0b:03:
                    6e:99:dd:6c:ed:97:ca:6a:a7:9d:dc:75:34:d3:c7:
                    7a:93:0c:82:75:13:d9:2d:2f:e8:5f:0f:64:f5:eb:
                    08:87:af:08:fc:b2:94:a0:fa:af:bf:51:4d:d1:7a:
                    f4:8b:49:33:f0:b3:dc:b8:78:07:cc:ec:1b:03:95:
                    71:bf:9f:f7:5f:a0:cf:b2:12:c6:02:92:6d:73:8f:
                    01:cd:b6:46:99:97:91:16:e0:db:63:63:6e:b0:77:
                    24:30:64:a6:ae:aa:1d:99:d9:92:97:6d:f2:0b:ee:
                    05:e2:00:c6:25:16:0b:51:63:b7:fc:8e:ec:a1:7b:
                    04:af:0b:eb:93:bb:aa:f4:e5:9a:66:05:08:2e:ce:
                    fd:07:79:66:e5:a8:c5:91:d8:02:0c:f1:48:82:f8:
                    4b:09:a1:ae:97:77:94:08:79:14:21:d2:39:3c:19:
                    92:bb:79:aa:11:63:ed:ff:f9:cd:c1:33:1c:90:1f:
                    fc:37:a9:21:22:34:f0:9a:fb:b6:18:bc:73:2a:2f:
                    b1:b6:91:52:ee:59:70:f8:4d:c7:23:17:82:24:52:
                    ce:89:a5:3e:89:58:c4:83:32:21:f7:4e:18:21:5e:
                    49:7e:08:72:04:88:2e:ad:6f:0e:64:d3:8b:11:34:
                    a3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:96:66:ED:33:97:42:6A:0A:7E:AB:50:A0:7B:CE:E5:C8:C2:8E:C8
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31322e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:d7:95:1a:93:d6:2d:d0:e0:b2:9d:ff:19:e8:88:27:c7:1c:
         f4:2a:72:31:6d:ee:3f:bd:58:78:0b:25:64:d1:45:5a:e5:0d:
         b3:a4:a0:14:88:90:26:95:c8:a1:51:ff:5e:40:9b:13:f6:67:
         fc:eb:98:16:b5:dd:8e:ee:ef:14:9e:fa:f8:b7:ef:79:6d:76:
         e5:bf:15:18:02:49:09:ae:10:0b:10:9b:2c:af:fe:97:d8:51:
         ff:27:57:5f:4e:6b:ec:5d:47:c9:db:35:09:fe:63:e9:31:bb:
         5b:22:d7:fc:95:12:e1:21:3e:71:7b:ed:ba:71:a3:01:f9:9d:
         fd:a6:5b:13:2d:ab:7a:34:34:5b:a5:fb:de:dc:d7:24:28:90:
         94:6f:11:c3:4a:47:3f:69:5d:e2:13:8a:cc:fd:69:f0:f3:f1:
         dc:3d:9c:43:9d:d2:75:29:e1:91:58:9e:76:2d:be:bb:5c:d5:
         cb:3c:a6:9b:be:65:90:85:a0:16:69:64:ce:f1:c4:60:e2:84:
         57:fa:d9:d3:41:90:23:2a:26:d9:21:c9:4b:3d:51:89:b6:77:
         f7:3e:47:b5:29:3f:c2:5b:8d:30:28:1a:83:64:2d:7a:46:13:
         dd:d9:4c:b2:4a:00:df:42:35:23:53:0a:b7:4e:0f:79:e3:2e:
         6d:2a:55:65
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgITCDKI7Fw6E1dJJaEZirFw5JXV5zANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJkZmUwOWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYx
NmFiZTc1NWM5MzM4NTc3NTAeFw0yMzEwMjYwNDE5MDVaFw0yNDEwMjQwNDI0MDVa
MDMxMTAvBgNVBAMTKEEyOTY2NkVEMzM5NzQyNkEwQTdFQUI1MEEwN0JDRUU1QzhD
MjhFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwPL+tVIWXLJiP
xyELA26Z3Wztl8pqp53cdTTTx3qTDIJ1E9ktL+hfD2T16wiHrwj8spSg+q+/UU3R
evSLSTPws9y4eAfM7BsDlXG/n/dfoM+yEsYCkm1zjwHNtkaZl5EW4NtjY26wdyQw
ZKauqh2Z2ZKXbfIL7gXiAMYlFgtRY7f8juyhewSvC+uTu6r05ZpmBQguzv0HeWbl
qMWR2AIM8UiC+EsJoa6Xd5QIeRQh0jk8GZK7eaoRY+3/+c3BMxyQH/w3qSEiNPCa
+7YYvHMqL7G2kVLuWXD4TccjF4IkUs6JpT6JWMSDMiH3ThghXkl+CHIEiC6tbw5k
04sRNKN3AgMBAAGjggKrMIICpzAdBgNVHQ4EFgQUopZm7TOXQmoKfqtQoHvO5cjC
jsgwHwYDVR0jBBgwFoAUysEdjnn0TOPy6AsUad2xk1WL0vkwDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEyZjA5N2YvNC9D
QUMxMUQ4RTc5RjQ0Q0UzRjJFODBCMTQ2OUREQjE5MzU1OEJEMkY5LmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMtYmRhNy0xYmUyMDQ5
MzNhZTUvMDZhZjI0ZTctMWMxMy00NDMwLWJkNzktZGIwNWY2ZGMwNjQzL2RmZTA5
YzIwNzc4ODZiMTA0YTlkZTUzYmY2MWJjYjkwNjE2YWJlNzU1YzkzMzg1Nzc1LmNl
cjCBmwYIKwYBBQUHAQsEgY4wgYswgYgGCCsGAQUFBzALhnxyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5
MGEyZjA5N2YvNC8zNzM0MmUzNDMzMmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzMzNTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBABKKwwwDQYJKoZIhvcNAQELBQADggEBAC3X
lRqT1i3Q4LKd/xnoiCfHHPQqcjFt7j+9WHgLJWTRRVrlDbOkoBSIkCaVyKFR/15A
mxP2Z/zrmBa13Y7u7xSe+vi373ltduW/FRgCSQmuEAsQmyyv/pfYUf8nV19Oa+xd
R8nbNQn+Y+kxu1si1/yVEuEhPnF77bpxowH5nf2mWxMtq3o0NFul+97c1yQokJRv
EcNKRz9pXeITisz9afDz8dw9nEOd0nUp4ZFYnnYtvrtc1cs8ppu+ZZCFoBZpZM7x
xGDihFf62dNBkCMqJtkhyUs9UYm2d/c+R7UpP8JbjTAoGoNkLXpGE93ZTLJKAN9C
NSNTCrdOD3njLm0qVWU=
-----END CERTIFICATE-----