Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31372e302f32342d3234203d3e2033353933.roa
File:                     37342e34332e31372e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          2ne22aLN++tm1ttEyqcapaGqDPnQ8Qha2Qsvcggaxmg=
Subject key identifier:   CB:11:04:CC:5A:3D:DF:6D:C3:D9:35:89:FD:EB:6C:74:A7:3A:AC:69
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       5C393C80260E7C2B2F77C9633C380C7C2675192C
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31372e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:24:22 +0000
ROA not before:           Thu 26 Oct 2023 04:19:22 +0000
ROA not after:            Thu 24 Oct 2024 04:24:22 +0000
asID:                     3593
IP address blocks:        74.43.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:39:3c:80:26:0e:7c:2b:2f:77:c9:63:3c:38:0c:7c:26:75:19:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:19:22 2023 GMT
            Not After : Oct 24 04:24:22 2024 GMT
        Subject: CN=CB1104CC5A3DDF6DC3D93589FDEB6C74A73AAC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:2c:e4:d2:02:c1:07:f6:84:c8:11:af:8e:
                    0b:71:bc:77:dd:1a:06:32:93:56:73:33:5e:e8:ae:
                    98:0a:68:b8:ac:62:2c:6c:08:74:33:e6:7b:a8:19:
                    3d:af:67:2c:ef:73:c1:d2:2e:b9:11:8f:c9:50:71:
                    85:3e:73:53:dc:08:70:a5:60:90:16:9c:e2:b1:43:
                    1e:76:c0:9f:8d:4d:c4:52:2a:97:96:ac:d8:55:ea:
                    d0:10:12:c4:99:9f:0b:59:b2:4b:a5:42:d7:0a:37:
                    fc:c7:e5:80:40:8e:f9:15:34:bc:34:8c:c9:77:71:
                    7e:63:26:39:ea:df:af:b7:5e:d8:03:c4:cd:f6:c5:
                    76:6a:90:64:65:fb:ff:7f:9b:b3:21:13:f9:7e:35:
                    5e:d2:7f:9f:9a:88:28:e9:0c:db:fc:a2:41:56:85:
                    42:30:37:c8:c7:8c:7f:57:52:7d:0d:09:9e:73:3e:
                    e7:59:b0:0f:94:4e:a3:80:ab:c5:b0:9e:f3:8b:9e:
                    ab:6c:16:70:2d:4b:27:71:d3:c0:71:1f:80:d3:f8:
                    b8:6e:25:c3:dc:83:fc:32:f3:55:80:a3:72:b3:b3:
                    81:13:3b:91:48:4b:d3:ec:dd:c2:cd:62:3f:92:15:
                    6c:6c:85:32:f0:6d:a4:11:ac:ed:6c:50:98:fd:5d:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:11:04:CC:5A:3D:DF:6D:C3:D9:35:89:FD:EB:6C:74:A7:3A:AC:69
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e31372e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:54:73:58:b8:6f:56:58:ab:ec:29:28:02:36:a9:b2:f6:8e:
         2b:14:69:f8:55:a6:97:7e:32:f9:4b:7e:4f:fe:4f:3e:37:3b:
         f2:3f:b0:86:4a:d5:90:a2:71:b9:ba:5b:76:de:d5:eb:f0:6a:
         64:bf:39:62:02:02:3e:d0:55:a7:7e:f8:14:e5:14:e3:13:5e:
         2b:69:d3:d9:38:ab:d4:55:3b:90:8a:cd:15:00:c9:5d:ca:53:
         38:3e:0d:c9:52:bf:0e:ec:c7:9b:86:d4:14:60:81:be:21:d5:
         82:2a:4e:a9:cc:99:aa:ea:c2:6f:8e:a5:bc:e9:58:b7:b6:69:
         7f:af:1d:d7:f0:ca:42:58:e7:fd:8c:21:87:54:66:1e:15:54:
         94:8e:a4:3b:03:7b:a2:51:d8:3d:12:83:77:3e:4e:3d:22:4b:
         45:70:72:35:86:a3:39:53:2c:87:f7:60:cf:fe:54:3f:66:06:
         fa:31:83:bc:cd:94:82:0e:de:54:1b:b1:32:23:45:cc:50:0d:
         7f:00:df:c7:6d:5f:c6:c1:ff:ab:07:b1:05:9f:9d:21:8b:7c:
         31:b8:d4:95:81:1b:7a:7a:fd:b5:9e:fc:b0:1d:0f:98:1f:64:
         22:50:e0:96:b6:ac:ab:14:0e:11:f2:c0:dc:1e:b1:25:20:ad:
         ce:44:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----