Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e34322e302f32342d3234203d3e2033353933.roa
File:                     37342e34332e34322e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          8iOukQ/GW+qCZui8oUkDDmJzJvLVPXsMxfjSM1UnIrY=
Subject key identifier:   85:35:5E:31:E2:3D:FE:16:64:16:95:2D:73:87:83:2C:91:7D:1B:F1
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       041AA9FE8E7D0F1F658831573EFF4DADBED9E351
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e34322e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:30:19 +0000
ROA not before:           Thu 26 Oct 2023 04:25:19 +0000
ROA not after:            Thu 24 Oct 2024 04:30:19 +0000
asID:                     3593
IP address blocks:        74.43.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1a:a9:fe:8e:7d:0f:1f:65:88:31:57:3e:ff:4d:ad:be:d9:e3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:25:19 2023 GMT
            Not After : Oct 24 04:30:19 2024 GMT
        Subject: CN=85355E31E23DFE166416952D7387832C917D1BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:c0:43:da:da:c6:5c:2d:50:f6:89:d9:2a:
                    91:e9:61:92:e5:c5:d5:3b:33:9e:e8:df:87:37:b5:
                    4d:40:25:54:c3:16:1c:01:21:be:7c:bb:7b:81:bd:
                    83:f2:ab:43:94:c9:6b:0e:56:fb:26:1e:60:05:68:
                    76:c9:01:09:37:56:8f:82:c4:5e:97:2a:c7:ef:15:
                    d4:cd:99:8b:94:ba:29:df:70:45:00:2a:fe:ec:eb:
                    10:f3:0d:c8:d2:24:05:a9:b7:73:2f:7e:a5:a5:54:
                    67:4a:cc:a8:08:32:4a:1f:d6:4d:98:80:d4:4b:99:
                    e3:2e:46:28:b9:88:70:cc:90:b2:ef:38:a8:0a:0a:
                    f6:c0:18:ba:1d:5d:8c:9e:57:d9:2f:0f:b3:02:39:
                    37:7d:5f:e4:05:c4:96:5f:e7:30:2d:40:c2:46:8a:
                    fe:04:90:23:93:bb:83:c8:03:62:30:00:a6:d8:99:
                    7b:cb:92:ae:4b:f6:60:40:fe:d7:93:d3:59:0d:d6:
                    8a:9d:6d:cb:f2:94:ac:07:4c:0b:61:31:d7:ae:c5:
                    ad:f0:8d:be:6b:4d:23:11:03:17:91:4b:ad:04:dc:
                    a9:83:09:fa:2c:e1:d7:df:47:75:26:f9:89:2a:e0:
                    3d:1b:61:c2:a2:66:38:90:a2:7e:48:a4:5b:f1:65:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:35:5E:31:E2:3D:FE:16:64:16:95:2D:73:87:83:2C:91:7D:1B:F1
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e34322e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:84:a3:d9:c3:55:31:6c:63:32:f9:c9:94:1a:bf:ac:9e:6f:
         f8:a4:58:56:ef:39:b2:f8:74:66:41:79:5e:1b:6d:5b:df:bc:
         a1:70:8a:7d:25:94:33:73:04:5f:8b:36:43:46:64:2e:4b:ab:
         66:cc:b8:ed:3b:4a:a3:2d:54:f5:42:a7:1e:ce:9f:80:c4:6e:
         3d:2f:b3:27:af:9f:0a:06:7f:5f:92:55:98:4d:4f:72:20:02:
         39:d0:ee:7f:a2:24:2d:96:19:57:7a:5f:eb:d6:7b:e0:21:5a:
         d5:97:c9:22:c3:de:ca:ff:85:fd:de:63:ee:13:99:b2:14:24:
         85:4f:3a:4e:19:99:75:2b:bb:42:4b:ad:8e:a4:c5:54:71:50:
         34:71:3f:ed:86:57:88:a0:df:be:5e:00:ef:23:8a:87:8a:20:
         90:58:bd:7f:4c:a4:84:b8:de:86:51:8b:ee:e0:40:f1:e9:fa:
         ad:0c:7d:72:74:54:60:8c:f4:82:6d:84:58:44:d4:9e:f8:b9:
         3f:7d:9a:dd:1d:12:66:a9:e7:6f:28:64:10:e6:54:ae:74:94:
         08:1d:ed:e2:ac:72:48:c8:7c:dc:d0:23:dd:5f:14:fa:59:94:
         64:42:f8:b0:1f:04:a1:8a:34:19:13:02:89:63:0b:37:7e:fd:
         85:bb:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----