Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e38322e302f32342d3234203d3e2033353933.roa
File:                     37342e34332e38322e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          H7mG9kOkyttQZA/khEtx9ZUaU51+cxvblMfgPOwAPn0=
Subject key identifier:   B2:D1:36:B8:1C:3E:DD:D7:1B:99:BB:D0:B4:FD:74:52:79:39:0C:B9
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       4EAE4813CDCC03E669FABE108EC6FE7105D96E53
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e38322e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:30:35 +0000
ROA not before:           Thu 26 Oct 2023 04:25:35 +0000
ROA not after:            Thu 24 Oct 2024 04:30:35 +0000
asID:                     3593
IP address blocks:        74.43.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ae:48:13:cd:cc:03:e6:69:fa:be:10:8e:c6:fe:71:05:d9:6e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:25:35 2023 GMT
            Not After : Oct 24 04:30:35 2024 GMT
        Subject: CN=B2D136B81C3EDDD71B99BBD0B4FD745279390CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:11:e4:c2:3e:83:47:b7:bc:9a:74:b4:4f:
                    3b:b1:7f:f4:d8:00:64:4b:6a:eb:19:25:45:b5:3a:
                    c9:29:12:44:a4:17:9e:e6:7f:51:29:6f:60:eb:13:
                    fc:f0:6f:d1:dc:02:c4:fa:96:07:69:8b:b1:86:63:
                    21:25:1b:bb:f3:ad:96:a7:49:6e:6c:34:fb:34:8a:
                    94:d6:13:04:31:40:c3:a3:11:e9:99:eb:f9:59:b5:
                    17:5a:23:2d:c9:3f:03:e0:e4:c6:41:cc:62:df:53:
                    61:26:ca:1f:0f:dc:ef:9d:5e:4a:f7:68:ee:f4:93:
                    79:b2:15:c3:9a:d6:ef:56:a5:52:a9:4f:c3:7c:3f:
                    2e:cf:6c:d9:65:79:e4:fe:64:be:48:d4:fa:6d:3e:
                    97:aa:ef:39:24:69:cc:9f:5e:59:1c:74:93:6e:4b:
                    3b:c1:fe:0d:8c:9d:90:17:dc:5f:0b:62:37:42:39:
                    83:3b:98:92:b5:31:c5:27:f3:26:28:3b:fe:0f:78:
                    3e:8a:fc:2d:56:bc:63:2b:08:fa:7d:34:6f:f9:ee:
                    4c:f8:05:f1:05:b7:06:9f:37:16:21:f4:4e:ea:7e:
                    f8:67:d2:ff:80:d5:c9:cd:c2:bc:e1:fa:31:ce:7b:
                    20:9f:ce:ee:07:64:db:d4:ed:99:96:48:5f:80:11:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:36:B8:1C:3E:DD:D7:1B:99:BB:D0:B4:FD:74:52:79:39:0C:B9
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34332e38322e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.43.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:aa:cf:25:10:55:c6:ca:a8:10:d0:12:86:f3:9a:4a:d0:
         8f:ab:f4:a4:78:9e:ae:11:fe:94:bc:51:f5:f9:ca:b5:16:65:
         99:ef:a8:08:7f:5b:9c:59:52:b0:ae:e4:f5:61:2e:1e:10:3a:
         df:82:c6:e0:40:05:ea:f5:2f:f7:a5:af:2d:6f:41:90:4d:39:
         55:d8:d2:4e:da:e4:7e:ca:75:82:cc:1d:31:dc:ac:8e:4a:fb:
         86:06:ae:a1:ba:62:8e:d6:f5:44:18:e7:f7:24:58:94:82:5f:
         2d:2d:c7:c6:40:19:1f:a1:3a:ef:2f:12:9b:53:18:32:d4:f6:
         1f:8c:ef:e0:7c:26:0d:c8:04:e5:eb:ec:a3:ef:73:c0:aa:b5:
         a9:b2:64:9f:a5:bc:31:39:d4:c5:9c:5f:3c:8f:b2:00:d4:b6:
         a0:64:e1:24:a8:52:26:d3:4b:0d:1a:89:2d:5e:8d:ac:9e:80:
         69:12:45:40:4b:b7:fc:69:d5:10:84:4d:2f:02:63:e3:34:92:
         46:01:16:e3:31:e0:12:e6:4f:f9:cf:da:20:a7:e5:5d:43:64:
         fe:5a:c6:d6:99:98:ee:bd:24:00:24:be:82:7a:be:01:6d:76:
         47:3d:ae:88:8b:56:56:a4:04:75:86:f1:19:f7:76:4a:7d:26:
         aa:1b:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----