Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3233312e302f32342d3234203d3e2033353933.roa
File:                     37342e34342e3233312e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          AUzgTJhMTeu1Qk4MDq35c2WSjGhrFg4Vcw4bzxEfWeU=
Subject key identifier:   0B:7A:3D:FF:1A:D4:90:AA:CF:D0:A4:F6:C5:BE:AA:AE:C9:42:DE:D8
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       56090F7FCEE6FD66315766D0BD885AD136A071ED
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3233312e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:35:44 +0000
ROA not before:           Thu 26 Oct 2023 04:30:44 +0000
ROA not after:            Thu 24 Oct 2024 04:35:44 +0000
asID:                     3593
IP address blocks:        74.44.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:09:0f:7f:ce:e6:fd:66:31:57:66:d0:bd:88:5a:d1:36:a0:71:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:30:44 2023 GMT
            Not After : Oct 24 04:35:44 2024 GMT
        Subject: CN=0B7A3DFF1AD490AACFD0A4F6C5BEAAAEC942DED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:57:62:cd:19:ab:f1:d9:29:8f:2f:88:02:
                    c2:00:98:5e:a1:98:72:3d:df:58:5c:97:49:97:4d:
                    7e:21:af:84:04:f8:c1:98:9f:82:88:c5:2a:5c:c2:
                    3b:1c:d1:af:9e:1b:48:29:b2:9f:fe:22:ce:b9:a1:
                    24:0c:10:8f:61:a7:39:65:fc:9d:ac:c9:3e:06:ba:
                    d7:a7:c9:b2:b7:84:35:53:bf:b2:95:f2:94:57:8c:
                    2f:c9:07:c2:74:eb:c2:c8:76:74:2f:6b:4f:49:db:
                    c8:35:3c:bc:6d:e7:98:9b:50:9d:a9:7b:78:db:40:
                    83:6f:e3:97:7c:43:52:d8:5d:b9:ba:f3:32:a9:d3:
                    a0:e7:f6:07:f5:6a:b7:e2:05:b5:2d:49:f0:7f:1e:
                    eb:82:30:65:d7:df:97:a1:94:ea:24:18:7c:44:09:
                    8d:7f:81:e1:f7:df:3f:c1:84:e1:0d:80:7f:8d:06:
                    94:c1:aa:57:18:72:69:d1:02:62:9c:01:4e:37:d1:
                    55:30:75:b1:72:25:6e:21:7f:56:44:93:65:22:a7:
                    0c:2f:d2:7b:52:bc:9a:61:38:3b:89:9e:97:89:66:
                    b7:b2:ca:be:11:f8:10:bb:1a:10:37:60:c1:4a:91:
                    3b:00:19:4e:14:68:bf:05:8e:e0:85:7c:4d:80:45:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7A:3D:FF:1A:D4:90:AA:CF:D0:A4:F6:C5:BE:AA:AE:C9:42:DE:D8
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3233312e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.44.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:3c:7b:c2:7e:a6:8c:6e:ae:07:3c:dc:87:a8:e3:f1:c0:72:
         d4:2a:f6:a3:5c:bc:e4:bc:79:85:f4:84:d9:1f:d4:9b:21:3c:
         d8:27:f5:0c:25:1c:8a:27:03:d8:1a:13:5b:6e:54:48:66:aa:
         17:7b:5d:4a:b7:19:d0:7a:74:56:12:72:70:99:84:ab:09:4f:
         4d:57:09:f3:a9:dc:79:7b:dd:59:f9:85:07:56:5a:3d:66:aa:
         80:d6:6c:56:40:50:b7:59:fd:da:9b:0d:e9:93:50:a9:46:24:
         35:7a:7c:aa:10:26:2e:28:89:04:20:9d:04:e9:94:e1:4a:4b:
         5b:dd:d2:5a:6d:22:21:bc:87:ff:7d:08:ae:16:2c:55:f2:2c:
         18:f0:6b:63:27:a3:96:41:32:24:35:84:2c:a5:df:15:b8:48:
         d3:e2:76:7b:38:a4:68:c8:ed:37:64:85:f0:b5:51:4f:ab:e1:
         16:bf:01:b7:6b:64:fd:d5:81:5e:b7:14:54:39:b3:ef:ec:ee:
         64:45:63:60:34:36:40:5b:9a:5a:75:6b:bc:30:23:4e:3f:cb:
         99:50:d1:a1:3f:57:23:7a:6b:41:5c:fe:b1:28:35:d9:37:96:
         a2:29:5b:94:02:86:b8:b7:e4:7b:32:56:4f:04:3e:3e:c1:98:
         5e:18:13:87
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUVgkPf87m/WYxV2bQvYha0Tagce0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMxMDI2MDQzMDQ0WhcNMjQxMDI0MDQzNTQ0
WjAzMTEwLwYDVQQDEygwQjdBM0RGRjFBRDQ5MEFBQ0ZEMEE0RjZDNUJFQUFBRUM5
NDJERUQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgJXYs0Zq/HZ
KY8viALCAJheoZhyPd9YXJdJl01+Ia+EBPjBmJ+CiMUqXMI7HNGvnhtIKbKf/iLO
uaEkDBCPYac5ZfydrMk+BrrXp8myt4Q1U7+ylfKUV4wvyQfCdOvCyHZ0L2tPSdvI
NTy8beeYm1CdqXt420CDb+OXfENS2F25uvMyqdOg5/YH9Wq34gW1LUnwfx7rgjBl
19+XoZTqJBh8RAmNf4Hh998/wYThDYB/jQaUwapXGHJp0QJinAFON9FVMHWxciVu
IX9WRJNlIqcML9J7UryaYTg7iZ6XiWa3ssq+EfgQuxoQN2DBSpE7ABlOFGi/BY7g
hXxNgEXRCwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAt6Pf8a1JCqz9Ck9sW+qq7J
Qt7YMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzQvMzczNDJlMzQzNDJlMzIzMzMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzMzNTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKLOcwDQYJKoZIhvcNAQELBQADggEB
AKE8e8J+poxurgc83Ieo4/HActQq9qNcvOS8eYX0hNkf1JshPNgn9QwlHIonA9ga
E1tuVEhmqhd7XUq3GdB6dFYScnCZhKsJT01XCfOp3Hl73Vn5hQdWWj1mqoDWbFZA
ULdZ/dqbDemTUKlGJDV6fKoQJi4oiQQgnQTplOFKS1vd0lptIiG8h/99CK4WLFXy
LBjwa2Mno5ZBMiQ1hCyl3xW4SNPidns4pGjI7TdkhfC1UU+r4Ra/AbdrZP3VgV63
FFQ5s+/s7mRFY2A0NkBbmlp1a7wwI04/y5lQ0aE/VyN6a0Fc/rEoNdk3lqIpW5QC
hri35HsyVk8EPj7BmF4YE4c=
-----END CERTIFICATE-----