Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3234352e302f32342d3234203d3e2033353933.roa
File:                     37342e34342e3234352e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          8NwKkIjzTQH9A0SdOAmBcg/fyy0bntyt7EkYYRxk4Sw=
Subject key identifier:   C0:D0:6E:23:AF:80:90:43:88:B1:80:3D:29:90:A9:CD:39:23:D6:0E
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       6F9A22A5E2777F7D39E02687BE331BA53EB56868
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3234352e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:42:53 +0000
ROA not before:           Thu 26 Oct 2023 04:37:53 +0000
ROA not after:            Thu 24 Oct 2024 04:42:53 +0000
asID:                     3593
IP address blocks:        74.44.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9a:22:a5:e2:77:7f:7d:39:e0:26:87:be:33:1b:a5:3e:b5:68:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:37:53 2023 GMT
            Not After : Oct 24 04:42:53 2024 GMT
        Subject: CN=C0D06E23AF80904388B1803D2990A9CD3923D60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:db:e4:2a:d6:4e:10:71:16:a6:8f:17:ab:
                    46:b4:0e:5f:63:be:47:87:81:8f:55:38:b6:43:a0:
                    06:29:c2:31:f9:cd:95:87:15:2f:e9:f7:d2:59:e7:
                    d1:48:23:d1:93:76:4b:29:5f:17:43:5d:54:42:ad:
                    1e:e0:63:f7:57:86:e8:2c:0a:bd:d3:fd:c4:d7:86:
                    9d:d9:d7:df:a8:63:d7:05:5f:9b:72:6f:72:31:56:
                    db:ef:eb:60:ad:5d:df:ef:95:7e:1c:c7:d2:1c:f1:
                    98:cc:19:e3:5f:57:36:4f:3a:f3:57:d9:d3:ff:dd:
                    dc:7b:eb:b4:34:37:9d:b5:59:fe:b7:8b:9f:06:d6:
                    72:4f:c3:51:42:42:02:f7:83:bb:3e:17:67:a4:2e:
                    e3:b2:0f:2e:49:0c:c3:cf:c1:65:6d:58:f0:3b:f1:
                    94:cf:22:37:ee:96:30:03:5b:6d:00:e4:1a:c5:7d:
                    7c:c7:f7:10:ce:a0:bb:29:0c:7d:91:a2:a5:54:e9:
                    f6:a0:08:7d:35:21:e7:7d:34:49:74:9a:7b:05:d3:
                    50:c9:b6:23:df:7a:7e:9b:91:ce:24:c8:df:ad:dd:
                    2d:9a:09:d4:dd:59:26:d7:6f:3a:20:87:17:99:8a:
                    dd:11:0b:51:29:c0:71:54:c2:03:4c:8b:ed:a1:1b:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:6E:23:AF:80:90:43:88:B1:80:3D:29:90:A9:CD:39:23:D6:0E
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3234352e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.44.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:de:11:5c:a0:4d:0e:e4:24:e0:74:0e:b2:49:ef:03:09:
         4e:9d:23:9b:6c:bd:cd:e9:0a:96:70:f3:70:9b:92:f8:c3:0b:
         fd:01:58:0f:7a:4a:c0:08:b1:24:d9:a1:50:77:b3:66:47:0a:
         3b:3e:dd:94:85:34:68:c0:ce:f2:77:e0:32:18:56:a8:67:31:
         13:49:f6:45:be:3a:2e:91:f9:0d:ba:40:0c:f2:92:42:b8:a8:
         10:9d:30:8c:5f:ae:40:d8:8d:3f:28:da:11:3c:9b:d6:ca:a0:
         63:64:37:bf:25:91:b3:64:ee:0a:0f:e8:ae:a2:94:30:09:2f:
         27:80:17:37:4e:70:24:4f:49:95:c4:00:ce:13:ab:55:17:1e:
         6b:5a:b6:f1:04:f7:fe:66:74:3e:a4:5d:8f:60:e7:e2:11:66:
         40:2a:da:ce:81:37:de:3f:95:13:0f:e6:1b:97:e3:a8:65:7f:
         ad:b8:c0:55:c2:27:7c:15:4c:1b:8b:03:3b:2b:20:88:f7:85:
         ed:ba:df:ad:1b:6e:71:79:94:d1:97:9c:50:02:db:8a:38:51:
         81:32:3a:73:c3:8c:fb:db:52:0e:71:dd:ce:94:ad:0a:91:e2:
         65:ec:49:31:cc:f5:6e:d8:5c:ca:35:71:46:b4:e5:cd:bf:b7:
         be:0f:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----