Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3234372e302f32342d3234203d3e2033353933.roa
File:                     37342e34342e3234372e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          L6aifkUfaRSGKzcbyHSA10x5RtlAPfugFXHBHI831ys=
Subject key identifier:   91:50:F9:A5:0D:AD:D3:84:39:0E:4B:D2:7D:24:D5:B9:E3:40:27:72
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       245FF00F209E2E173784541C862791E3727F64DB
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3234372e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:43:10 +0000
ROA not before:           Thu 26 Oct 2023 04:38:10 +0000
ROA not after:            Thu 24 Oct 2024 04:43:10 +0000
asID:                     3593
IP address blocks:        74.44.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5f:f0:0f:20:9e:2e:17:37:84:54:1c:86:27:91:e3:72:7f:64:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:38:10 2023 GMT
            Not After : Oct 24 04:43:10 2024 GMT
        Subject: CN=9150F9A50DADD384390E4BD27D24D5B9E3402772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:f7:ee:e6:39:44:4e:ea:b2:2a:34:fb:ee:
                    aa:2e:64:45:36:1d:18:e8:a2:f1:39:ea:a5:37:b8:
                    8e:75:78:23:94:3a:d0:3f:6a:20:8f:d6:8b:51:92:
                    8c:2b:b2:9d:e7:49:9c:6c:d0:45:86:e2:8a:c6:9c:
                    3c:89:29:60:ca:0e:b6:84:f4:67:bf:80:b6:bc:34:
                    43:b9:2a:5a:b3:6c:b6:6c:d8:39:15:c4:5e:00:6a:
                    5a:b8:5a:7b:9a:18:15:8c:e2:87:f5:d5:2d:55:92:
                    75:49:c2:b2:c4:fd:be:61:25:b1:0b:79:73:e7:75:
                    10:0c:6c:93:45:38:e5:7f:61:ea:be:9e:00:1a:bb:
                    a6:ff:e5:c0:c0:0b:18:36:b3:ae:f1:66:c4:63:78:
                    c1:67:38:8a:ed:1c:be:0b:56:00:90:59:97:cb:ec:
                    93:d0:41:7b:b1:fb:d9:3e:dd:cf:29:a2:08:50:80:
                    3d:64:f7:4c:e1:d8:ee:11:d4:a8:27:6a:01:c4:3d:
                    57:89:a5:87:3a:2a:d8:6c:6f:12:14:ee:af:50:b8:
                    29:8d:4f:12:e4:2e:71:f1:be:6c:2e:bf:d8:a5:d8:
                    77:50:6c:21:36:c8:6b:fe:7d:17:07:55:d7:8c:45:
                    55:02:5e:cd:0b:f5:73:30:61:36:1b:23:02:92:22:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:50:F9:A5:0D:AD:D3:84:39:0E:4B:D2:7D:24:D5:B9:E3:40:27:72
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34342e3234372e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.44.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:25:4b:b7:18:fd:e4:15:e7:ae:51:21:58:e4:f8:b0:13:ee:
         e4:ba:94:b2:7a:21:5a:ae:56:8d:fc:3c:b2:dc:0e:21:c0:a0:
         8a:69:31:bd:d9:51:09:dc:64:83:5c:05:76:78:37:3a:b2:89:
         85:34:10:8a:1a:0a:f8:ce:c3:7f:91:92:69:a4:38:fb:d4:b7:
         6f:83:d2:db:dd:3e:da:70:28:d4:29:49:f9:89:5e:09:68:c9:
         f0:af:21:9e:9b:3d:46:b6:b8:d0:82:62:43:5e:80:fa:b3:a1:
         e0:ec:fe:ef:9b:b8:13:cc:e1:32:40:1b:7f:a9:70:d9:d9:89:
         d6:cd:b8:cd:71:b5:48:ee:2f:4b:92:b0:25:4e:60:1f:3b:d3:
         01:6e:13:f7:70:a4:3c:3f:39:48:a5:0e:ef:60:6f:11:fe:71:
         4b:c2:1e:17:cd:87:c2:a7:6e:31:28:e8:41:86:fc:ef:4d:9d:
         6d:44:c2:37:d1:39:ba:94:4a:5b:2f:ef:92:43:69:77:d0:75:
         78:04:00:53:1a:e1:83:cf:0b:7c:53:f3:79:3b:5d:f0:53:85:
         74:cc:e0:13:b5:45:8a:dc:fa:c4:1a:bd:fc:1d:77:2c:ef:72:
         66:62:e3:48:1a:45:aa:9b:07:e7:a9:a3:e7:c2:22:a2:bd:eb:
         2c:7e:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----