Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e39392e302f32342d3234203d3e2035363530.roa
File:                     37342e34352e39392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          wNPtrE4TgHMpf7B7T05HXcjFT4HqGrin89DZQa5lRUM=
Subject key identifier:   7C:F1:1F:E8:66:2A:60:D7:FD:D8:43:9F:3B:C3:0A:93:3E:EE:7F:E9
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       2B953DBB408C68B4F295593B34B6C974B832D54F
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e39392e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 02 Nov 2023 11:36:00 +0000
ROA not before:           Thu 02 Nov 2023 11:31:00 +0000
ROA not after:            Thu 31 Oct 2024 11:36:00 +0000
asID:                     5650
IP address blocks:        74.45.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:95:3d:bb:40:8c:68:b4:f2:95:59:3b:34:b6:c9:74:b8:32:d5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Nov  2 11:31:00 2023 GMT
            Not After : Oct 31 11:36:00 2024 GMT
        Subject: CN=7CF11FE8662A60D7FDD8439F3BC30A933EEE7FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:47:bb:4a:17:c9:1e:85:09:80:b0:4d:15:
                    dd:4a:23:74:f1:97:fc:f1:61:6a:60:8f:22:9c:e5:
                    36:ed:07:29:db:45:4f:62:92:36:23:e7:32:37:5d:
                    53:6d:10:f8:ca:cd:bf:ea:b6:b6:15:1f:bb:dc:52:
                    88:b8:ad:bd:89:0b:e7:44:1a:69:23:1a:6c:f7:fe:
                    e9:bd:cc:bf:2a:46:d7:65:a8:07:f2:87:dd:fa:a9:
                    72:56:0a:c0:5a:07:cd:88:bd:7c:45:b9:4b:b3:5c:
                    72:c8:46:66:78:76:2c:1d:bb:44:08:ba:75:3c:c6:
                    c2:9f:68:4c:cf:0c:ad:2e:3b:31:a4:65:db:4b:e3:
                    40:eb:3d:fa:d2:3d:af:e6:7a:d2:ff:4b:e1:9a:96:
                    ba:b8:32:a2:fa:c6:0c:5c:66:72:6a:30:59:7b:e3:
                    93:e5:e9:70:db:f8:6f:2a:ae:5f:e2:e3:4f:53:b1:
                    0d:61:8c:3b:e4:78:63:84:92:f2:96:06:66:2d:53:
                    c4:89:b9:d2:5d:4c:a3:d1:ee:8b:f7:04:93:06:14:
                    32:20:31:f7:27:b0:85:26:07:74:f7:d0:83:37:fe:
                    e7:89:61:7c:9c:6b:af:2e:f4:0e:bb:0f:6b:74:f0:
                    c7:f7:84:6d:c0:9e:3f:e0:aa:ef:9d:42:2c:c9:e2:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F1:1F:E8:66:2A:60:D7:FD:D8:43:9F:3B:C3:0A:93:3E:EE:7F:E9
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/37342e34352e39392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.45.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:b8:40:55:10:f9:b5:d4:80:eb:14:96:34:83:fb:5d:68:37:
         93:0f:d3:52:d2:4f:d3:55:f9:b2:eb:ae:0d:3b:f9:c9:45:ce:
         4e:aa:54:2c:04:d8:61:73:17:06:fa:58:6e:b4:d6:96:54:b1:
         94:e0:05:41:bd:61:e9:43:33:4e:db:3e:11:50:46:0c:33:4d:
         29:e8:a3:cb:ba:0a:77:22:08:2e:88:8a:bc:1c:d4:59:3f:94:
         98:f3:c0:2d:56:6d:8d:65:21:18:4a:0d:9f:e4:13:2a:9e:68:
         9d:91:bb:b6:0d:e6:25:82:b1:55:4d:43:b8:6b:99:70:e6:88:
         b0:8f:c1:ae:c4:96:b6:31:52:c0:b4:95:ea:3f:3c:34:b1:2b:
         c6:4d:15:36:f4:46:0c:9e:a6:0a:c8:e9:30:5d:be:51:74:88:
         f0:0b:90:a3:f9:0b:db:2f:48:0d:0c:ef:10:e1:f4:72:a0:d5:
         dd:e9:2e:e5:a2:f0:85:c5:5c:85:a2:13:e6:61:8e:ce:75:11:
         84:d3:ee:50:79:dd:21:c2:cc:52:53:71:af:d6:e4:71:83:f4:
         6b:f8:75:bf:66:8f:a6:37:66:dc:77:29:a1:ec:eb:3c:86:31:
         ae:fa:f5:f6:3d:b9:32:d0:cb:30:7d:ef:5c:89:a3:4e:53:7c:
         ab:e6:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----