Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31352e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e31352e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          uwxjWXJDrSVCzjm4dy/U33VkIw/fIsoySnKTiGXqP70=
Subject key identifier:   87:AD:49:3A:3C:38:84:2A:2C:74:CD:FE:F1:2D:D9:A7:CF:A5:C3:6A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       485CE1B06753A3B6F1686EE4198E8A832287E0E9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31352e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 06 Dec 2022 16:21:13 +0000
ROA not before:           Tue 06 Dec 2022 16:16:13 +0000
ROA not after:            Tue 05 Dec 2023 16:21:13 +0000
asID:                     60721
IP address blocks:        74.50.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5c:e1:b0:67:53:a3:b6:f1:68:6e:e4:19:8e:8a:83:22:87:e0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  6 16:16:13 2022 GMT
            Not After : Dec  5 16:21:13 2023 GMT
        Subject: CN=87AD493A3C38842A2C74CDFEF12DD9A7CFA5C36A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:ca:99:26:c8:69:14:e7:f4:fb:92:af:54:
                    e1:fa:e3:1e:ac:c0:a8:d2:1f:4b:90:3d:55:56:52:
                    5d:96:c1:f7:5c:9d:b1:cf:c9:3d:ab:fd:26:0f:3d:
                    da:04:b8:bb:b2:ac:70:3b:55:0f:a7:ea:bc:be:4b:
                    1f:36:3e:1d:91:23:7d:62:61:ff:63:da:f3:73:0a:
                    61:c7:c1:ae:07:8f:3a:bc:84:2d:16:2d:51:90:66:
                    73:09:59:ff:b8:74:3d:4d:93:bb:4d:16:87:71:c3:
                    8a:7b:47:2b:4e:42:55:a6:ed:7d:f6:3c:0d:23:d9:
                    e3:90:b5:b7:ca:fe:2f:06:f8:d0:e4:7f:05:4b:8c:
                    54:ab:67:3f:79:e1:04:ec:ec:07:cf:13:d0:63:f1:
                    17:51:7e:ee:d2:ee:9e:5b:20:8d:ff:d5:c2:a8:26:
                    e2:1a:6f:40:19:2f:cd:b7:63:56:a4:0c:f7:84:fa:
                    5b:cd:e0:74:68:e1:86:0e:d8:c2:c0:79:4d:c9:20:
                    27:eb:08:eb:f7:73:c8:7c:f8:6a:f2:f0:c1:b8:e7:
                    db:d8:b1:ce:54:61:9d:9a:ea:9a:9d:a5:2d:4c:17:
                    8a:01:47:1b:71:6c:67:da:96:90:00:26:1c:71:69:
                    31:ba:f4:0d:de:04:30:8f:35:ae:c6:4b:c8:c2:dc:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AD:49:3A:3C:38:84:2A:2C:74:CD:FE:F1:2D:D9:A7:CF:A5:C3:6A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/37342e35302e31352e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:34:07:ab:19:b2:c9:4c:e0:8e:1f:eb:f8:eb:f8:c8:f6:4e:
         b7:b6:96:c3:2b:7f:11:fb:bf:8e:5f:49:ff:c1:9e:06:13:da:
         2c:e2:85:9e:6e:b0:62:16:9a:e1:b0:d9:65:0f:31:9f:dc:a5:
         1f:ae:30:27:5e:02:07:34:76:63:e7:13:aa:8f:83:32:29:b4:
         cb:37:dd:94:fc:be:00:bc:bc:35:61:14:c0:4c:77:dc:b0:2e:
         32:7a:43:39:d2:e4:09:2d:4c:7d:5f:5c:21:ce:4a:ac:9f:c5:
         cf:1e:75:cb:e0:40:b8:96:b4:04:46:96:bc:43:e1:88:56:d9:
         61:ec:a1:95:e4:b2:bc:14:ae:49:07:7b:a4:2d:e0:ce:53:99:
         7d:e6:c8:c3:68:e7:b2:18:e4:f6:78:d8:51:3d:ab:5e:e1:8e:
         5e:d5:59:5f:29:61:66:d4:d3:fe:ae:41:b7:de:1e:bb:4a:d3:
         97:b0:13:20:c3:1d:7a:81:61:d6:98:6f:c9:ca:2e:53:ee:b3:
         40:8e:45:d1:0b:a2:80:f7:ee:cd:27:09:d9:a7:7b:1f:9c:60:
         c4:d3:45:91:b8:5d:01:d0:7e:67:a2:50:10:a5:12:00:4e:71:
         78:04:e3:3d:8c:04:d6:31:df:62:05:49:0d:45:a9:eb:1c:b2:
         b7:78:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----