Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207709.roa
File:                     AS207709.roa (raw, json)
Hash identifier:          7Q963zJiPomEubArNojHhbSx4sMCAzUukxBwuKuH0L4=
Subject key identifier:   DB:6B:AB:12:8F:A5:4C:67:C8:29:1F:F1:0F:3C:02:6C:DC:F4:B5:5A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       66D5705BA29399DAE641BBDE3694BE5004107A89
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207709.roa
Signing time:             Sun 21 Jan 2024 16:48:03 +0000
ROA not before:           Sun 21 Jan 2024 16:43:03 +0000
ROA not after:            Sun 19 Jan 2025 16:48:03 +0000
asID:                     207709
IP address blocks:        74.50.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 11:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:70:5b:a2:93:99:da:e6:41:bb:de:36:94:be:50:04:10:7a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan 21 16:43:03 2024 GMT
            Not After : Jan 19 16:48:03 2025 GMT
        Subject: CN=DB6BAB128FA54C67C8291FF10F3C026CDCF4B55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:71:df:69:12:5e:9f:cc:70:9c:bf:2e:fe:
                    d6:49:11:69:c5:ed:2f:40:2b:3d:94:d3:ac:84:9f:
                    9f:1d:10:e1:83:3e:d0:4c:e4:3d:82:5c:98:4a:2c:
                    57:49:35:d2:ce:8b:cc:71:87:16:32:2d:eb:c6:0e:
                    77:2d:d5:2d:f3:88:78:74:3e:b7:ca:b5:26:8e:02:
                    ca:07:bf:1e:9d:5f:fb:6b:a4:4d:33:2d:b8:e8:8f:
                    1f:c4:9b:c8:71:ab:24:98:0f:51:ad:06:6e:a2:eb:
                    4e:b1:93:09:bf:81:f5:0f:08:27:27:c8:70:0a:a7:
                    ac:44:e2:54:64:27:15:01:32:8b:2f:b4:57:ee:1f:
                    71:71:bf:ba:36:25:10:c8:c7:b2:1d:99:4e:2e:3a:
                    3c:a4:48:c2:e7:ea:bb:2d:52:34:a7:1c:df:c3:9f:
                    de:52:fb:1c:13:ec:27:6f:28:3d:fa:61:e2:84:be:
                    ab:13:e0:dc:89:7d:24:7c:1f:dd:20:5f:59:ff:c4:
                    e9:bd:e6:26:87:7b:d8:bc:bf:a3:13:14:3c:d4:ee:
                    22:67:ac:d8:90:ef:70:b3:b6:d9:4e:ed:64:41:60:
                    47:be:6a:3b:a3:98:21:b1:46:37:d4:05:71:21:02:
                    80:94:9a:44:4c:94:ac:5d:7b:02:da:80:6a:f4:ef:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:AB:12:8F:A5:4C:67:C8:29:1F:F1:0F:3C:02:6C:DC:F4:B5:5A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207709.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:88:dc:2e:1f:cb:7b:f5:c3:a6:34:d3:90:4f:06:b8:ee:c9:
         68:76:cf:fc:e0:5c:68:9f:57:88:a8:43:8d:47:17:00:91:28:
         1e:81:45:72:c3:07:67:0f:35:e4:fe:96:0f:1e:93:3b:40:68:
         f3:1c:96:9f:d8:ec:e9:9a:fb:f7:d6:d4:4d:ac:14:cc:06:11:
         07:69:50:ee:0d:ff:e4:e8:51:ab:82:1d:80:6a:d3:f3:96:1a:
         14:37:0f:6f:fe:4d:e3:7c:5e:9f:12:99:92:32:40:71:fb:f2:
         af:5e:d8:51:8f:e2:f3:4c:c6:da:74:38:56:0d:fd:84:41:5c:
         be:9b:64:51:01:fc:8e:dc:cc:69:e1:72:33:db:33:ff:a8:bd:
         ba:e6:63:b6:b4:7d:09:6b:fb:d7:d1:a2:4a:54:2b:44:30:32:
         a5:c9:b7:8a:af:77:0d:ce:61:56:e2:15:56:db:b3:23:e7:69:
         47:a9:9a:3a:9d:8f:cb:9b:40:89:27:53:43:70:0c:99:41:b9:
         c3:f4:54:d2:ca:7d:f6:2c:eb:16:0a:4e:8f:b0:dc:0d:7a:00:
         a5:b3:92:9f:16:e9:8d:af:3b:68:02:7a:c2:43:79:fe:33:58:
         6f:8e:43:ba:e5:f9:35:61:57:cb:ce:fe:2f:99:09:80:42:04:
         99:e4:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----