Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213349.roa
File:                     AS213349.roa (raw, json)
Hash identifier:          4DpC91XYzX2rL21Qc7lybIF26tGJVDxvUBQA1SoegkQ=
Subject key identifier:   1C:BE:F3:7C:DF:4D:4D:05:E6:D1:7B:60:15:8F:7A:B2:F4:12:1C:E6
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4E9E6C7C65C62D55545F4B357D48DC5E47308E91
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213349.roa
Signing time:             Wed 24 Jul 2024 19:47:27 +0000
ROA not before:           Wed 24 Jul 2024 19:42:27 +0000
ROA not after:            Wed 23 Jul 2025 19:47:27 +0000
asID:                     213349
IP address blocks:        74.50.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 00:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9e:6c:7c:65:c6:2d:55:54:5f:4b:35:7d:48:dc:5e:47:30:8e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 24 19:42:27 2024 GMT
            Not After : Jul 23 19:47:27 2025 GMT
        Subject: CN=1CBEF37CDF4D4D05E6D17B60158F7AB2F4121CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:77:27:4e:5a:33:0b:d3:60:3c:6d:ff:84:
                    a1:e5:c6:b3:dd:f8:ff:b3:96:df:60:e0:69:b4:c6:
                    f1:72:ea:d2:12:74:a4:c8:a9:f0:e2:b5:28:74:40:
                    9e:57:2c:a3:c8:2e:54:86:75:21:db:58:23:73:0f:
                    11:c8:cb:fe:18:b8:3c:d0:8c:cf:7e:1c:c8:6b:c4:
                    fd:ec:80:86:04:2b:54:84:18:ff:e3:24:fd:1f:dc:
                    bf:c3:72:cc:52:44:b9:08:af:cc:64:af:a1:92:02:
                    bd:11:79:ab:9c:26:ff:54:11:3c:0c:af:a3:dc:91:
                    cb:df:7c:8b:a3:15:15:36:b1:fa:57:1d:28:a0:34:
                    6e:9e:88:e9:df:80:e0:5a:1e:2f:c2:65:cd:8d:b6:
                    8d:09:9d:67:01:c1:ed:12:f1:18:07:09:df:6d:14:
                    0b:78:cd:60:15:2d:a8:47:b3:c8:88:66:53:9f:c3:
                    11:fd:d6:9c:d7:48:f6:c5:34:0d:8f:67:83:a8:d1:
                    c9:a9:0a:c1:4b:f7:d6:b1:34:61:9c:64:33:25:23:
                    30:86:15:46:fc:67:8c:9d:e7:2d:93:20:6d:74:ba:
                    6d:b5:5c:bc:7a:1a:23:ce:5b:9f:3e:75:2a:ed:74:
                    16:d4:5e:39:b5:21:2d:df:03:33:23:a9:2f:b5:df:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BE:F3:7C:DF:4D:4D:05:E6:D1:7B:60:15:8F:7A:B2:F4:12:1C:E6
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213349.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:d3:25:94:cd:b5:8c:6e:36:91:e2:5f:3f:85:b6:46:56:
         d7:c0:1d:29:12:04:f3:9a:7d:62:a7:94:66:a2:81:1e:47:76:
         cb:e1:d3:94:d9:79:d2:7a:9b:9a:90:86:cb:a9:5a:41:23:05:
         49:05:2a:bd:28:a5:37:ce:f7:53:29:47:35:78:ff:a6:08:7a:
         2a:4c:66:dc:4a:fa:b9:3c:4d:b7:23:db:84:a3:17:d8:6d:3a:
         ea:e2:1a:2a:bf:ce:5e:4a:27:51:44:f5:40:f9:36:c0:db:0c:
         8d:63:0e:8c:b2:aa:7b:d6:64:eb:3f:14:10:ff:7b:f6:d7:f0:
         65:50:65:15:4b:bc:05:9d:7c:a6:3c:69:2f:ba:cc:ff:26:b9:
         51:04:9c:30:d7:50:d7:bb:3c:8f:5a:da:76:e7:7e:0d:f2:ae:
         32:6e:66:7e:ef:27:a5:42:5c:a7:a0:10:99:5b:c0:6b:38:b7:
         83:0f:6b:40:03:b4:11:05:e4:0b:0f:3f:b5:c9:cc:38:f6:70:
         1f:28:15:75:18:c6:9e:50:ce:7d:ce:f5:1a:5e:26:cc:94:32:
         de:73:f4:94:f4:f0:b3:39:85:b8:6e:44:7c:b3:ce:8c:c9:dd:
         b2:7d:1b:8c:72:13:33:e3:93:5e:bd:48:4f:22:07:fb:13:e6:
         9b:98:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----