Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16512.roa
File:                     AS16512.roa (raw, json)
Hash identifier:          NfYNqBMe1cyVId3D1fkcTBed77q+27fN3zCS3+OBuRg=
Subject key identifier:   27:DC:07:70:D2:D9:07:40:BC:D5:08:6E:DE:45:DB:0B:FA:8D:83:93
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       68EE033C6FEA92021E9E7051395791C9471D83B7
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16512.roa
Signing time:             Tue 24 Jan 2023 04:04:49 +0000
ROA not before:           Tue 24 Jan 2023 03:59:49 +0000
ROA not after:            Tue 23 Jan 2024 04:04:49 +0000
asID:                     16512
IP address blocks:        140.99.246.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ee:03:3c:6f:ea:92:02:1e:9e:70:51:39:57:91:c9:47:1d:83:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jan 24 03:59:49 2023 GMT
            Not After : Jan 23 04:04:49 2024 GMT
        Subject: CN=27DC0770D2D90740BCD5086EDE45DB0BFA8D8393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:f8:f2:99:58:44:62:d4:96:6e:3d:ce:c4:
                    40:e4:e2:f3:25:c3:2b:85:ae:f5:94:6b:4d:b3:16:
                    29:76:e0:4d:75:9b:90:cc:89:8f:b0:83:40:54:75:
                    9f:cd:43:1a:97:ce:c0:1b:6a:4e:49:9e:1b:06:6b:
                    10:5e:8c:18:8e:f3:51:54:92:6d:73:75:88:58:8d:
                    ba:43:02:35:63:78:84:f5:e7:dc:2c:9a:32:1c:e6:
                    9c:74:8c:ce:e9:76:bf:74:60:38:83:c1:96:4d:2c:
                    6a:fa:53:34:1a:a0:17:8b:87:51:53:53:0b:1a:0b:
                    05:f5:87:de:ba:43:fd:cd:00:ad:a6:c7:c2:c4:35:
                    02:17:f2:05:2f:49:3c:78:45:09:64:cc:e7:a6:2e:
                    e2:94:7a:ae:c5:47:32:a4:79:95:7b:0f:63:ef:70:
                    4a:b7:87:2a:67:1e:90:45:17:3b:7b:26:69:57:9b:
                    a3:1e:0e:f9:11:fa:9d:15:a6:a3:ea:8b:01:7f:a0:
                    f3:86:c3:6b:12:36:03:d6:e6:a6:7b:c3:c7:ae:3e:
                    33:24:fd:3b:35:74:cb:70:65:14:8d:98:59:67:92:
                    fb:33:bd:7c:75:4d:8c:2a:5d:c5:e1:4c:fc:4a:3b:
                    fa:36:89:7a:b7:9d:b9:c2:bb:a4:c7:c2:e4:7f:ee:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DC:07:70:D2:D9:07:40:BC:D5:08:6E:DE:45:DB:0B:FA:8D:83:93
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS16512.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:06:a0:28:87:6a:b0:17:db:4c:fc:c9:06:3e:ef:63:bb:
         9e:84:77:6d:d1:bd:b5:0d:14:90:07:87:76:f8:f9:41:1b:4e:
         ac:a7:5e:db:64:9e:0e:b1:87:b8:a1:ce:8e:80:36:96:86:eb:
         23:fb:05:60:99:08:fc:46:76:06:b6:7f:5e:ee:a7:90:d1:10:
         01:69:48:c5:1e:4d:d6:52:2e:e4:09:08:f8:13:c6:79:30:7b:
         a0:db:d7:11:c0:12:a8:7b:b8:43:79:0c:37:f8:a0:07:29:30:
         15:f5:1a:d5:b1:e4:2f:de:4f:d3:93:23:5e:19:ff:6a:c0:87:
         7f:ca:bb:b4:7f:ca:81:77:9c:33:f5:ce:81:3a:3d:73:f1:6e:
         e1:f6:7a:5c:c0:a2:93:da:cb:f0:d2:5c:15:ae:df:f5:08:94:
         6c:18:7b:f6:99:18:ec:c6:20:7e:1a:9f:91:6a:ec:22:1b:88:
         fb:7f:a7:6c:f7:58:45:95:f4:70:d1:86:78:ad:8a:da:61:f7:
         39:a6:03:bb:07:87:50:20:58:bf:6d:a7:c1:22:fa:83:bf:f5:
         16:33:86:6f:a5:03:29:5b:fc:f5:53:16:70:f4:c2:55:c1:14:
         72:56:8d:b1:49:e0:32:f8:df:2a:ae:2f:09:f1:d1:31:82:b4:
         ba:bc:b5:61
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUaO4DPG/qkgIennBROVeRyUcdg7cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwMTI0MDM1OTQ5WhcNMjQwMTIzMDQwNDQ5
WjAzMTEwLwYDVQQDEygyN0RDMDc3MEQyRDkwNzQwQkNENTA4NkVERTQ1REIwQkZB
OEQ4MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VX48plYRGLU
lm49zsRA5OLzJcMrha71lGtNsxYpduBNdZuQzImPsINAVHWfzUMal87AG2pOSZ4b
BmsQXowYjvNRVJJtc3WIWI26QwI1Y3iE9efcLJoyHOacdIzO6Xa/dGA4g8GWTSxq
+lM0GqAXi4dRU1MLGgsF9YfeukP9zQCtpsfCxDUCF/IFL0k8eEUJZMznpi7ilHqu
xUcypHmVew9j73BKt4cqZx6QRRc7eyZpV5ujHg75EfqdFaaj6osBf6DzhsNrEjYD
1uame8PHrj4zJP07NXTLcGUUjZhZZ5L7M718dU2MKl3F4Uz8Sjv6Nol6t525wruk
x8Lkf+4eIQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCfcB3DS2QdAvNUIbt5F2wv6
jYOTMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzE2NTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjGP2MA0GCSqGSIb3DQEBCwUAA4IB
AQAL6gagKIdqsBfbTPzJBj7vY7uehHdt0b21DRSQB4d2+PlBG06sp17bZJ4OsYe4
oc6OgDaWhusj+wVgmQj8RnYGtn9e7qeQ0RABaUjFHk3WUi7kCQj4E8Z5MHug29cR
wBKoe7hDeQw3+KAHKTAV9RrVseQv3k/TkyNeGf9qwId/yru0f8qBd5wz9c6BOj1z
8W7h9npcwKKT2svw0lwVrt/1CJRsGHv2mRjsxiB+Gp+RauwiG4j7f6ds91hFlfRw
0YZ4rYraYfc5pgO7B4dQIFi/bafBIvqDv/UWM4ZvpQMpW/z1UxZw9MJVwRRyVo2x
SeAy+N8qri8J8dExgrS6vLVh
-----END CERTIFICATE-----