Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS200019.roa
File:                     AS200019.roa (raw, json)
Hash identifier:          iv1HMI5mipxqqLnL2/PIO3EVyd4ffVWNWCvA8ZB8qs4=
Subject key identifier:   5D:60:15:C6:D5:43:1D:D8:79:73:DC:27:86:AB:87:FC:94:A7:63:93
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7BC9E4A5031C0743505B5393F9BAC91EBE67E46A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS200019.roa
Signing time:             Fri 14 Oct 2022 16:00:43 +0000
ROA not before:           Fri 14 Oct 2022 15:55:43 +0000
ROA not after:            Fri 13 Oct 2023 16:00:43 +0000
asID:                     200019
IP address blocks:        140.99.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c9:e4:a5:03:1c:07:43:50:5b:53:93:f9:ba:c9:1e:be:67:e4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct 14 15:55:43 2022 GMT
            Not After : Oct 13 16:00:43 2023 GMT
        Subject: CN=5D6015C6D5431DD87973DC2786AB87FC94A76393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:7a:86:f3:fb:88:1b:48:df:60:13:34:3a:
                    65:e1:1b:8e:f3:58:d1:42:aa:d8:cb:9c:1e:4c:9a:
                    9b:45:60:e9:4e:9a:f5:12:43:f8:f3:7d:54:3f:41:
                    c2:7b:c7:a0:40:8c:b3:ec:5a:1c:59:f1:4b:38:9f:
                    f1:f6:64:ca:31:36:37:3a:38:38:35:d7:aa:bc:8c:
                    06:42:dd:e0:c0:c1:b7:91:24:12:a6:14:bf:13:82:
                    77:f1:2b:a4:5e:66:db:6f:37:cc:56:a5:e9:ee:4a:
                    10:b9:e1:b2:dc:fd:7b:2c:03:2c:57:53:f3:45:b1:
                    b4:8f:67:11:05:cf:66:e7:bb:58:a1:f5:4d:67:9a:
                    74:7e:86:09:02:a5:eb:59:12:e4:86:a1:af:f2:9f:
                    1c:a2:d8:17:2d:66:7f:0c:f9:27:6a:f2:0c:22:32:
                    50:fe:43:a5:02:a7:ee:76:c7:6f:ea:11:ef:a5:99:
                    f1:e6:e5:60:5f:f2:43:42:5a:26:16:34:f7:bc:ed:
                    89:f3:e4:c4:9d:24:24:6d:51:7d:55:aa:b1:38:b9:
                    25:4e:e5:80:68:da:5c:67:41:77:e9:1f:6f:18:a7:
                    51:32:f5:a6:51:1e:bd:47:35:1c:79:3c:84:8d:7d:
                    93:cc:25:7d:35:f7:12:22:fe:ac:bf:b5:d3:27:28:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:60:15:C6:D5:43:1D:D8:79:73:DC:27:86:AB:87:FC:94:A7:63:93
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS200019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:53:8a:20:38:11:73:61:cc:b5:cf:12:79:6e:7e:92:88:
         1b:e6:f1:b7:56:aa:6b:03:1f:20:ba:95:64:a1:61:75:07:3a:
         b5:29:38:1c:a1:d8:3d:62:db:03:c8:3d:35:35:ab:03:b3:f8:
         c4:fd:6f:b8:55:b5:6e:a9:a2:bd:2f:63:93:3d:a5:d4:1f:f8:
         a9:8f:16:55:f5:19:02:26:63:b9:9c:45:5d:f4:4c:84:2a:d0:
         1f:00:4d:60:54:58:6b:cb:fd:c2:1c:ca:7b:ca:44:96:49:37:
         67:52:06:e8:66:75:d6:6b:4d:d9:56:fa:c3:3a:dd:e7:78:4a:
         f6:d6:f6:fc:c9:22:68:0d:d5:02:0e:53:41:4d:e0:30:c3:e1:
         1d:6c:4a:bb:ae:26:e4:1b:07:f0:55:0c:65:ea:42:2f:e0:3a:
         a7:df:d2:f9:7d:cf:bc:c8:05:6d:04:f5:b3:94:c5:5a:bf:f9:
         ae:8a:51:04:1c:41:cd:6a:96:bd:b1:71:08:2f:16:7f:dd:70:
         08:d9:cb:72:f4:54:97:10:21:0f:06:7a:95:4d:f8:ed:10:26:
         e1:14:4c:0a:41:f2:ce:0e:b0:04:70:94:62:a2:1d:8e:7a:03:
         e9:ca:59:19:a7:85:9f:d6:f5:ea:a6:73:08:8a:9b:43:ee:2b:
         16:ca:32:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----