Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201801.roa
File:                     AS201801.roa (raw, json)
Hash identifier:          gT0P/lmHzbgJDdxvdWoJ7hLHU21Vc12DrYBQQi+Wnqg=
Subject key identifier:   6E:43:15:0B:53:75:C7:54:6D:3A:59:2C:7B:8F:33:2B:72:B3:C4:4E
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       4AC1692CC20F9A8C5D0498953CC6065AA98E2BCF
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201801.roa
Signing time:             Sat 29 Oct 2022 11:58:46 +0000
ROA not before:           Sat 29 Oct 2022 11:53:46 +0000
ROA not after:            Sat 28 Oct 2023 11:58:46 +0000
asID:                     201801
IP address blocks:        140.99.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:69:2c:c2:0f:9a:8c:5d:04:98:95:3c:c6:06:5a:a9:8e:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct 29 11:53:46 2022 GMT
            Not After : Oct 28 11:58:46 2023 GMT
        Subject: CN=6E43150B5375C7546D3A592C7B8F332B72B3C44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:ed:9f:46:4f:45:f8:19:b6:00:3c:21:34:
                    a5:b8:09:00:2c:5f:db:19:08:26:0b:46:1e:35:51:
                    cc:c7:93:45:f6:00:c7:3e:14:1e:96:8b:af:b9:85:
                    fd:82:8e:94:2f:1a:1b:0c:99:20:81:a4:bc:8a:23:
                    ca:6e:59:f2:8b:35:02:af:27:1f:f0:fa:1a:31:84:
                    68:77:b0:aa:2b:81:82:0f:3d:3a:0b:bf:1c:b3:53:
                    50:d3:33:0e:79:42:36:f1:57:af:6f:58:6c:55:47:
                    d5:ea:ab:07:f7:4a:af:d3:4b:88:85:20:05:15:d9:
                    56:04:93:9d:a7:6a:1c:ab:5b:d5:98:fd:fc:c3:38:
                    03:0b:3e:46:84:67:f6:39:7f:be:71:b2:b5:25:51:
                    2b:32:40:3d:2c:7a:cc:b3:f3:94:8e:5c:97:aa:86:
                    b9:55:e8:f3:1b:cc:bc:20:86:e0:08:9e:43:25:8c:
                    53:3d:a4:f6:b6:b5:b4:46:c0:6e:13:1d:b8:5a:c7:
                    e0:7d:e3:1c:f8:f6:79:a5:58:f9:da:59:1f:5d:d5:
                    3f:40:ae:d5:ff:29:4a:82:be:2d:1a:9d:0f:99:31:
                    10:c5:b7:5c:13:04:2d:53:42:a5:68:8e:f7:ce:89:
                    27:06:0c:f5:9a:dc:33:47:07:76:79:41:1f:66:e0:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:15:0B:53:75:C7:54:6D:3A:59:2C:7B:8F:33:2B:72:B3:C4:4E
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS201801.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:71:b3:82:57:cd:df:3a:73:09:11:05:9d:0e:20:52:99:52:
         5c:a0:1b:1c:08:03:43:2f:36:ed:03:3b:1e:f1:02:56:35:cc:
         19:63:8e:31:c2:75:63:84:c5:ba:19:9a:0e:94:ba:0f:a6:12:
         89:1f:6e:37:50:ce:5e:3a:78:1c:3c:ac:5e:bb:d3:9c:94:40:
         c0:47:db:42:2a:13:06:2e:b1:1b:55:d7:c0:0f:2c:e2:09:7d:
         ee:35:95:49:cd:c0:94:5d:b8:a6:cc:8c:fa:e5:6b:aa:5c:7f:
         f4:ac:0c:1d:4c:e8:89:c7:60:bc:ee:08:4d:98:b9:e3:e7:67:
         01:ec:35:d0:63:df:73:6e:29:81:d1:17:09:6f:61:ad:d4:7a:
         88:4e:27:e0:7f:65:ae:7f:f1:dd:68:4e:b4:9a:79:15:94:29:
         07:8c:d4:95:38:9d:21:61:7b:af:56:19:f0:43:22:a0:8b:72:
         fa:66:1b:a0:c1:7c:16:1a:17:33:7b:93:91:83:12:d0:f4:1e:
         c4:b4:ed:69:21:eb:f8:86:33:c6:6e:11:2e:a4:13:ef:8f:c9:
         24:76:d4:48:3a:49:ac:d6:e4:78:93:0a:e2:8c:cb:d9:3a:e8:
         e3:51:52:db:cc:37:45:e2:1a:29:93:c0:d3:a9:fe:18:cb:a1:
         3f:02:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----