Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS211849.roa
File:                     AS211849.roa (raw, json)
Hash identifier:          +yXSqL07/0N/XmfopyOV+CLy7QOrNl0rbQxYHQEh/8A=
Subject key identifier:   CE:A0:EA:A7:A2:15:76:CD:BF:67:DB:50:26:DF:D4:5C:48:E4:51:BB
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       20E6900199AE34F296BB6C274FF4F2F66F992A12
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS211849.roa
Signing time:             Thu 27 Oct 2022 17:22:48 +0000
ROA not before:           Thu 27 Oct 2022 17:17:48 +0000
ROA not after:            Thu 26 Oct 2023 17:22:48 +0000
asID:                     211849
IP address blocks:        140.99.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e6:90:01:99:ae:34:f2:96:bb:6c:27:4f:f4:f2:f6:6f:99:2a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Oct 27 17:17:48 2022 GMT
            Not After : Oct 26 17:22:48 2023 GMT
        Subject: CN=CEA0EAA7A21576CDBF67DB5026DFD45C48E451BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:5e:8c:b3:1d:16:f8:92:0d:46:13:be:c7:
                    53:7d:1d:ad:12:5f:9c:fb:aa:49:b5:d6:6d:a4:93:
                    a7:d2:ff:3c:b4:27:cf:53:bc:31:3c:7b:d6:3d:84:
                    f2:5b:80:e6:3a:a8:9b:fb:52:7e:4a:e9:d1:f2:54:
                    42:0f:83:8d:d7:d4:cf:6e:20:04:e9:2f:c6:a3:9c:
                    8e:40:e3:90:09:5e:39:14:a9:e2:63:34:b1:4a:51:
                    aa:03:4a:3d:53:92:4c:59:86:58:f0:32:cc:07:11:
                    a1:22:05:24:e2:66:48:a1:89:67:35:0b:1d:5e:21:
                    bb:6e:49:d2:ac:cb:3a:46:d2:b6:8d:9c:05:d8:de:
                    44:32:f2:dd:bd:d7:57:59:56:1a:a2:a5:c4:5d:74:
                    d2:12:3d:ae:8a:a8:95:d2:7e:c6:8c:d2:b0:72:37:
                    c9:39:c1:ab:11:e0:05:cb:55:46:ad:65:63:e5:bd:
                    d7:b4:8b:47:79:87:2f:24:61:8a:cb:d5:98:ee:04:
                    51:16:22:05:38:55:22:d5:61:70:3e:5c:fb:64:b1:
                    c9:ec:06:6b:d0:bc:7e:1d:23:6c:82:c6:c0:81:b2:
                    85:b5:34:79:86:d8:0d:50:a2:cf:c0:b9:2b:07:4d:
                    40:dc:4b:54:b0:6d:be:7d:90:dc:ed:c4:3d:e5:f5:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A0:EA:A7:A2:15:76:CD:BF:67:DB:50:26:DF:D4:5C:48:E4:51:BB
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS211849.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:c7:a4:0d:36:7a:97:f5:68:ca:f9:26:9f:0f:2b:6f:c6:
         b3:33:ad:14:0e:12:34:49:9c:9f:53:c4:51:94:07:72:14:8b:
         e2:7c:5b:95:20:53:cd:5f:8c:a5:1c:d7:29:6b:b5:67:73:fc:
         2c:42:7c:6d:d0:37:d1:70:df:31:5d:a5:90:89:e0:cc:70:e6:
         33:97:ec:e8:5d:ed:15:53:80:89:78:61:dc:6c:7d:92:d5:d3:
         37:02:d0:5e:e0:b7:ce:d1:19:17:7b:95:53:f6:31:96:6d:72:
         b5:db:ad:26:b9:e6:07:db:a0:f2:cb:42:d2:19:60:b1:26:97:
         7d:b2:8f:83:1b:55:b3:f9:7e:b3:7a:2f:0a:56:7b:2a:a7:25:
         6b:f9:64:67:4a:1c:56:01:13:65:fe:d1:06:84:fe:8f:94:10:
         c6:96:c3:ff:89:a2:0a:08:cb:91:7c:e9:99:1e:b9:16:44:87:
         c7:f7:b9:e6:9e:3b:f7:74:8d:e4:e9:ec:fd:70:45:f9:64:74:
         fb:c7:c2:a2:ba:c4:e8:be:8a:77:ed:f5:56:14:55:b6:ee:64:
         fd:7e:55:8c:83:9e:95:f4:90:03:de:a2:f5:06:07:c1:e1:19:
         dd:b5:b1:4f:33:eb:05:9e:c7:b5:9b:a3:48:d4:3d:31:f8:d3:
         ad:7e:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----