Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396073.roa
File:                     AS396073.roa (raw, json)
Hash identifier:          bpJ9MCyeTUp6wSjyJm8yAHBrPiFVnsF+w5+mfa7MPLg=
Subject key identifier:   81:7F:93:DB:C2:F3:36:06:8C:31:87:CB:DA:D1:8B:A2:C3:6A:3C:EC
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       635CF70B61379425221003DF767DEFD5B781255B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396073.roa
Signing time:             Tue 27 Sep 2022 16:58:48 +0000
ROA not before:           Tue 27 Sep 2022 16:53:48 +0000
ROA not after:            Tue 26 Sep 2023 16:58:48 +0000
asID:                     396073
IP address blocks:        140.99.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5c:f7:0b:61:37:94:25:22:10:03:df:76:7d:ef:d5:b7:81:25:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Sep 27 16:53:48 2022 GMT
            Not After : Sep 26 16:58:48 2023 GMT
        Subject: CN=817F93DBC2F336068C3187CBDAD18BA2C36A3CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:e2:1b:34:ab:3c:6d:d1:e8:76:56:f1:24:
                    fa:9b:1f:78:4a:00:2d:68:9f:f5:1e:ef:af:ab:5f:
                    53:9c:b6:41:e0:26:4e:91:fc:6b:0e:05:f1:23:84:
                    54:1b:b2:c5:80:a9:f4:da:4a:0d:0b:9a:58:11:ba:
                    52:67:0e:6c:4c:c5:c0:92:a9:91:ab:38:f9:23:a4:
                    16:48:1d:90:b3:91:d5:cb:1a:b6:a5:40:11:02:8b:
                    a1:76:4c:ad:35:c7:08:c7:27:9f:03:10:5e:db:56:
                    b4:16:e5:d0:f2:b6:a1:69:a1:20:eb:9e:b6:ff:7c:
                    2e:37:27:8e:73:f3:14:33:45:8b:87:bf:c2:8c:1c:
                    5a:82:63:66:39:73:ed:d0:f5:5b:eb:70:94:ac:0f:
                    6a:fe:61:14:0c:a9:3c:7f:2a:35:a6:ea:35:9a:7e:
                    29:be:f1:8d:a0:4c:e9:7e:08:27:4e:d1:14:29:19:
                    2e:49:21:b7:01:9a:df:a3:70:7a:7c:21:a3:a6:6f:
                    bc:22:8a:b4:fe:e1:c7:5a:f9:88:71:e8:aa:43:b3:
                    47:fc:17:09:18:91:71:0d:70:c4:80:f9:6c:a7:56:
                    2d:ca:70:02:4d:a9:26:02:5d:27:ae:d2:6e:6e:25:
                    15:db:ec:48:40:3f:7f:13:d4:1b:6b:7a:f1:b5:7d:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7F:93:DB:C2:F3:36:06:8C:31:87:CB:DA:D1:8B:A2:C3:6A:3C:EC
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:75:b9:09:62:5c:c5:65:05:55:ce:8b:eb:80:b3:4f:2b:54:
         ae:73:ff:01:27:67:17:a7:67:b6:d6:d9:4e:7e:24:4f:a7:ea:
         8d:d1:9c:3e:6d:fa:78:8e:9f:2b:12:cd:af:0b:20:47:c0:4a:
         25:f4:fb:cc:2f:5c:65:13:0c:dd:59:ba:32:01:e0:30:84:db:
         02:0d:b6:d2:63:56:ff:34:2e:dc:80:c5:80:ea:54:9c:2c:30:
         37:45:0e:55:81:49:79:60:9b:b3:f5:18:45:f0:6c:8a:c7:e2:
         24:43:99:87:ae:d7:b5:8b:30:10:cc:e1:64:08:2b:0a:e3:1f:
         86:5b:be:09:5c:b8:37:66:84:42:07:cf:57:31:8c:14:91:a8:
         17:5e:1b:5e:b7:3b:35:dd:0b:f4:04:e8:e7:4d:49:ae:8a:6e:
         d4:ac:b1:61:d6:2d:f9:5d:4b:12:e4:4a:98:4a:ae:55:56:54:
         04:a5:51:bd:2f:ed:b4:33:32:46:c2:99:05:7c:65:c3:63:8b:
         a7:c9:b2:f7:0c:0b:4b:7e:ea:a0:07:1c:1d:50:69:e7:96:54:
         11:a3:27:2e:35:31:07:fb:8f:2f:89:87:b6:fa:92:d3:a9:5a:
         05:53:ca:c8:c5:24:c6:5f:bc:98:b1:b4:20:7a:df:97:26:82:
         4c:f7:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----