Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130362e302f32342d3234203d3e203336323336.roa
File:                     3230352e3134372e3130362e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          +Muv47J/u6tzrMpabhfAeowgxjWTp7BWjR9UbwBrY4o=
Subject key identifier:   FA:CE:B4:CA:E0:F4:F1:27:28:25:15:05:9F:0B:12:B1:2C:72:11:56
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       5EA490AE5139E8FB7888308AECC84EB62358CA44
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130362e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 20:15:01 +0000
ROA not before:           Mon 31 Oct 2022 20:10:01 +0000
ROA not after:            Mon 30 Oct 2023 20:15:01 +0000
asID:                     36236
IP address blocks:        205.147.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a4:90:ae:51:39:e8:fb:78:88:30:8a:ec:c8:4e:b6:23:58:ca:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Oct 31 20:10:01 2022 GMT
            Not After : Oct 30 20:15:01 2023 GMT
        Subject: CN=FACEB4CAE0F4F127282515059F0B12B12C721156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:0d:0e:c1:3c:08:2f:60:71:b7:8b:cb:34:
                    e7:ba:64:ed:85:2b:97:cb:5f:35:ab:53:86:58:fc:
                    ba:fa:73:d3:65:c5:40:3a:52:25:94:51:25:9f:8e:
                    29:7a:5c:b5:13:4e:a0:12:db:6f:2d:5d:e0:34:b4:
                    f1:3d:4c:b4:68:c6:2d:a6:54:bd:ee:37:cf:04:38:
                    a2:1e:ea:1a:05:ec:4b:f7:d9:dd:cb:54:8f:85:e3:
                    fd:3c:81:c3:78:9a:78:ce:94:ae:ec:58:15:60:f0:
                    32:ac:24:a3:11:8d:b8:6c:b3:38:63:8b:00:81:01:
                    1c:fc:cb:30:ed:e4:52:6b:d5:78:ca:70:ac:53:53:
                    7d:85:f1:22:ca:40:23:bc:e4:7a:0d:7d:c4:e4:f5:
                    71:2a:03:3e:b2:4a:99:ae:c1:d1:c2:14:b4:54:c7:
                    d0:5f:70:62:7b:d4:3e:52:c8:d3:24:6a:81:d3:b8:
                    51:ea:81:71:24:2a:14:22:4a:60:30:1e:30:e5:9b:
                    2c:44:81:70:70:97:21:db:0b:a8:cd:2f:ab:ec:1f:
                    b1:fb:14:e5:e0:bf:5b:9b:ed:70:89:64:23:0c:4b:
                    0c:df:b1:5c:1e:99:43:0f:a4:0d:f7:5c:20:3e:a0:
                    38:d6:ea:51:b5:cf:77:12:ba:57:10:43:29:ee:36:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:B4:CA:E0:F4:F1:27:28:25:15:05:9F:0B:12:B1:2C:72:11:56
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3230352e3134372e3130362e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:02:e9:68:4b:9c:33:77:f6:97:e3:3c:c1:de:60:a1:96:
         14:72:77:7f:73:43:b4:fb:27:f4:31:ac:b1:fe:8a:7e:28:9d:
         d4:fe:60:8c:22:6a:a6:94:ba:80:1f:51:c9:5a:fd:7e:6a:35:
         9a:09:2d:1b:55:fc:d7:9c:00:89:81:ae:b3:bd:70:e8:45:13:
         42:8f:94:6f:95:db:6b:d1:ba:24:00:3c:21:4a:61:4e:10:a7:
         15:0d:b5:55:d3:b5:f7:f2:b6:e3:94:1f:59:6b:3e:83:81:ee:
         00:01:c6:82:27:b6:0a:da:fa:ef:63:9c:73:d4:d1:de:5e:98:
         6a:fd:5f:73:10:54:ed:3b:b0:44:52:86:3f:51:06:d8:06:7e:
         9b:1f:7a:85:69:2f:bc:87:37:47:78:7c:5d:5a:b7:20:87:b6:
         30:3e:76:f6:23:bc:df:91:cc:57:22:c8:9f:aa:e2:32:79:30:
         0e:53:13:9d:f4:5d:a1:83:b2:50:32:13:11:d5:d1:d9:d0:0a:
         1c:d3:74:3a:3f:39:fb:70:22:fc:a1:0d:4e:f8:aa:d1:a2:c1:
         42:b2:b0:c1:03:18:c5:ec:75:d0:04:b5:31:8e:bb:16:8b:19:
         99:c2:bb:89:f4:75:11:c9:a2:30:2c:b7:6c:79:9e:33:23:7a:
         3d:04:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----