Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31352e302f32342d3234203d3e203336323336.roa
File:                     35392e3135332e31352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          bXnetbtO5+ZkuWjOuvWrDh4lmP4ArVXEBrXeo26U8AM=
Subject key identifier:   7B:A5:00:E0:34:00:67:E3:F9:CB:7A:89:34:67:1F:AD:40:C8:D9:C0
Certificate issuer:       /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial:       475DB367894DFAB97ED5C5AE16F33DF6A7D36FED
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31352e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 22:20:51 +0000
ROA not before:           Mon 31 Oct 2022 22:15:51 +0000
ROA not after:            Mon 30 Oct 2023 22:20:51 +0000
asID:                     36236
IP address blocks:        59.153.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5d:b3:67:89:4d:fa:b9:7e:d5:c5:ae:16:f3:3d:f6:a7:d3:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
        Validity
            Not Before: Oct 31 22:15:51 2022 GMT
            Not After : Oct 30 22:20:51 2023 GMT
        Subject: CN=7BA500E0340067E3F9CB7A8934671FAD40C8D9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:14:ff:82:65:6d:06:8d:78:a8:15:8d:c8:
                    aa:66:6c:9a:c0:f8:df:cd:0f:f6:7b:13:a0:6a:24:
                    d4:31:64:d1:c1:14:84:ea:62:5d:cf:d7:38:a5:8c:
                    7a:03:6e:19:9d:99:32:e3:bd:40:8f:5b:4d:f8:f6:
                    41:ee:b7:9d:38:8b:e1:db:ff:51:f2:b6:5f:73:93:
                    fa:4a:0a:c8:eb:d1:75:84:3e:da:6b:06:00:1c:25:
                    29:1e:f0:bc:c5:fc:19:7b:f5:66:89:2d:96:aa:65:
                    98:9b:d6:f7:e0:42:87:44:97:12:bf:af:9f:97:98:
                    6f:6c:db:5c:71:b1:09:29:a2:10:ea:80:3e:05:aa:
                    bc:f8:b8:b5:12:2e:ae:94:65:61:c0:f9:5b:a1:4d:
                    51:38:76:02:91:97:ad:a6:9b:98:a7:09:e9:7c:40:
                    cb:bd:56:ee:61:ad:a7:19:f7:2d:97:21:69:cc:c1:
                    4c:72:20:99:32:9a:c8:f4:2b:c3:89:2b:db:3f:6e:
                    17:bb:3b:fb:af:d6:7b:e3:ae:a5:f1:b4:e1:07:5d:
                    3e:f0:6b:68:ac:e2:b6:81:b5:5c:b6:b2:ca:76:cc:
                    e6:73:15:eb:41:44:3d:4c:8b:34:6f:08:fc:41:ff:
                    9c:4f:d6:54:5b:b8:2e:c6:cf:0e:cd:11:b0:82:c7:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:00:E0:34:00:67:E3:F9:CB:7A:89:34:67:1F:AD:40:C8:D9:C0
            X509v3 Authority Key Identifier:
                keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31352e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:92:91:cf:f4:46:5e:72:41:bf:d0:38:a3:da:68:50:3f:2c:
         9d:a0:b4:fa:39:8c:4d:67:85:b5:89:85:49:53:38:45:b0:1b:
         97:e8:94:6b:c9:be:51:d2:b0:aa:ef:53:f7:a6:9a:0f:bb:96:
         21:11:62:66:06:94:18:28:3a:a5:3e:8c:e5:7e:94:01:0e:0c:
         f8:4b:47:06:bb:1a:ee:a4:dd:d5:24:a7:17:dc:22:ec:b1:f3:
         1e:e9:b3:a1:6c:05:25:cf:4e:9a:08:33:12:4f:de:10:3c:4c:
         5a:32:d0:b1:b7:81:5a:b8:70:f4:16:ff:bc:f7:c9:e1:61:89:
         e4:4c:be:79:9f:35:d5:4c:93:51:3f:78:54:3c:7e:e9:c4:6e:
         04:cf:34:c6:80:77:e2:b4:33:f2:34:51:88:fd:70:d7:53:13:
         47:8d:a5:eb:1a:22:c4:5c:59:04:8b:93:77:ad:f1:5d:36:cb:
         4e:1d:34:ba:13:ac:71:de:94:21:83:f5:a2:4a:fe:22:84:9e:
         12:92:bf:1d:6c:d1:4d:2b:73:f5:60:c3:a5:15:f5:3a:44:73:
         fc:fb:f7:db:45:1b:48:81:99:32:b0:23:05:e7:8e:38:e1:bd:
         c4:15:09:f7:6d:98:6a:49:9b:ad:50:c8:46:7a:5a:1c:b0:ad:
         cf:cc:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----