Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197789.roa
File:                     AS197789.roa (raw, json)
Hash identifier:          j4ENThcELJ15xypFifpYSSVA9OjFGmKVO/dUqFjHoa8=
Subject key identifier:   4A:A8:C1:2F:59:0A:32:49:9B:56:57:81:3F:3B:FD:EA:4B:C5:B6:D5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       105BB7674AA665A0C5C91105365C05AA32F96429
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197789.roa
Signing time:             Sun 29 Oct 2023 00:00:07 +0000
ROA not before:           Sat 28 Oct 2023 23:55:07 +0000
ROA not after:            Sun 27 Oct 2024 00:00:07 +0000
asID:                     197789
IP address blocks:        104.234.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5b:b7:67:4a:a6:65:a0:c5:c9:11:05:36:5c:05:aa:32:f9:64:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 28 23:55:07 2023 GMT
            Not After : Oct 27 00:00:07 2024 GMT
        Subject: CN=4AA8C12F590A32499B5657813F3BFDEA4BC5B6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:7b:0d:cb:31:b8:32:f3:f2:9c:fa:95:ed:
                    87:dd:57:88:45:3d:3a:0f:62:ff:1e:c6:4d:e2:49:
                    66:60:f1:21:c4:76:8a:b9:1f:cc:30:ce:09:4c:86:
                    73:49:0c:88:cf:19:95:c7:c5:c0:16:e0:88:2a:a9:
                    a3:00:e1:18:86:cd:fc:89:7e:af:19:5e:70:f0:17:
                    12:56:58:bd:2d:37:0b:29:57:d8:a3:44:67:96:18:
                    29:4a:5d:c1:82:70:ce:87:45:fb:e8:f0:88:5e:97:
                    3e:de:c7:6e:a2:45:bf:42:ea:b1:cb:60:27:5f:b7:
                    d0:77:94:51:f6:02:7c:f3:ee:a3:f0:d6:20:38:45:
                    41:85:59:5e:5b:98:eb:53:f7:cc:76:97:da:93:ce:
                    85:3b:1a:76:b4:56:2d:4f:c7:95:0a:b5:b9:2d:b0:
                    61:32:50:6b:16:ac:06:d8:a9:68:fe:1a:e5:f5:7a:
                    a2:d5:c1:ce:48:07:47:92:c2:6c:96:d7:fc:13:c3:
                    b4:05:45:b7:45:11:72:c6:d0:57:f7:5b:a8:01:27:
                    6d:1a:dd:65:8d:4d:c1:0f:07:46:c1:db:9b:60:e4:
                    43:89:bc:34:79:20:2f:cc:41:eb:89:ff:10:e9:80:
                    3d:bf:f2:c7:16:32:64:b2:99:d7:e3:45:d1:b7:3d:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A8:C1:2F:59:0A:32:49:9B:56:57:81:3F:3B:FD:EA:4B:C5:B6:D5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197789.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:00:ad:54:32:e6:40:41:95:05:91:ea:6d:18:48:be:c3:bb:
         a8:15:e3:00:61:b7:3a:6f:e1:84:14:26:55:e4:ea:bb:5a:51:
         ce:d3:24:c2:d8:ee:01:c0:65:2c:b2:9c:f8:3a:bd:79:b5:5b:
         0d:a0:f8:02:6f:12:4c:e6:54:48:f4:e3:d6:fc:d8:06:63:51:
         17:63:e8:1b:36:34:94:ba:34:7b:38:bf:70:a9:93:80:51:97:
         18:4b:f0:a7:2e:22:8c:06:06:83:94:9c:c6:89:67:af:97:7f:
         fe:49:4f:44:34:7b:9b:5a:42:5c:61:95:86:60:1b:84:30:32:
         77:da:5c:73:72:a0:5c:f1:32:81:db:5a:7d:fc:21:4b:90:15:
         7f:51:ba:f6:29:0a:3c:59:cd:dc:c0:c3:39:1f:1c:73:27:1c:
         da:07:1b:5e:7c:fb:2f:31:93:50:71:d7:9c:16:a1:af:85:d3:
         c7:31:c8:f5:e3:98:7d:6a:0c:dc:3a:52:fc:fb:b6:4e:2b:cd:
         2d:fd:d6:59:bf:b3:2a:c7:7b:5b:ee:a2:0f:76:d5:93:55:a9:
         d2:10:d0:a0:ad:fb:46:56:de:e2:44:b6:73:73:26:79:c8:43:
         11:ec:c4:24:d7:99:7e:f1:24:3e:39:dd:85:ad:0a:22:25:54:
         b9:76:51:3b
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUEFu3Z0qmZaDFyREFNlwFqjL5ZCkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMDI4MjM1NTA3WhcNMjQxMDI3MDAwMDA3
WjAzMTEwLwYDVQQDEyg0QUE4QzEyRjU5MEEzMjQ5OUI1NjU3ODEzRjNCRkRFQTRC
QzVCNkQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZN7DcsxuDLz
8pz6le2H3VeIRT06D2L/HsZN4klmYPEhxHaKuR/MMM4JTIZzSQyIzxmVx8XAFuCI
KqmjAOEYhs38iX6vGV5w8BcSVli9LTcLKVfYo0RnlhgpSl3BgnDOh0X76PCIXpc+
3sduokW/Quqxy2AnX7fQd5RR9gJ88+6j8NYgOEVBhVleW5jrU/fMdpfak86FOxp2
tFYtT8eVCrW5LbBhMlBrFqwG2Klo/hrl9Xqi1cHOSAdHksJsltf8E8O0BUW3RRFy
xtBX91uoASdtGt1ljU3BDwdGwdubYORDibw0eSAvzEHrif8Q6YA9v/LHFjJkspnX
40XRtz0h8QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFEqowS9ZCjJJm1ZXgT87/epL
xbbVMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE5Nzc4OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqEDANBgkqhkiG9w0BAQsFAAOC
AQEAZgCtVDLmQEGVBZHqbRhIvsO7qBXjAGG3Om/hhBQmVeTqu1pRztMkwtjuAcBl
LLKc+Dq9ebVbDaD4Am8STOZUSPTj1vzYBmNRF2PoGzY0lLo0ezi/cKmTgFGXGEvw
py4ijAYGg5Scxolnr5d//klPRDR7m1pCXGGVhmAbhDAyd9pcc3KgXPEygdtaffwh
S5AVf1G69ikKPFnN3MDDOR8ccycc2gcbXnz7LzGTUHHXnBahr4XTxzHI9eOYfWoM
3DpS/Pu2TivNLf3WWb+zKsd7W+6iD3bVk1Wp0hDQoK37Rlbe4kS2c3MmechDEezE
JNeZfvEkPjndha0KIiVUuXZROw==
-----END CERTIFICATE-----