Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204769.roa
File:                     AS204769.roa (raw, json)
Hash identifier:          gizPfa/lCLfP7YsBJ6mmrbgBo5O5BKtrCh7cTwR52xk=
Subject key identifier:   E1:17:94:B7:4C:EE:59:C1:77:5A:5D:88:BE:DE:0A:CC:93:18:BF:62
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       60E869FCCF7D63A21EC73380C19A8D2E5DEE0D23
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204769.roa
Signing time:             Fri 18 Aug 2023 12:30:04 +0000
ROA not before:           Fri 18 Aug 2023 12:25:04 +0000
ROA not after:            Fri 16 Aug 2024 12:30:04 +0000
asID:                     204769
IP address blocks:        206.53.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e8:69:fc:cf:7d:63:a2:1e:c7:33:80:c1:9a:8d:2e:5d:ee:0d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 18 12:25:04 2023 GMT
            Not After : Aug 16 12:30:04 2024 GMT
        Subject: CN=E11794B74CEE59C1775A5D88BEDE0ACC9318BF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:07:ba:e6:39:0f:27:b1:b1:00:72:cc:b2:
                    de:4b:5e:a0:50:97:2d:07:a9:0f:f1:23:dd:e5:35:
                    12:77:ea:5f:88:78:76:3a:14:08:30:68:a1:a2:f9:
                    ea:04:e5:7f:04:d4:17:d4:72:33:c7:87:63:69:90:
                    c9:90:88:e3:52:73:5d:3b:35:2e:5f:21:05:86:00:
                    a2:fe:75:00:a1:38:53:40:18:82:5a:6c:95:7e:37:
                    e3:6d:0a:d5:67:7e:b4:b0:86:58:7e:04:d2:76:cb:
                    30:c1:0c:31:52:99:ed:74:73:e8:21:54:0e:81:4f:
                    3f:65:05:6f:b5:6c:01:ca:00:80:71:86:6c:2d:f1:
                    05:e6:9b:69:69:b1:97:aa:e8:18:ac:fc:e1:25:f0:
                    77:6a:c3:13:d7:6e:4e:83:95:dc:bb:a9:ec:3d:a5:
                    d1:26:09:f6:8a:bf:0f:3f:f8:2d:f8:60:96:87:17:
                    72:01:02:69:7f:37:30:c4:94:7c:a2:29:33:cd:10:
                    5e:cc:47:19:d7:25:9e:99:78:13:dd:6d:95:10:9d:
                    25:d6:9c:ae:34:5e:6f:25:d4:92:b5:2d:e0:25:71:
                    97:e7:ef:a5:c2:74:7e:a6:ea:5b:94:6f:b3:5a:74:
                    5f:51:b8:08:c4:28:d2:6c:bc:1e:a5:ff:3b:aa:bd:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:94:B7:4C:EE:59:C1:77:5A:5D:88:BE:DE:0A:CC:93:18:BF:62
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204769.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:99:bc:be:e1:f1:87:5b:ba:93:d9:59:5e:f2:3c:c9:ac:e5:
         a6:c0:84:c7:5d:32:9d:0a:08:ba:b0:ec:27:f3:e7:a1:55:0a:
         ce:3f:79:02:3b:08:ad:80:25:8f:a3:58:21:df:96:e1:f6:d7:
         97:a2:3c:5f:63:6e:e4:ec:f8:ea:32:03:41:e1:78:de:90:cf:
         84:7b:fc:11:99:13:0f:42:67:e4:14:a2:11:4a:d6:c0:05:9a:
         00:38:77:3a:b0:45:ea:28:53:48:51:d5:0d:9b:d4:39:42:01:
         78:19:fe:d2:69:fa:04:6b:e7:1b:7b:78:e4:8c:a8:21:f4:e7:
         1e:6e:27:b9:51:f6:f9:13:94:82:69:39:2a:47:2a:71:6d:88:
         f3:38:69:04:d6:85:a9:b5:18:32:8b:8e:69:6d:41:d1:0d:25:
         48:10:0c:a0:90:9e:64:23:70:26:9b:5f:5f:09:64:d8:45:a3:
         0a:36:76:1b:b6:00:93:54:0f:51:9d:92:cb:20:fd:18:7c:dd:
         0f:b9:7b:ca:6d:8b:b7:e7:ce:1c:71:5a:dd:73:65:83:14:7b:
         90:3c:31:f8:b0:17:6c:c4:17:ef:ec:e2:7e:d8:f5:c1:7b:09:
         26:c4:bf:94:30:5b:77:8f:f7:df:ab:57:da:88:11:db:58:89:
         1b:3a:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----