Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207459.roa
File:                     AS207459.roa (raw, json)
Hash identifier:          z8F4HevWJtSFyhWk3QCscm2f79LcLRoBFZU/494+6Pg=
Subject key identifier:   97:35:38:33:FE:9B:94:72:D0:18:CC:1C:69:C4:BB:05:A8:E3:A6:9F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       490566C4B6A24A52664AFE99955E25E730AFF1F5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207459.roa
Signing time:             Thu 23 Feb 2023 00:00:10 +0000
ROA not before:           Wed 22 Feb 2023 23:55:10 +0000
ROA not after:            Thu 22 Feb 2024 00:00:10 +0000
asID:                     207459
IP address blocks:        104.234.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:05:66:c4:b6:a2:4a:52:66:4a:fe:99:95:5e:25:e7:30:af:f1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 22 23:55:10 2023 GMT
            Not After : Feb 22 00:00:10 2024 GMT
        Subject: CN=97353833FE9B9472D018CC1C69C4BB05A8E3A69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:93:55:79:0f:33:5c:c9:9f:35:87:71:58:
                    36:84:ac:51:05:e6:02:6b:ef:1d:4c:5d:94:c4:27:
                    ae:e1:b2:c6:bf:5e:90:0c:74:5e:6e:7e:02:ad:b8:
                    2a:58:73:f9:5b:cc:6f:4a:23:68:6e:75:36:41:d8:
                    98:e8:e6:0f:16:81:01:2c:b4:ed:c0:0d:8a:92:7c:
                    75:f0:fa:c2:30:3e:ce:87:4e:44:63:0c:24:58:fc:
                    07:9d:92:cd:55:c5:4f:f6:04:69:3e:df:4d:82:7d:
                    e9:76:26:0c:00:b7:97:9b:d7:2e:de:34:1c:b3:89:
                    85:68:2e:df:8e:29:41:ba:eb:cc:70:60:fb:56:16:
                    e4:1b:1d:8e:59:eb:c6:e4:a2:77:69:ed:ca:c9:df:
                    9a:6a:98:30:24:15:4d:cb:6d:63:4e:bf:22:8d:26:
                    d5:58:85:ff:54:3e:67:f3:aa:10:13:49:81:3c:42:
                    9e:5a:66:3d:be:43:00:ef:02:3c:bb:51:fa:a1:ab:
                    8a:f0:4f:f9:8b:d2:1b:1b:e6:48:65:5d:d4:67:17:
                    33:d7:aa:65:d1:96:9b:be:d2:e8:bc:40:5f:82:8e:
                    5c:0e:d3:74:e8:22:8e:62:d6:0f:6b:9d:df:30:3a:
                    ab:b2:e2:37:d2:0f:c4:a2:5c:16:f9:ec:2e:ac:f5:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:38:33:FE:9B:94:72:D0:18:CC:1C:69:C4:BB:05:A8:E3:A6:9F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:91:a7:27:b8:2d:b1:30:ad:71:43:e9:7f:ba:83:73:30:
         b8:f9:90:8d:19:51:e0:c0:29:cf:bf:4c:63:1f:f6:1e:56:ab:
         1e:61:37:c4:cd:ea:e4:0e:f9:13:6d:de:f8:bf:e7:4a:85:03:
         88:cf:13:fc:53:be:63:10:37:d8:71:cb:da:27:25:01:b7:ff:
         b4:cd:9e:2f:0d:f0:48:17:17:05:03:95:41:fb:62:93:27:2a:
         4f:ba:10:9f:4b:a3:0d:e4:da:94:0b:b8:5c:b8:9e:6b:54:1b:
         6f:c5:67:6b:a8:34:21:84:ed:51:d9:8c:4f:e5:8c:2a:a9:99:
         75:cf:20:39:b0:73:f7:5c:ad:2a:b7:ae:26:dc:d8:06:db:d5:
         b1:78:46:9b:b6:65:a5:5e:5a:b9:b3:04:fe:c0:2b:0d:25:d9:
         8b:5f:31:6c:7b:ae:48:a4:aa:fc:bc:b3:9f:18:bb:80:7d:da:
         f5:88:06:52:76:08:a3:c3:cb:7d:fc:79:0c:65:9a:0d:74:18:
         45:fa:26:d2:6d:95:c3:39:86:4d:d1:be:cc:29:7b:4c:3e:60:
         c7:50:ba:17:ac:25:50:19:cc:39:12:41:68:26:ce:8c:c3:e2:
         55:f4:e4:4a:98:58:b8:ab:5e:e2:b1:85:94:b9:bb:d8:9a:cc:
         8c:aa:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----