Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212027.roa
File:                     AS212027.roa (raw, json)
Hash identifier:          +4BoAtQQeH8gutpwag5Py7aNQgiBfgK8UVVK6XRMLkY=
Subject key identifier:   01:81:84:B6:AB:C8:DF:2E:FE:77:7A:90:29:88:2C:6C:FB:D7:0D:D6
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       78BE68DF387F82145772E9D40E882F19585E87C7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212027.roa
Signing time:             Mon 16 Oct 2023 11:00:08 +0000
ROA not before:           Mon 16 Oct 2023 10:55:08 +0000
ROA not after:            Mon 14 Oct 2024 11:00:08 +0000
asID:                     212027
IP address blocks:        104.234.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:be:68:df:38:7f:82:14:57:72:e9:d4:0e:88:2f:19:58:5e:87:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 16 10:55:08 2023 GMT
            Not After : Oct 14 11:00:08 2024 GMT
        Subject: CN=018184B6ABC8DF2EFE777A9029882C6CFBD70DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:23:26:0b:a9:c0:50:08:a3:f0:8b:cb:f6:
                    ff:ee:9e:29:71:19:52:ae:c5:dc:6f:96:f7:dd:af:
                    ea:a9:98:1f:4a:8d:ec:e9:5f:cb:fb:c0:f7:4f:ec:
                    15:45:92:3b:e3:d6:55:93:22:f3:cb:e3:78:0e:96:
                    27:d3:ca:ac:a2:58:a7:92:dc:88:f6:0b:e9:e8:73:
                    b5:50:5a:d5:eb:66:ff:0a:c5:4e:b8:28:29:1d:0a:
                    4e:8f:d3:45:47:39:f1:01:30:31:c6:dc:c4:91:a6:
                    84:52:1d:81:a3:68:0d:4d:6a:93:13:a1:6b:96:d8:
                    1a:88:e1:cd:65:50:8f:32:f6:e1:67:40:64:94:6b:
                    39:b6:06:07:eb:19:82:1c:7e:66:7f:3e:90:16:44:
                    d4:62:62:e9:c9:4d:8a:cf:7d:b9:ac:3b:4a:ad:bd:
                    91:67:7e:24:2b:6e:33:27:81:78:c8:e8:63:69:e0:
                    d7:8c:b4:36:81:b7:74:c8:67:43:2e:8d:f7:d7:f0:
                    e2:74:79:ca:5e:38:37:04:04:72:c7:f8:38:90:f3:
                    61:d8:fc:90:22:ea:cf:11:96:ef:76:d2:d4:4e:24:
                    9f:8a:b3:02:75:70:1e:12:64:46:ec:d9:5f:05:26:
                    92:21:8d:d5:d1:2f:9c:63:17:af:04:ce:ff:e9:4f:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:81:84:B6:AB:C8:DF:2E:FE:77:7A:90:29:88:2C:6C:FB:D7:0D:D6
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212027.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:04:65:41:c7:13:7c:d8:29:02:80:02:70:82:7d:fd:47:
         cd:35:52:be:df:33:d0:8a:f1:e4:20:f8:92:9c:c8:f1:8d:0a:
         9e:a0:23:69:79:41:5b:c5:9a:cb:f0:35:bf:79:3c:8b:f1:7e:
         41:87:46:ff:0d:91:c1:53:99:8b:6c:5c:99:a8:71:e8:9d:2f:
         02:6b:0f:2a:12:8b:12:eb:1d:fd:60:77:0b:d9:09:35:55:d8:
         12:d6:8b:0c:67:c1:d6:0c:ac:17:50:3f:0a:86:08:cc:3e:35:
         ea:28:23:51:74:7b:f7:01:82:98:ee:ff:50:6a:3c:6a:7f:b9:
         67:d5:80:04:24:80:a2:ee:99:19:1e:d0:b0:be:24:f8:b1:38:
         39:c9:7d:fb:23:b2:2f:f9:74:3a:96:fe:91:37:b4:7c:aa:d6:
         4f:72:d3:c0:1d:49:06:14:4f:98:d8:b5:21:6b:4a:33:4d:db:
         fe:20:c9:30:e7:55:40:68:cd:e4:87:26:66:ab:3d:41:d3:0e:
         4f:99:8e:1e:c1:74:59:18:0f:f7:9a:5f:bf:73:82:a0:d2:b9:
         73:66:71:30:46:fa:a1:30:30:10:86:1a:9a:0b:aa:b1:7f:f1:
         82:12:3b:92:3e:79:ae:2e:9f:d0:44:78:1c:9e:7d:f3:3b:68:
         61:57:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----