Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212219.roa
File:                     AS212219.roa (raw, json)
Hash identifier:          FLzIlO6WpPt0en3lZ9qS+UzzYZr6p7TWDYsjQj/RolA=
Subject key identifier:   BA:CA:6E:DD:FA:10:DB:1C:5D:67:F7:81:38:3E:DF:FA:4A:16:8D:BB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       43F34E16D52C2EA35A4CD098E8C8B79A3E994101
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212219.roa
Signing time:             Wed 18 Jan 2023 17:16:44 +0000
ROA not before:           Wed 18 Jan 2023 17:11:44 +0000
ROA not after:            Wed 17 Jan 2024 17:16:44 +0000
asID:                     212219
IP address blocks:        98.142.250.0/24 maxlen: 24
                          104.234.47.0/24 maxlen: 24
                          104.234.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f3:4e:16:d5:2c:2e:a3:5a:4c:d0:98:e8:c8:b7:9a:3e:99:41:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 18 17:11:44 2023 GMT
            Not After : Jan 17 17:16:44 2024 GMT
        Subject: CN=BACA6EDDFA10DB1C5D67F781383EDFFA4A168DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2b:a6:df:bf:ae:07:00:39:d3:fc:df:1b:92:
                    0b:63:b6:54:17:97:2f:19:55:b2:34:5d:a8:a5:e5:
                    9f:d6:34:0f:69:e7:20:ef:67:14:20:d6:4d:b5:80:
                    c1:62:36:b8:73:b4:59:34:d6:0f:7a:35:1a:b9:48:
                    7f:c8:e8:76:e2:25:aa:d5:91:cc:e5:4a:66:33:38:
                    47:08:6e:31:20:72:ac:9d:ce:ff:15:fc:9f:d5:e7:
                    9c:d1:6f:01:67:87:80:06:fa:96:08:67:3b:4b:9b:
                    80:9b:ff:6c:c6:f8:95:a3:0f:ae:85:33:d5:71:ac:
                    63:cd:b9:6f:8d:1d:24:0b:60:a4:69:39:34:7b:08:
                    64:6e:42:7c:6b:ca:27:cc:65:3f:de:70:e0:f1:2a:
                    e5:3a:00:e4:70:16:c1:86:96:f6:e3:b9:83:6f:1b:
                    ac:2d:46:06:40:bc:38:e6:71:5d:09:ad:e7:fe:3e:
                    82:d5:31:20:ed:c6:db:dc:c2:77:da:7b:36:f3:f5:
                    40:cd:0c:22:c8:cb:11:a4:e2:a5:9f:6f:35:98:a4:
                    11:a6:ff:30:c9:6d:e7:7b:62:b8:b1:7a:d3:99:b1:
                    d2:dc:e7:83:eb:d3:0c:8b:51:87:9f:87:06:a8:b5:
                    19:42:82:7f:06:88:23:87:78:33:be:4e:9c:03:9c:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CA:6E:DD:FA:10:DB:1C:5D:67:F7:81:38:3E:DF:FA:4A:16:8D:BB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.250.0/24
                  104.234.47.0/24
                  104.234.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:d0:19:6f:62:10:d5:f6:d7:fa:54:9a:db:df:20:a6:b5:
         3f:3d:32:a1:07:dd:9f:a9:aa:c8:25:6e:ca:15:0d:28:d3:f4:
         65:bf:02:74:d4:09:14:6d:f3:20:16:fe:19:08:df:8b:c7:22:
         64:3d:f2:f8:b9:bf:e1:1b:d8:87:0c:c5:0c:2b:7b:5d:13:85:
         0b:6f:53:47:9d:75:66:dd:f1:7d:a8:9a:c4:2f:f6:da:ad:1c:
         b6:a5:16:c7:39:a4:81:de:db:37:e7:1a:6c:0d:5e:99:bd:c8:
         f8:e4:a1:79:ad:c7:56:ac:8b:c4:5a:39:75:fe:8b:7b:21:27:
         1e:07:00:66:60:d4:24:47:cc:34:29:60:1b:00:b0:91:1d:8c:
         9f:8c:eb:54:9a:38:cb:6b:7a:87:ad:83:5e:5b:67:e6:f8:b0:
         31:85:6b:44:37:8f:a3:49:b8:6d:ff:20:b0:4b:a3:2a:9a:95:
         78:96:79:cd:c4:c4:ec:b8:64:f3:dc:0e:61:bc:ff:bd:d9:e2:
         6c:77:7c:8e:86:c3:fb:2e:64:51:7e:b3:e3:13:c7:3b:ca:8b:
         44:b1:38:d6:65:6f:51:b9:e6:12:bc:0b:64:04:bb:e6:ff:16:
         e4:9a:15:e3:52:3f:58:2e:a9:5b:b4:25:b7:35:15:67:67:86:
         49:d3:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----