Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          EIhl51tRZX/04/suqKntFJEM7e2PFKsG9KBLaNNw0DM=
Subject key identifier:   4D:43:F5:65:F9:DA:D8:4C:EA:8F:CA:46:43:6D:39:FE:C2:6C:8B:9C
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       389D4141F7DC4C44DF6B93D3BE6D144E991E869A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33696.roa
Signing time:             Mon 13 Feb 2023 18:18:36 +0000
ROA not before:           Mon 13 Feb 2023 18:13:36 +0000
ROA not after:            Mon 12 Feb 2024 18:18:36 +0000
asID:                     33696
IP address blocks:        104.234.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9d:41:41:f7:dc:4c:44:df:6b:93:d3:be:6d:14:4e:99:1e:86:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 13 18:13:36 2023 GMT
            Not After : Feb 12 18:18:36 2024 GMT
        Subject: CN=4D43F565F9DAD84CEA8FCA46436D39FEC26C8B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:d8:35:71:f7:64:96:68:b7:4c:ea:75:fb:
                    3c:89:f5:7e:fc:51:51:96:89:13:b2:ff:aa:69:42:
                    c0:ec:41:5a:cb:e8:84:f1:0c:85:bf:d1:07:5d:a6:
                    70:e3:46:de:41:11:94:14:0f:49:10:07:d4:36:63:
                    ad:62:91:25:01:91:e4:66:46:ee:ac:f3:47:12:d1:
                    70:0c:cb:c3:cc:1e:be:b3:81:a9:e3:5b:df:fc:ad:
                    f1:b0:2c:10:7b:c2:4e:d6:f9:17:06:d2:2d:ea:c9:
                    0a:26:63:35:c7:c8:40:24:5a:2f:05:2a:ed:25:c8:
                    5a:34:a4:87:aa:72:d8:85:bc:69:49:a1:29:51:a5:
                    90:b8:d8:bb:30:fa:86:0a:18:ba:c4:c2:08:21:28:
                    59:94:ed:0f:2b:a1:64:04:fe:0e:20:d4:b6:60:ec:
                    2d:09:af:2f:27:16:ec:6c:71:08:48:bc:6d:c3:e0:
                    7c:05:90:e6:2d:ba:d8:ec:6c:18:b3:6c:5b:73:9a:
                    21:bf:16:7d:83:9b:28:10:14:bc:08:fe:f7:a9:4f:
                    3f:c0:96:ba:07:f5:c1:82:85:cd:ad:b7:38:50:b1:
                    46:09:6a:f4:cb:d4:2e:01:18:e8:b6:f6:ae:10:45:
                    73:2d:27:49:2f:d3:6d:57:8a:0a:7a:68:59:b8:e0:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:43:F5:65:F9:DA:D8:4C:EA:8F:CA:46:43:6D:39:FE:C2:6C:8B:9C
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:e3:80:b2:59:ce:53:cb:01:39:a0:09:d1:37:cb:87:d3:
         d4:28:7d:2e:c0:d2:b6:de:94:26:5b:f5:e8:78:ce:14:00:9d:
         fa:c6:ce:51:a0:2c:1f:6c:46:ea:48:4c:0a:34:bb:ce:b5:1b:
         17:22:17:be:22:6f:e5:c3:a5:34:4d:ea:83:cd:d9:02:23:5b:
         4d:b3:21:c2:da:30:c6:f5:36:f4:6e:51:f1:e7:42:7f:65:3b:
         58:51:72:b1:d2:f5:8d:13:b7:b2:41:20:27:2e:1a:1f:d9:ba:
         0a:67:92:a1:d7:f8:f5:c0:d9:60:3b:50:ab:7b:06:c3:4b:28:
         48:1c:2a:74:9c:53:1a:ac:36:8f:5e:0f:29:10:8f:96:f2:ac:
         5d:5c:23:db:93:72:5b:eb:e4:45:07:b4:26:5e:09:9a:74:69:
         22:83:63:d4:b3:d3:1c:af:2c:b1:bb:4f:65:a5:0c:e7:51:25:
         ae:35:73:73:3b:17:72:5e:61:97:f1:eb:56:78:26:de:94:c5:
         c8:86:b7:80:d3:86:63:45:b6:18:0d:b6:ef:57:c1:0e:1b:12:
         16:17:29:c1:e4:aa:0b:3b:50:1b:71:42:5a:4a:2b:4f:7b:fa:
         e8:17:1c:45:81:30:a1:f6:83:bd:6f:fe:0f:7e:4e:b1:cc:09:
         99:88:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----