Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393678.roa
File:                     AS393678.roa (raw, json)
Hash identifier:          oja8mcoPsG2PS+FTO20eo5jp7bemm9TUiDq+UYXiy+Y=
Subject key identifier:   47:67:28:AA:9B:BD:E9:D3:99:88:C2:80:60:03:BC:09:78:FE:52:47
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       58A7D10A96B0D126988E142D0B55AA4B558A7A40
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393678.roa
Signing time:             Wed 18 Jan 2023 17:16:39 +0000
ROA not before:           Wed 18 Jan 2023 17:11:39 +0000
ROA not after:            Wed 17 Jan 2024 17:16:39 +0000
asID:                     393678
IP address blocks:        104.234.248.0/24 maxlen: 24
                          104.234.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a7:d1:0a:96:b0:d1:26:98:8e:14:2d:0b:55:aa:4b:55:8a:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 18 17:11:39 2023 GMT
            Not After : Jan 17 17:16:39 2024 GMT
        Subject: CN=476728AA9BBDE9D39988C2806003BC0978FE5247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:4d:6e:59:51:7c:2c:ad:ab:b5:1e:d0:a6:
                    e6:e7:2a:80:2d:b7:a1:80:b1:9b:f6:cf:fe:e3:de:
                    9e:c9:cd:82:46:81:fc:40:ff:4a:c9:c2:0a:7c:c7:
                    7e:98:31:1f:ab:8a:d5:4b:b1:f1:a8:58:cf:17:50:
                    a2:e2:cc:74:82:a8:90:27:8b:60:0b:c3:ba:37:a6:
                    be:ba:d9:14:60:c7:c8:93:50:99:3a:1e:2b:d0:76:
                    5c:c3:ad:a1:0c:fd:b9:c1:c3:2e:be:32:10:27:0f:
                    d3:32:f0:23:b3:ba:33:fb:67:65:3c:76:42:00:b1:
                    b9:9d:cc:80:54:af:b7:33:f7:5b:4e:85:20:fb:dd:
                    8b:0b:52:d6:ee:62:66:27:24:5d:cd:08:c7:7e:88:
                    38:eb:90:dd:1c:86:a7:ee:56:2a:e7:ae:1a:a6:5c:
                    43:30:82:5d:70:03:65:f8:db:45:2b:fa:1d:5f:cb:
                    9b:b2:12:52:ef:c7:f3:bb:3c:65:6e:7f:c5:54:29:
                    ea:cc:3d:7a:a6:89:5e:83:78:a1:30:ee:69:4e:a2:
                    96:01:8f:c1:9f:ec:be:8e:c3:c3:a5:5e:25:99:7b:
                    d6:9a:c4:6d:b2:81:c0:ec:3f:37:2e:cb:2d:fd:52:
                    ea:31:43:eb:5e:df:01:12:47:ce:f9:e1:3e:7f:08:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:67:28:AA:9B:BD:E9:D3:99:88:C2:80:60:03:BC:09:78:FE:52:47
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:f6:f6:3e:aa:02:8c:40:7c:67:4f:53:da:9d:c4:25:a9:6c:
         d9:c6:a1:61:ed:47:c6:9a:0c:37:d2:25:bc:f6:28:9b:ec:6b:
         d7:c7:49:cd:5a:47:96:7c:2c:b0:56:f7:91:ec:04:11:21:55:
         34:ca:09:6e:50:1d:36:a8:bf:c7:c0:8e:aa:5c:3e:20:95:45:
         eb:44:4e:cc:5b:e1:f8:df:64:2a:11:66:eb:c3:82:d8:94:9c:
         6b:26:02:83:b8:68:24:50:8c:ba:d0:75:2f:1b:ca:5c:7b:d2:
         b1:ad:12:97:86:b4:75:c1:f7:10:19:97:89:97:73:26:21:fa:
         80:f3:78:d1:bc:36:15:9a:c7:8c:96:a5:e4:51:45:44:b6:d3:
         92:6f:2f:40:a2:ec:cb:4e:6a:6d:aa:ed:5c:24:07:8d:42:88:
         5f:7e:b2:f1:e4:ab:7e:1f:cb:38:8b:ef:32:a1:e6:9b:55:3b:
         42:cc:0b:3e:a8:92:23:b0:00:e8:82:4b:e0:a2:be:3e:70:db:
         5e:ca:37:2a:17:fc:ef:cf:42:07:c5:05:a9:e3:cc:73:be:1f:
         d5:82:ec:0c:f3:54:c8:85:f2:fb:37:96:d8:5e:21:19:5a:82:
         10:3f:aa:cf:be:38:f7:6c:4d:88:07:26:21:c1:3d:b0:0c:2b:
         bb:8f:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----