Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397373.roa
File:                     AS397373.roa (raw, json)
Hash identifier:          QKs9VAJAWGMqmW++K9spd9Nd62iYXeOztLNpP6e6qBE=
Subject key identifier:   35:A5:D2:6D:14:60:16:4C:EC:22:7E:C6:98:01:88:0D:73:E3:F9:CE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0332D4E2D67EB9FB6E4F4CD8276BE09BDD0CB844
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397373.roa
Signing time:             Wed 28 Jun 2023 21:21:55 +0000
ROA not before:           Wed 28 Jun 2023 21:16:55 +0000
ROA not after:            Wed 26 Jun 2024 21:21:55 +0000
asID:                     397373
IP address blocks:        104.234.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:32:d4:e2:d6:7e:b9:fb:6e:4f:4c:d8:27:6b:e0:9b:dd:0c:b8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 28 21:16:55 2023 GMT
            Not After : Jun 26 21:21:55 2024 GMT
        Subject: CN=35A5D26D1460164CEC227EC69801880D73E3F9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:d9:bc:38:1a:6e:42:8c:fc:81:10:c9:79:
                    c0:4b:bd:28:41:e7:64:ea:93:8b:60:b7:8a:96:a9:
                    2b:c3:e4:75:6a:b3:06:47:f8:95:51:7b:b9:e6:e3:
                    a4:c7:54:c9:90:25:7e:19:c0:e8:00:01:5f:28:c3:
                    3f:28:bc:b7:0a:0b:b2:61:ca:c3:76:9e:fb:aa:77:
                    0f:16:04:0c:5d:b0:90:22:62:eb:e8:72:cb:b4:ee:
                    85:ba:5a:16:c9:be:fc:a4:e7:1d:62:89:0a:dc:36:
                    d0:2a:18:a8:7e:00:e5:00:f2:9b:d3:22:22:df:cd:
                    8c:30:59:8e:7b:0c:bb:bb:01:6e:ca:31:53:f6:b4:
                    31:ac:6c:0f:ac:52:32:ff:4a:7a:55:ab:ce:26:dd:
                    e4:36:09:e4:02:29:7a:8c:78:46:0e:83:4e:6f:48:
                    44:94:de:b2:ce:78:d0:b1:c9:8d:4d:de:fe:82:04:
                    a1:32:03:58:67:59:db:f1:13:94:52:08:8d:8f:5f:
                    19:a7:63:01:cd:8b:69:e6:a7:7b:73:0f:04:f6:fb:
                    8c:75:77:93:5c:d6:ee:6d:55:cd:4e:ac:b0:81:4e:
                    1d:0e:a7:e9:c0:cf:4b:c1:33:a4:1d:f8:15:24:ed:
                    d5:f0:17:cb:f2:34:af:81:4f:e4:18:3c:cc:9b:00:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A5:D2:6D:14:60:16:4C:EC:22:7E:C6:98:01:88:0D:73:E3:F9:CE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:98:96:e6:2f:aa:07:a4:e3:f1:76:97:8f:ce:76:bf:1a:
         2a:6a:40:ac:71:24:56:9c:22:58:20:16:09:87:d0:d0:59:07:
         9d:2b:b2:ce:34:d2:e8:1f:6b:be:54:e8:4d:75:cd:a7:b8:70:
         09:4b:b3:91:eb:56:f9:af:78:93:be:d4:d0:26:e1:16:b7:9a:
         5c:cb:14:50:52:5d:97:a5:1f:38:e9:b7:17:f8:75:f0:e7:b8:
         65:2a:4b:ea:28:a0:ae:6f:0a:51:46:e2:99:e5:75:00:fc:02:
         08:62:12:af:fa:d7:5b:e2:39:ee:14:c6:4e:b5:6c:ea:75:54:
         19:d8:44:53:63:cf:f3:28:58:95:28:01:67:7e:70:00:04:19:
         80:64:ec:a6:9d:ac:32:3c:1f:1d:a5:f2:d3:69:63:6e:56:8e:
         2d:d1:80:ea:40:af:fa:0a:e1:69:83:65:5e:da:36:b5:d6:1d:
         4f:4b:da:75:00:8e:34:6b:55:34:d6:3f:48:39:e7:71:4e:fb:
         36:aa:02:2c:26:54:40:ca:c8:ba:b1:24:67:42:89:1e:ed:a9:
         38:69:b6:4d:9a:61:91:44:8a:f7:f0:b3:d1:49:8f:3a:5e:3b:
         bd:f5:1f:3a:f1:c2:03:02:f6:7a:34:ed:40:b2:9c:9d:73:1b:
         6d:d8:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----