Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49999.roa
File:                     AS49999.roa (raw, json)
Hash identifier:          h4St+RpIUU2gMW5jg867U92HPgRZKp5ytOFCFR1INNU=
Subject key identifier:   AA:5C:0D:C2:F8:B1:9F:3C:89:B8:58:2F:A3:CA:E5:E9:0B:E7:60:AE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       62D56C1998A5034EE12A84C61B5CC57EA50AA0FC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49999.roa
Signing time:             Thu 15 Jun 2023 21:22:08 +0000
ROA not before:           Thu 15 Jun 2023 21:17:08 +0000
ROA not after:            Thu 13 Jun 2024 21:22:08 +0000
asID:                     49999
IP address blocks:        104.234.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Aug 2023 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d5:6c:19:98:a5:03:4e:e1:2a:84:c6:1b:5c:c5:7e:a5:0a:a0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 15 21:17:08 2023 GMT
            Not After : Jun 13 21:22:08 2024 GMT
        Subject: CN=AA5C0DC2F8B19F3C89B8582FA3CAE5E90BE760AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:9e:65:48:08:1e:e3:4b:be:56:39:2b:74:
                    06:0e:52:8c:5b:bd:d5:27:1b:96:9f:ef:7a:ff:00:
                    e4:9b:2e:a1:96:e5:ac:b5:5b:3f:9a:fc:71:08:66:
                    28:9c:96:6a:e7:30:ad:fc:af:d9:8e:e4:2a:a0:6e:
                    ab:71:ed:c0:1b:a8:6b:05:06:b9:4d:38:3e:bb:87:
                    17:0b:70:47:f9:6d:84:d7:12:87:15:4a:2f:38:15:
                    27:fd:59:48:b1:67:b8:75:6b:c9:f6:9d:93:f7:cc:
                    62:88:42:bc:30:4e:e0:59:65:a9:0b:18:43:44:c4:
                    bb:aa:b5:3a:c8:f0:c2:5a:14:a7:62:71:e0:bd:d1:
                    31:91:59:fb:80:2d:7d:8a:cf:24:4a:77:53:57:1b:
                    53:12:06:74:8c:73:c3:8a:a5:69:f7:5a:d6:34:63:
                    50:46:91:a4:2e:ae:e3:5b:7a:a3:8d:68:1d:af:f2:
                    00:36:dc:9d:a9:29:4c:5f:1f:0a:67:7b:fa:b0:f4:
                    0d:e5:b6:b0:04:66:3b:80:10:f7:77:fc:93:49:95:
                    4b:aa:d2:02:ce:14:b5:fb:fe:25:b1:d0:6f:b9:60:
                    8b:14:fb:7d:08:02:e4:06:69:67:ad:f5:39:0b:a3:
                    7e:32:2e:14:71:94:4f:f6:cc:b1:e7:8e:6f:9f:2d:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5C:0D:C2:F8:B1:9F:3C:89:B8:58:2F:A3:CA:E5:E9:0B:E7:60:AE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:ca:b5:7f:7f:63:42:30:54:37:a1:3a:32:bd:7d:a7:f1:01:
         84:7d:20:71:98:40:ae:f8:91:91:a4:42:b2:20:19:b7:e8:14:
         a9:21:62:33:02:db:65:94:93:62:da:57:1e:91:5f:61:fd:ac:
         49:fe:5c:6b:4c:3e:1b:46:71:8d:2c:5d:e6:95:84:12:55:0c:
         ba:81:d4:ee:e1:f6:10:00:91:ae:24:cf:14:74:f9:9c:06:5a:
         9e:c2:92:3c:b5:12:53:d4:47:99:bb:9f:6c:00:ad:ad:9e:bd:
         a6:25:20:af:70:c0:21:3c:8d:c6:ce:19:ad:7b:31:a8:55:e5:
         d1:a4:bc:ae:e6:32:45:dc:5e:a4:40:4b:68:3f:c1:5e:84:62:
         a5:5a:e5:76:a5:21:a2:bf:53:5f:af:09:b3:34:55:45:f1:4c:
         82:1f:d8:32:ad:1a:20:17:39:34:4b:85:61:0d:db:81:41:16:
         bb:56:34:f8:04:89:2b:bc:2c:ad:d1:43:c5:a5:e5:dc:f1:51:
         59:db:a4:2a:84:65:5a:15:c1:97:0f:3f:7c:52:f1:f2:bd:48:
         a0:21:3d:36:4a:c0:0e:dc:ce:cb:1e:bf:1b:3e:a6:1a:af:22:
         be:f6:b0:8b:93:2d:db:0b:5d:ab:0b:89:0a:09:3c:1a:17:e9:
         dc:4e:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----