Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS140155.roa
File:                     AS140155.roa (raw, json)
Hash identifier:          fDWtXsB5kOlA7lin3wXk5EgwhZ2hRIM/3Ls44IyiTrM=
Subject key identifier:   59:69:C3:12:5B:B5:46:2C:D2:74:64:B2:3C:95:FA:54:B2:DB:EC:CE
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5EC3DC10FE3DB6165234D039FAE5BB6D091A264E
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS140155.roa
Signing time:             Thu 20 Jul 2023 00:00:16 +0000
ROA not before:           Wed 19 Jul 2023 23:55:16 +0000
ROA not after:            Thu 18 Jul 2024 00:00:16 +0000
asID:                     140155
IP address blocks:        216.246.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 Nov 2023 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c3:dc:10:fe:3d:b6:16:52:34:d0:39:fa:e5:bb:6d:09:1a:26:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 19 23:55:16 2023 GMT
            Not After : Jul 18 00:00:16 2024 GMT
        Subject: CN=5969C3125BB5462CD27464B23C95FA54B2DBECCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:fc:79:c0:a9:59:2f:3c:83:af:7f:c7:20:
                    28:a8:65:43:c7:89:2f:ed:8f:d9:fa:09:d9:9d:2e:
                    cf:b6:27:df:7f:15:87:92:26:ef:39:b9:6e:bb:4c:
                    fd:fa:40:29:ef:a7:ae:15:02:54:9f:b5:2a:52:07:
                    20:e7:1e:fa:61:57:a1:d5:bc:33:35:cf:4d:e7:92:
                    84:7c:cc:11:46:86:08:97:2e:e1:cf:7c:fc:c9:0c:
                    e3:f2:8b:e5:eb:76:6a:f9:74:39:04:4f:fa:f6:7b:
                    5b:c3:ec:e1:96:b8:19:a0:64:1f:00:a8:af:8a:b5:
                    0f:2a:ca:f3:75:b2:fa:7d:9b:52:88:fb:de:28:57:
                    5b:20:de:00:a5:0f:f1:0e:40:ab:ae:01:08:d5:c6:
                    45:6d:dc:0c:18:24:f3:88:44:81:42:7f:9d:0d:86:
                    12:72:6c:d3:69:57:c2:80:5a:a8:ec:39:16:12:79:
                    5a:3a:40:5e:4e:e8:c0:9c:34:a7:d7:05:4b:fc:9c:
                    12:3f:d0:42:0a:4e:04:32:0b:f2:72:52:20:7a:58:
                    96:c8:13:5e:6c:b1:06:b0:39:ed:29:a1:b8:37:c6:
                    14:3a:0a:e2:f5:1c:6c:ad:a3:ca:12:ff:16:b7:22:
                    dd:06:1d:04:fb:34:37:47:14:f3:f0:aa:4e:f0:a7:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:C3:12:5B:B5:46:2C:D2:74:64:B2:3C:95:FA:54:B2:DB:EC:CE
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS140155.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:51:f7:89:0e:ab:92:61:0c:03:26:29:81:94:a9:6c:cc:
         ab:cc:d6:ba:51:db:f9:53:78:c0:16:26:e9:c5:d0:78:4d:d5:
         ed:0b:7e:78:9a:a6:f2:ff:1e:16:ce:1c:8b:c9:c6:71:34:d6:
         4a:42:31:c5:9d:47:82:a0:3f:6d:c6:b4:ef:85:7d:af:7e:89:
         7c:3c:d6:23:1f:33:63:00:cc:11:f9:2d:7c:3c:c2:db:dc:a0:
         2a:0d:94:7a:4a:d7:3c:d5:aa:ba:4e:12:4d:b8:20:54:1a:05:
         68:04:d2:4d:4a:10:b6:54:94:9b:db:9f:41:7c:09:65:dc:45:
         ec:11:80:67:bc:ae:60:4e:db:f0:90:12:24:17:83:ed:c2:d3:
         b8:98:42:84:a1:5b:80:98:48:75:37:64:52:36:fe:f5:a4:30:
         3a:84:98:6f:26:20:04:46:71:04:a9:de:f0:ec:33:47:92:e7:
         da:ba:f6:ef:89:ce:6b:8f:b6:77:25:51:03:e7:b7:c4:ff:4d:
         2b:2a:d2:f0:34:fb:59:67:1d:d8:b4:31:8a:77:84:e9:6d:e0:
         51:ed:42:0a:6c:c2:1a:83:f8:43:27:6f:b3:3c:81:50:6f:49:
         89:11:ae:5c:79:f5:d5:8b:78:5a:14:e8:15:87:67:7a:60:55:
         a8:34:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----