Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS200385.roa
File:                     AS200385.roa (raw, json)
Hash identifier:          lqMKlV7fQCjqtPRxpN3w7gjNsbKicohwPKz7Gloo95s=
Subject key identifier:   5E:9C:7A:2E:EA:FB:21:C0:EB:CA:56:89:0B:16:5E:FE:97:58:6A:F4
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       75710468B3656C3CAEED772AA62D930096203AF7
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS200385.roa
Signing time:             Wed 19 Jul 2023 00:00:04 +0000
ROA not before:           Tue 18 Jul 2023 23:55:04 +0000
ROA not after:            Wed 17 Jul 2024 00:00:04 +0000
asID:                     200385
IP address blocks:        205.234.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jul 2023 00:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:71:04:68:b3:65:6c:3c:ae:ed:77:2a:a6:2d:93:00:96:20:3a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 18 23:55:04 2023 GMT
            Not After : Jul 17 00:00:04 2024 GMT
        Subject: CN=5E9C7A2EEAFB21C0EBCA56890B165EFE97586AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:4e:9a:4a:27:66:3b:1f:b4:d7:f7:07:34:
                    8e:44:45:41:92:d8:17:49:02:3f:c4:c5:e0:f2:45:
                    18:9c:95:4c:a2:91:29:df:ee:02:9c:a8:9b:75:61:
                    f9:fc:49:94:ff:13:a2:6c:4c:76:ec:53:fd:2f:97:
                    44:52:3b:b2:36:2f:68:d4:b7:93:99:1a:6c:7b:df:
                    78:8b:fa:ad:09:d3:c2:b7:de:b5:14:dd:87:e9:bd:
                    96:21:50:52:ad:40:2f:e6:67:36:0c:d1:14:e2:3f:
                    85:b7:fd:1d:95:db:5e:7e:21:3a:25:37:96:42:83:
                    9b:a3:ec:d2:e4:2e:49:33:19:e1:9f:62:4e:ea:56:
                    2a:58:12:75:5a:8c:be:e7:d8:5a:47:b0:ca:ec:17:
                    6d:c3:2e:b1:91:99:1a:7c:4d:9f:8a:85:28:0f:12:
                    2a:53:66:de:ad:7b:6b:f7:3c:39:e5:7f:b0:c8:e2:
                    a6:24:ba:55:84:30:34:c2:b0:aa:bd:e4:d0:1c:29:
                    ed:fa:aa:01:d6:3d:65:37:08:9f:f2:9e:98:12:78:
                    f3:c8:bb:73:f9:c5:4a:ac:31:c3:12:42:1a:3f:e4:
                    ec:86:a2:a3:cc:7b:82:e6:8a:f2:a0:c2:15:4f:24:
                    79:fa:a0:b7:c2:a8:36:fe:d1:ca:22:76:e0:3e:83:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9C:7A:2E:EA:FB:21:C0:EB:CA:56:89:0B:16:5E:FE:97:58:6A:F4
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS200385.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:1e:21:fe:c2:77:16:ce:1d:81:24:f1:97:d0:24:99:d7:1e:
         cb:f0:6a:2b:22:d4:c2:be:80:bb:63:b6:81:cb:8d:a2:53:f3:
         dd:12:e1:8a:65:1f:9b:af:40:dd:9d:b8:d6:e7:5f:19:59:68:
         9a:8a:0d:94:95:7b:41:a1:af:16:88:1a:c2:f7:00:6b:67:80:
         c9:93:21:c8:d3:40:de:9c:3d:cf:68:b4:bd:90:78:25:52:30:
         e3:d1:68:7f:0b:33:3e:e3:70:f9:ff:b9:d7:54:ed:9c:a8:24:
         22:68:0d:83:f1:a4:c8:00:c3:d7:cc:c0:ed:f3:c8:04:65:52:
         1b:28:f5:7a:0f:4d:d5:6d:e2:ea:9b:90:ef:c2:99:23:b9:8a:
         ce:34:90:07:65:ed:6f:5d:70:75:19:b1:1c:57:8e:95:cf:6d:
         38:5f:28:e0:76:7f:4a:17:e8:9b:ff:ba:aa:f8:91:ba:83:64:
         c5:d8:be:40:0a:4f:6b:69:a5:8d:23:ee:16:6b:4a:ee:ec:d2:
         77:4a:ed:c7:29:2d:34:e5:05:f3:55:2e:96:11:d5:c7:fc:36:
         38:e5:67:1b:1e:f9:f1:f9:6c:a0:4d:42:7e:53:a0:13:35:f5:
         78:51:7d:cc:1d:d5:ec:b4:a7:5d:5e:8b:cb:07:ea:6d:a0:6a:
         4e:3f:5b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----