Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS44547.roa
File:                     AS44547.roa (raw, json)
Hash identifier:          03nKfrHDswk20v1FJrM7mvI6seiKeioTKCIuExsAEn8=
Subject key identifier:   2E:C5:27:3B:2C:7F:FC:16:BE:8D:65:69:ED:13:38:48:B6:19:97:82
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       28758F6178891CA9E85B0883CA89C3D4B94ACA73
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS44547.roa
Signing time:             Wed 26 Jul 2023 21:03:10 +0000
ROA not before:           Wed 26 Jul 2023 20:58:10 +0000
ROA not after:            Wed 24 Jul 2024 21:03:10 +0000
asID:                     44547
IP address blocks:        64.202.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 09:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:8f:61:78:89:1c:a9:e8:5b:08:83:ca:89:c3:d4:b9:4a:ca:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 26 20:58:10 2023 GMT
            Not After : Jul 24 21:03:10 2024 GMT
        Subject: CN=2EC5273B2C7FFC16BE8D6569ED133848B6199782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:58:47:ad:38:f9:51:08:71:a2:46:76:36:
                    b2:f1:fe:d4:cc:9a:33:4f:9c:3b:3b:91:2e:1d:86:
                    bb:14:22:91:39:11:06:e4:26:07:15:b4:29:8a:1a:
                    44:88:d9:07:da:4f:a2:be:78:5a:cd:3c:7a:e2:8c:
                    95:17:c5:11:2f:1c:2c:69:2e:fe:f4:d8:91:04:af:
                    3b:d9:64:9f:bc:ab:5d:38:fd:74:1b:1e:08:3b:eb:
                    ef:2f:4e:6d:e9:cf:25:c7:d3:21:b4:f9:07:72:82:
                    0b:72:8e:0b:7e:8f:72:e4:75:9b:16:20:47:11:49:
                    11:c4:35:7d:27:c1:05:a3:67:54:ac:ec:74:0a:17:
                    41:02:23:28:3f:43:34:5f:63:b7:6d:c3:f4:8f:ba:
                    04:f1:1e:94:12:60:e1:52:7c:1b:16:2f:01:56:b7:
                    52:95:25:af:c7:17:b7:c6:f8:ea:80:b2:cb:98:64:
                    6f:b4:5b:e9:ee:fb:d7:bc:15:e8:5a:7b:4b:37:5d:
                    8f:12:ce:76:7c:7e:8b:64:35:bc:61:c3:c0:6d:5f:
                    65:02:63:62:ea:4d:c3:e0:c4:99:1b:40:6b:63:66:
                    ec:0c:82:db:d4:57:59:0c:b0:b2:f7:76:0b:10:72:
                    b5:61:32:2d:a2:46:b4:ef:6d:28:0b:d0:b9:a9:63:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C5:27:3B:2C:7F:FC:16:BE:8D:65:69:ED:13:38:48:B6:19:97:82
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS44547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:9f:36:9a:03:26:1c:e3:d8:4b:37:9f:82:5c:e9:23:c5:
         07:29:35:d7:c9:d1:f1:b4:6d:66:18:df:09:9a:40:0e:40:15:
         eb:51:85:46:5e:fc:f5:d0:3a:26:32:b2:93:9e:b3:95:97:6f:
         a1:df:78:1f:2c:27:25:a2:48:d5:c4:1f:2d:7b:7d:0a:21:bb:
         d8:b8:94:3e:aa:09:d3:17:21:2b:b1:8c:2e:97:a2:f3:df:04:
         49:bf:15:c2:50:4c:e3:2e:7f:7f:3e:93:0b:c3:8f:b1:d2:ba:
         da:bd:fe:67:e2:e2:db:96:6f:7e:15:55:91:e5:c9:17:57:b3:
         39:47:4a:80:23:40:eb:c8:4e:4f:91:ef:54:b7:ca:fd:7c:4d:
         e0:3f:fc:78:e4:b4:e0:12:28:e2:70:de:d3:fd:1a:d3:f5:43:
         cf:91:db:c3:69:77:d8:27:4e:b0:d1:5c:e3:3a:07:6f:2d:e2:
         9c:6a:cf:d7:67:3d:8d:26:fc:2e:1a:f3:b9:5e:74:03:ee:0e:
         d8:14:20:36:61:b6:af:8e:27:93:b6:f7:fb:28:c1:2c:24:10:
         e3:71:8d:38:ef:b2:fa:aa:f1:73:9b:50:e5:fc:96:7b:94:28:
         23:3b:c0:bb:ee:44:fd:9f:7c:ae:5b:a1:f0:10:c3:e5:10:35:
         18:f7:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----