Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa
File:                     3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa (raw, json)
Hash identifier:          t3ZSKMQFyESMl9Gn8UWQbkda1KsHuMuc+tbkmfaloR4=
Subject key identifier:   81:5E:A4:D8:9B:FD:91:F0:3E:5C:55:45:B9:AA:D2:90:49:36:E1:AD
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0435AA41FC40773629B6B99A77512537C5BD0BC5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa
Signing time:             Thu 01 Dec 2022 12:53:02 +0000
ROA not before:           Thu 01 Dec 2022 12:48:02 +0000
ROA not after:            Thu 30 Nov 2023 12:53:02 +0000
asID:                     211588
IP address blocks:        192.109.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:35:aa:41:fc:40:77:36:29:b6:b9:9a:77:51:25:37:c5:bd:0b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Dec  1 12:48:02 2022 GMT
            Not After : Nov 30 12:53:02 2023 GMT
        Subject: CN=815EA4D89BFD91F03E5C5545B9AAD2904936E1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:24:10:a9:f9:1b:fe:9b:64:3f:e9:a4:ab:
                    39:7c:93:c2:0e:1f:0f:a2:0b:86:25:7d:a2:49:62:
                    b9:3f:98:2a:10:8a:e4:91:f2:0b:42:7b:06:d8:cb:
                    77:f1:a7:ca:b3:c5:da:ce:8a:6a:8d:3c:b9:6b:6b:
                    ea:d4:c2:d9:bd:0b:36:1e:c3:39:ea:1b:79:50:e3:
                    91:73:9e:72:37:bf:7b:a8:69:c4:98:ab:37:78:2e:
                    07:5e:b0:1c:1b:fd:c9:90:7b:a4:40:12:ca:eb:70:
                    d4:19:77:f4:82:a7:c4:1d:9c:fe:1e:18:f4:de:30:
                    ab:c2:0f:95:d6:47:76:0e:a6:20:bd:cb:c4:54:e3:
                    e1:6f:93:ce:ad:c4:e2:8c:c5:48:06:b9:3c:7e:70:
                    f4:4f:17:cd:9e:78:45:07:3e:c4:f9:28:9a:4d:1f:
                    8b:9f:b6:d5:04:c5:8e:e5:09:57:74:66:c4:d2:67:
                    13:43:3b:e8:10:27:59:eb:4a:6d:8f:18:96:e7:09:
                    44:99:40:41:0b:7c:89:ff:5b:a3:6b:42:7d:15:29:
                    3a:9d:14:50:ab:d6:2d:24:5c:53:80:d6:0e:d2:1c:
                    64:62:8f:6c:e0:5e:40:57:0d:8d:68:b1:6e:10:1d:
                    82:7c:cc:82:79:35:bd:ba:de:28:db:2a:e9:fb:a0:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:A4:D8:9B:FD:91:F0:3E:5C:55:45:B9:AA:D2:90:49:36:E1:AD
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3134392e302f32342d3234203d3e20323131353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:cf:d3:e5:a8:f5:10:0a:dd:2d:43:97:ca:83:19:0a:eb:
         7b:be:12:6d:cc:19:26:47:db:58:01:ad:f3:ad:ba:61:85:72:
         09:84:93:3e:9f:fa:7b:53:69:9b:21:17:8a:90:e1:4a:e1:01:
         1e:72:07:c6:4d:a0:02:94:f2:20:16:92:15:5a:ce:26:37:82:
         2a:34:65:28:22:87:20:d4:e0:6d:ed:73:bd:7e:2d:e7:27:f1:
         cb:65:42:42:1d:4e:f8:e6:4b:12:b7:e1:84:b3:bf:f2:b5:a0:
         14:27:87:c6:d4:1b:33:cb:1c:b6:63:15:29:04:7f:6e:43:15:
         45:fd:b5:00:6c:b7:31:6c:05:d8:80:c2:32:76:ee:11:54:d9:
         68:56:0d:65:d0:f1:bc:39:c7:18:dd:71:2a:02:bf:10:91:6f:
         6e:a5:1b:7b:91:52:54:d0:c2:8b:13:4c:bf:a5:a7:73:28:83:
         e5:cd:8e:87:f6:ab:75:3d:11:40:3e:37:27:3a:fb:e4:65:1e:
         50:63:a2:c3:e2:82:4b:34:32:eb:75:1d:fa:c4:82:a7:e6:42:
         26:18:a3:a2:b6:5f:c6:fe:a8:78:64:0d:c9:5c:22:ae:50:4a:
         83:b8:da:c3:81:14:5c:3a:29:cd:2d:e4:b8:18:47:92:13:62:
         a4:cd:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----