Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e203631333137.roa
File:                     3139332e382e3230332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Ws4x0vgbDRz5kkJmXUwMve+PBje+0rCu0wbiU3U9YWc=
Subject key identifier:   0D:DC:12:81:76:61:AE:6A:F4:C2:86:E4:77:6A:7C:49:1B:E5:05:BF
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5787529AAB4077DF308BC307016C287B9F88636A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 06 Jun 2023 14:16:05 +0000
ROA not before:           Tue 06 Jun 2023 14:11:05 +0000
ROA not after:            Tue 04 Jun 2024 14:16:05 +0000
asID:                     61317
IP address blocks:        193.8.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:87:52:9a:ab:40:77:df:30:8b:c3:07:01:6c:28:7b:9f:88:63:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  6 14:11:05 2023 GMT
            Not After : Jun  4 14:16:05 2024 GMT
        Subject: CN=0DDC12817661AE6AF4C286E4776A7C491BE505BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9d:32:66:af:13:87:2c:ad:fa:38:ff:02:54:
                    6e:c0:a8:c3:b1:46:fd:72:e7:2c:1f:24:21:6a:48:
                    27:7b:7e:92:29:b6:41:cc:d1:1f:d7:b9:68:60:fa:
                    d5:a0:b3:05:3e:24:da:68:8f:6c:e3:2f:eb:88:aa:
                    57:75:14:08:92:6f:69:4e:49:f5:1c:5c:af:e4:52:
                    3e:3f:aa:a4:89:a4:b8:d5:7d:1d:23:88:f0:3b:b0:
                    93:82:95:68:b1:71:17:f9:2d:c0:d0:92:81:15:66:
                    6f:26:5e:67:d0:c8:8c:c1:f0:6d:f8:2b:68:0a:4a:
                    d5:71:8a:26:d7:15:e1:79:36:eb:ef:b0:5e:bd:c8:
                    95:54:b9:d4:91:d8:ef:cc:9b:31:ac:77:48:ea:ce:
                    af:8f:ff:0c:46:f0:eb:ec:c9:cc:19:5c:8e:a4:ee:
                    d7:72:07:cd:3a:aa:32:30:4e:08:1b:b7:e2:64:54:
                    4e:5d:42:bd:54:ab:09:34:f7:f0:2a:36:0a:a4:82:
                    ea:b0:f4:55:3c:0c:c5:95:65:1c:ee:4e:20:02:4a:
                    db:65:be:61:2b:01:23:a5:52:70:01:17:e2:43:4a:
                    84:59:ec:dd:fa:fe:81:6d:b2:fd:2d:97:07:35:2e:
                    81:14:a6:13:b9:a4:5a:bd:db:79:cf:3a:22:d7:3f:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DC:12:81:76:61:AE:6A:F4:C2:86:E4:77:6A:7C:49:1B:E5:05:BF
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:35:65:5b:47:fd:87:32:b8:65:a1:a2:1f:7b:a4:db:ef:e6:
         26:46:cc:19:4c:a8:e0:f4:b2:4b:af:16:99:3f:d3:39:38:ae:
         ca:7b:21:f7:f5:46:36:5f:e9:85:29:d7:6b:1c:9b:3a:43:7e:
         08:3d:36:79:7f:cd:45:e3:c0:ff:50:af:2d:60:5b:16:1d:c4:
         53:a1:06:b9:02:cd:8b:6f:41:dc:75:d3:f7:6b:ad:75:d9:e8:
         e2:ee:75:4b:d5:44:32:b4:ed:46:16:01:03:3c:7b:80:4b:d8:
         80:e4:e4:ea:25:b9:f8:b4:22:60:4b:db:25:2b:2c:ef:dc:ab:
         ca:0c:e2:5f:59:52:63:d8:64:ef:d8:dd:3b:16:d2:46:da:e6:
         d4:3f:6e:a2:2a:72:ea:59:cb:d4:1d:d3:b6:a3:42:3e:8e:e0:
         b6:7d:5c:69:de:22:76:d9:0b:3c:ba:e4:f9:c4:04:c3:3f:5e:
         27:4f:83:34:13:81:b0:92:22:1e:8f:59:91:d8:d5:31:c3:b5:
         8b:ee:be:42:36:a5:78:1f:ba:a9:e7:b8:d2:07:a1:c7:df:16:
         f9:15:0f:c4:1e:a1:e7:b8:cc:53:05:4a:cb:71:bf:65:00:a0:
         4d:1c:de:0f:b5:84:8d:0a:be:a4:4e:4f:62:6b:5b:21:dc:47:
         ca:dc:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----