Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa
File:                     3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          b4CG6Qa6bDaMNhvyqgKrYyMza7mb9xBr7qygg9o1ew8=
Subject key identifier:   60:22:79:E2:E1:EC:47:2F:61:42:CE:8A:C5:1A:B3:3C:17:3F:D1:33
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3784F6232D9B226A4C1D7A216F5CA1D200151169
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     1239
IP address blocks:        192.228.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:84:f6:23:2d:9b:22:6a:4c:1d:7a:21:6f:5c:a1:d2:00:15:11:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=602279E2E1EC472F6142CE8AC51AB33C173FD133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:a6:d8:f6:ae:ec:67:91:e6:5f:ac:92:90:
                    3b:b8:4e:5c:1c:5c:10:fd:82:2a:4a:47:47:5c:16:
                    0f:ea:af:63:3a:27:1b:b6:f9:4d:96:5b:73:cc:15:
                    64:b8:49:4f:c5:10:37:36:12:c7:a9:ab:d3:be:2d:
                    74:08:9e:e6:b2:ee:33:76:51:62:33:af:d9:0b:9d:
                    f0:f6:87:96:ed:00:dc:29:b3:c7:e2:99:98:e1:41:
                    09:4f:3b:ca:a0:15:38:1f:e6:f8:4b:3e:d0:13:20:
                    92:0e:25:37:58:9e:1d:2b:ce:38:75:4d:46:04:83:
                    fd:63:c6:01:8a:fa:c3:4c:2c:d9:30:6a:ad:12:83:
                    02:10:55:67:ba:44:c8:5f:72:28:ad:03:47:d4:a9:
                    ab:11:c4:f2:4a:7c:3b:eb:6e:b4:5e:82:2e:20:5e:
                    28:f4:29:23:14:00:ae:ce:c7:e4:d6:49:18:15:27:
                    6d:ef:1a:24:98:02:09:01:04:3b:f5:40:72:e9:fb:
                    62:dc:a4:d2:c1:3b:61:5c:13:d6:70:1f:ba:b2:a6:
                    45:dd:a4:57:ef:99:84:d5:7b:b0:1f:a3:10:22:7d:
                    ff:74:45:3c:cd:64:72:89:46:93:a4:db:de:e7:95:
                    9a:3d:4a:5e:a8:3f:8f:ca:c1:1f:3b:3f:21:11:ec:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:22:79:E2:E1:EC:47:2F:61:42:CE:8A:C5:1A:B3:3C:17:3F:D1:33
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:17:1d:0f:c1:a0:5b:80:03:0b:6f:f3:19:2e:13:24:1b:
         7f:45:d2:42:22:ef:ae:cd:ef:5a:94:76:8e:57:0e:b8:7d:7f:
         ae:83:d6:8e:8f:7d:00:c7:1c:cd:4b:55:34:9e:ba:d2:4a:68:
         87:9c:3f:5e:d6:ef:76:cc:e7:c9:99:37:37:d8:51:c8:48:2f:
         91:b6:9b:ca:46:42:e2:da:b3:dd:b5:ba:0f:5b:ee:75:84:ee:
         5e:16:f0:a6:06:1a:0a:0d:06:90:91:c2:d4:27:f5:56:71:7c:
         f5:fe:15:47:5c:42:1a:58:21:8c:bd:ba:ee:ef:bc:0a:f4:8f:
         ba:32:85:ce:04:8b:a5:fc:c5:8e:95:11:8f:73:da:e7:3c:fa:
         03:1d:f1:5f:d1:40:25:64:12:d6:7b:ff:6d:ea:ce:e0:89:0d:
         6f:69:10:63:e0:7e:03:e3:05:25:d3:a7:c3:9e:59:d2:66:25:
         02:3f:f5:40:e6:cc:b3:cb:e5:53:9a:70:e1:14:99:90:ed:4d:
         84:73:f1:22:85:b0:89:0f:b0:3f:6e:10:73:b4:7a:ca:18:19:
         43:37:3e:e0:78:b8:d6:7b:5b:76:51:17:f9:6b:d8:a0:1c:81:
         6e:df:c6:2c:c8:38:90:c2:c0:47:71:26:31:3d:02:fc:4a:9b:
         76:1f:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----