Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa
File:                     3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          5mRbi6ZZagM2jWiXLRtEujbjsftxqf1ljOSKYXep+U4=
Subject key identifier:   AC:7E:87:12:AF:12:85:71:81:A4:28:88:AB:26:C5:86:61:B8:FF:41
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2897EA3A70239B31FA9BCE0F98093E394A1BC678
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa
Signing time:             Mon 28 Nov 2022 11:22:01 +0000
ROA not before:           Mon 28 Nov 2022 11:17:01 +0000
ROA not after:            Mon 27 Nov 2023 11:22:01 +0000
asID:                     49999
IP address blocks:        216.227.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:97:ea:3a:70:23:9b:31:fa:9b:ce:0f:98:09:3e:39:4a:1b:c6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:17:01 2022 GMT
            Not After : Nov 27 11:22:01 2023 GMT
        Subject: CN=AC7E8712AF12857181A42888AB26C58661B8FF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:c5:b6:18:ce:85:2e:1a:08:36:a7:dc:f8:
                    3a:3f:bf:99:b6:2b:6c:30:38:5c:97:4d:fb:27:9e:
                    13:51:c4:76:13:1b:5c:3f:30:4b:9e:a0:c2:ad:a3:
                    aa:36:c4:32:19:e4:34:a7:c4:92:e0:e6:ca:b9:a9:
                    ef:8a:cc:69:f6:72:30:cc:bc:da:4b:7e:9f:3e:60:
                    7c:61:65:85:fd:fa:2b:91:ce:de:be:55:51:a7:e8:
                    33:7e:4a:ad:f2:a3:38:d3:7d:e7:33:ec:e9:14:6f:
                    b3:14:bb:fc:bd:52:72:16:f5:c8:4f:1e:07:dd:95:
                    3f:65:ee:d4:70:79:50:3a:5c:d0:15:7c:8f:63:48:
                    a8:c3:52:04:be:1f:2f:c1:ce:0a:4a:11:ad:71:a5:
                    39:47:de:49:95:b1:00:b1:60:80:34:df:fb:0d:1b:
                    ce:21:00:04:8f:41:27:06:91:bb:a3:25:5d:59:cb:
                    97:71:b4:84:58:30:2e:62:be:27:c9:b7:9b:32:99:
                    88:f2:15:70:ed:06:c7:4d:b8:b5:9f:21:52:f5:f0:
                    82:4c:5f:fd:8e:ea:36:42:5f:ce:3d:fe:20:57:cf:
                    be:a6:2e:8b:77:9c:e2:8f:8b:ff:cf:7c:0e:af:95:
                    00:9d:46:3c:23:29:ee:49:18:6b:82:4d:32:1c:5e:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7E:87:12:AF:12:85:71:81:A4:28:88:AB:26:C5:86:61:B8:FF:41
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e3232372e3231362e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:3e:ff:ed:81:85:b4:49:79:81:b8:c8:29:d6:7f:53:eb:
         52:5e:1a:ff:ba:f7:db:fe:45:10:35:bd:98:a9:c9:77:f2:b5:
         db:d0:bb:01:cb:22:eb:d5:ea:cd:00:55:8e:a8:f2:37:fd:04:
         bb:8c:f3:3c:32:be:f7:5e:86:78:2d:d5:ce:13:4a:aa:27:a9:
         a5:47:7d:32:33:7c:4b:ff:a4:50:f3:59:5c:a2:d9:d6:50:0f:
         19:a7:e9:fe:3a:37:ea:e5:10:09:6f:11:aa:3e:a6:40:38:98:
         87:22:f2:fe:bd:0e:91:8a:0b:72:79:0f:f0:dd:4a:e5:05:56:
         e9:ef:50:0e:cd:5a:c7:c3:48:cd:22:e2:b9:3f:e3:00:7a:43:
         4a:b0:45:01:8c:bd:64:71:6e:a5:19:0c:49:db:8f:f7:11:32:
         cd:06:be:db:62:04:40:e2:31:5c:32:7d:19:4e:1f:a9:27:09:
         86:6e:dc:fc:4b:4d:6f:e5:0b:7d:44:4b:8b:f7:7f:48:e1:df:
         7b:4a:2f:11:82:29:fc:02:21:7a:a4:66:f7:57:00:bd:9d:69:
         18:ce:d4:ca:28:13:b8:21:bb:16:16:b6:bf:ff:ee:72:f7:ad:
         f1:61:c1:fd:e4:18:be:c1:ee:4c:13:ab:7e:1d:66:15:1e:36:
         21:fb:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----