Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233332e302f32342d3234203d3e203439393939.roa
File:                     3231362e39372e3233332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          1w7NeKg2cllLZxU3aPY54iRb1L3B8po2pvpEh6m2kGc=
Subject key identifier:   C3:65:CA:10:BF:1A:2B:6E:DE:51:C6:2A:51:AF:DD:6D:F8:7B:8D:60
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       49972444CAEC513139AAFEC25AF0BDB707B92321
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233332e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 08 Dec 2022 18:29:47 +0000
ROA not before:           Thu 08 Dec 2022 18:24:47 +0000
ROA not after:            Thu 07 Dec 2023 18:29:47 +0000
asID:                     49999
IP address blocks:        216.97.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:97:24:44:ca:ec:51:31:39:aa:fe:c2:5a:f0:bd:b7:07:b9:23:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  8 18:24:47 2022 GMT
            Not After : Dec  7 18:29:47 2023 GMT
        Subject: CN=C365CA10BF1A2B6EDE51C62A51AFDD6DF87B8D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:f3:e0:a9:a5:ea:91:51:c0:35:ff:a6:99:
                    a1:df:b5:8d:30:ca:58:6e:aa:a7:2a:ad:54:97:94:
                    88:4d:0e:2b:81:9a:01:cc:ae:37:95:b7:21:a7:9a:
                    48:b7:c3:12:c5:c8:c3:e1:00:23:64:3d:39:55:ab:
                    46:2c:dd:2f:e5:33:80:a4:25:be:7d:a9:60:a0:99:
                    2a:8f:5a:e0:3a:73:96:c0:38:a8:f0:63:e2:a3:d2:
                    40:02:cd:3f:6c:10:f8:b6:55:84:c1:2b:c0:b9:4c:
                    24:f8:86:90:fb:be:20:9a:bc:46:d5:e3:51:95:d3:
                    7b:da:4e:26:80:04:c3:0a:36:8e:1c:91:fb:a9:fd:
                    49:f3:0b:79:13:63:03:4b:20:00:ce:c0:cd:c6:d2:
                    c4:d3:7e:ff:5c:ae:3d:b6:38:72:14:a4:d7:3a:2c:
                    cf:69:47:37:1e:64:18:e9:61:c5:84:f2:bc:1e:c3:
                    34:94:3f:18:09:ba:ce:66:63:c4:fc:a5:32:9c:34:
                    82:05:1d:be:7c:9a:f9:23:4e:fe:c7:3f:db:24:d5:
                    e4:eb:a9:4a:aa:43:c8:88:1e:b0:ef:2e:f4:ec:73:
                    6e:b3:cc:5c:37:1b:ea:62:df:ac:7c:91:8b:52:f0:
                    58:cf:6c:c1:b1:e8:1a:78:65:d5:87:55:38:c6:2f:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:65:CA:10:BF:1A:2B:6E:DE:51:C6:2A:51:AF:DD:6D:F8:7B:8D:60
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:1d:5d:df:6b:b6:3c:f2:fc:45:fa:4a:38:7f:15:99:66:
         59:64:bb:38:c8:c0:5a:3d:76:20:35:69:e9:83:6e:61:de:41:
         d7:48:a7:59:86:f5:2c:c0:b6:a1:9e:9b:36:72:c7:6a:c4:63:
         94:43:58:5f:be:67:b5:e2:81:01:e0:66:94:8f:bf:ef:4e:db:
         71:a2:f4:29:04:2f:1d:d4:9e:ed:04:44:34:57:a3:f4:90:f6:
         c5:2a:ee:7e:84:d5:b6:b7:2e:3c:8f:79:18:12:b1:73:c6:11:
         2d:20:d4:16:2e:63:05:ee:2f:5f:e0:99:68:3c:35:a4:ca:70:
         19:5b:87:fc:47:ae:71:fe:19:72:3b:f4:b8:1b:e9:28:b0:d5:
         1c:4a:82:65:81:84:b2:ce:c1:23:d2:bd:fc:a6:b0:03:b2:37:
         64:2b:60:c0:03:19:e6:4b:d1:7a:9f:9e:58:ea:8a:09:22:78:
         23:cc:a6:e5:de:00:60:b6:e4:cc:59:69:4b:63:02:6f:10:ad:
         ca:c4:75:b9:02:7a:f1:53:37:28:40:66:9e:8c:94:7e:b8:67:
         7a:97:5a:96:17:a7:43:b2:8c:3f:69:89:85:4f:70:05:1b:3a:
         81:49:43:3e:d6:56:96:2f:e2:dc:79:b0:07:31:ee:b1:b0:8f:
         46:8a:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----