Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233342e302f32342d3234203d3e203439393939.roa
File:                     3231362e39372e3233342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          I1yAX7UqxahMksdmrbIR1x9Y85MFWvYzRUc6pgpnKKg=
Subject key identifier:   28:59:48:69:26:E6:64:9C:6A:B0:8B:32:D3:DA:EE:13:B2:B2:3D:54
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       72793D36B2B00ECA1F81B91F267CCE17CD75D8E1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233342e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 08 Dec 2022 18:29:49 +0000
ROA not before:           Thu 08 Dec 2022 18:24:49 +0000
ROA not after:            Thu 07 Dec 2023 18:29:49 +0000
asID:                     49999
IP address blocks:        216.97.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:79:3d:36:b2:b0:0e:ca:1f:81:b9:1f:26:7c:ce:17:cd:75:d8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  8 18:24:49 2022 GMT
            Not After : Dec  7 18:29:49 2023 GMT
        Subject: CN=2859486926E6649C6AB08B32D3DAEE13B2B23D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:b1:45:0f:3b:b8:db:0d:1e:79:90:43:b8:
                    f4:1b:b3:dc:2c:76:76:41:d4:95:d1:37:bd:a9:6e:
                    34:3d:d3:50:ce:4d:b4:6f:8a:e2:9c:89:ea:73:ff:
                    83:46:3b:e8:45:e2:62:80:11:29:b1:d8:74:ff:a3:
                    df:55:4a:b2:c4:e4:61:37:12:0d:48:dc:7c:ad:f0:
                    d8:d4:36:f6:ff:d7:89:49:35:83:13:0f:f1:9d:55:
                    a8:df:00:34:40:69:40:fd:9d:ae:46:43:dc:0a:66:
                    da:bf:9b:97:cf:a9:5a:8d:27:62:c0:d4:7b:3c:5d:
                    33:d6:82:ab:64:10:a9:4b:1f:e9:73:2f:83:b3:60:
                    32:f3:10:a4:94:09:f1:7e:c1:39:ce:94:2c:36:12:
                    35:b9:3c:03:3f:16:3e:a2:ef:1a:bf:29:77:9a:9a:
                    1d:c9:0f:9d:df:5f:01:9c:6a:49:0c:47:c2:9b:5c:
                    de:92:02:85:26:ef:7b:70:12:5b:94:df:bc:a0:1e:
                    2a:4a:d3:4a:64:f0:ba:65:65:ef:a4:76:5c:5e:2c:
                    80:46:e0:d5:a7:9d:ea:44:14:8f:f0:77:58:81:19:
                    bb:f0:be:b2:81:65:79:d7:85:05:f7:7e:fe:b0:95:
                    42:e2:ed:a6:97:f3:a4:81:70:57:08:cf:28:c3:0d:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:59:48:69:26:E6:64:9C:6A:B0:8B:32:D3:DA:EE:13:B2:B2:3D:54
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233342e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:62:12:9e:8d:c5:cb:d3:d6:53:c3:3e:d4:6e:5e:f6:b6:dd:
         bb:be:1f:c8:12:63:f3:67:46:4b:28:95:b2:53:6c:c4:f2:3c:
         3b:28:80:c9:ff:9c:c4:c2:a6:53:9d:84:36:9c:65:b4:35:5c:
         8c:ed:88:bb:0c:8b:00:a7:ce:57:de:b8:13:54:e6:b5:a8:a4:
         e2:46:72:5c:ac:ef:1b:e3:40:18:88:27:0d:5a:e7:20:cb:3c:
         e4:70:d2:99:aa:85:47:e9:46:94:fb:d5:47:66:33:c6:ab:d5:
         4a:39:8b:ac:ad:a8:bf:9d:16:d7:d4:9a:69:f0:7c:67:d3:39:
         bd:a5:cd:2e:9c:ac:a4:6f:da:d5:ad:2f:2c:cf:d9:4f:1d:b6:
         d7:54:d5:21:bd:de:d8:4b:81:0d:cf:c7:64:33:2b:25:90:cc:
         98:67:3d:80:9e:47:9c:7f:9f:e4:bf:2d:7a:f7:8d:91:07:ff:
         18:74:84:b0:0d:7e:6b:6d:36:62:ae:c7:93:5f:bd:74:19:b0:
         d3:00:85:36:c3:eb:2c:67:5a:f0:ae:b2:3c:1d:59:8d:0b:66:
         8b:83:b0:6a:6d:70:86:38:ef:9e:12:dc:cc:03:af:3c:d0:93:
         60:7a:a8:4f:3a:fe:b0:95:eb:6e:04:e4:a7:04:19:53:56:34:
         00:5a:43:16
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUcnk9NrKwDsofgbkfJnzOF8112OEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMjA4MTgyNDQ5WhcNMjMxMjA3MTgyOTQ5
WjAzMTEwLwYDVQQDEygyODU5NDg2OTI2RTY2NDlDNkFCMDhCMzJEM0RBRUUxM0Iy
QjIzRDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse+xRQ87uNsN
HnmQQ7j0G7PcLHZ2QdSV0Te9qW40PdNQzk20b4rinInqc/+DRjvoReJigBEpsdh0
/6PfVUqyxORhNxINSNx8rfDY1Db2/9eJSTWDEw/xnVWo3wA0QGlA/Z2uRkPcCmba
v5uXz6lajSdiwNR7PF0z1oKrZBCpSx/pcy+Ds2Ay8xCklAnxfsE5zpQsNhI1uTwD
PxY+ou8avyl3mpodyQ+d318BnGpJDEfCm1zekgKFJu97cBJblN+8oB4qStNKZPC6
ZWXvpHZcXiyARuDVp53qRBSP8HdYgRm78L6ygWV514UF937+sJVC4u2ml/OkgXBX
CM8oww04ZwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFChZSGkm5mScarCLMtPa7hOy
sj1UMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzMyMzEzNjJlMzkzNzJlMzIzMzM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzOTM5MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhh6jANBgkqhkiG9w0BAQsF
AAOCAQEAiGISno3Fy9PWU8M+1G5e9rbdu74fyBJj82dGSyiVslNsxPI8OyiAyf+c
xMKmU52ENpxltDVcjO2IuwyLAKfOV964E1Tmtaik4kZyXKzvG+NAGIgnDVrnIMs8
5HDSmaqFR+lGlPvVR2YzxqvVSjmLrK2ov50W19SaafB8Z9M5vaXNLpyspG/a1a0v
LM/ZTx2211TVIb3e2EuBDc/HZDMrJZDMmGc9gJ5HnH+f5L8teveNkQf/GHSEsA1+
a202Yq7Hk1+9dBmw0wCFNsPrLGda8K6yPB1ZjQtmi4Owam1whjjvnhLczAOvPNCT
YHqoTzr+sJXrbgTkpwQZU1Y0AFpDFg==
-----END CERTIFICATE-----