Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa
File:                     3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          mk6cwfA3W6HOVQ3M+d52gp5KrBxXjyVFWW1MjlAp6Oc=
Subject key identifier:   60:9B:16:1A:34:36:A5:60:0A:00:3C:54:FA:16:50:56:3E:04:2C:5B
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5C008EBA45397F1B8A35405823FF0C9ED9DB3A15
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     211585
IP address blocks:        216.97.236.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:00:8e:ba:45:39:7f:1b:8a:35:40:58:23:ff:0c:9e:d9:db:3a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=609B161A3436A5600A003C54FA1650563E042C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:d2:fd:f9:22:ba:ee:d9:a3:26:a9:a0:86:
                    ba:8b:45:ba:19:c4:5d:26:c1:8f:2d:9e:44:d3:01:
                    8f:a6:a3:66:60:e4:fd:88:3c:0f:bc:dc:2b:51:fa:
                    f5:95:59:b7:cd:3f:ea:66:e6:79:a8:62:5f:bb:e4:
                    9f:d2:bc:55:1b:44:b5:de:a8:11:02:2c:9a:5e:d8:
                    31:09:47:ae:03:08:94:38:68:7f:e9:22:64:aa:97:
                    0e:c2:b3:a0:d8:a8:ef:b7:d8:c2:62:58:fa:cf:1a:
                    f0:23:78:55:c6:55:e9:1a:17:84:56:34:73:b8:1b:
                    6f:fd:09:aa:0a:38:b1:a9:7d:0f:0b:43:55:0b:9f:
                    3f:b3:03:b0:df:0c:8d:d1:40:37:14:09:22:a8:a9:
                    f4:ea:05:e5:be:a7:2b:77:7f:f2:ac:a6:e1:c7:12:
                    5f:a2:cb:91:3c:dd:c5:04:af:e5:63:7e:f0:ba:bc:
                    67:69:ac:d2:25:39:ea:a9:d3:55:5b:c8:81:d7:ba:
                    c7:d9:67:71:b2:91:39:4d:be:0a:0e:29:ca:8d:ee:
                    0b:ba:04:55:bb:1f:66:d6:cb:e5:3c:ec:61:b3:88:
                    91:3e:0d:b9:d3:7c:d5:6f:f7:39:4e:31:a2:80:92:
                    6c:d1:cc:71:1f:0d:8d:53:2f:50:f3:93:7e:1d:db:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9B:16:1A:34:36:A5:60:0A:00:3C:54:FA:16:50:56:3E:04:2C:5B
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3231362e39372e3233362e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:fb:6f:23:ff:e1:8e:b9:7e:b2:3c:0f:cf:6d:aa:49:58:ba:
         1b:3a:78:dd:09:41:68:86:5b:e9:52:40:56:66:72:17:91:78:
         c3:97:38:56:8d:3d:75:48:2e:57:16:cc:2d:71:49:54:d6:34:
         ad:85:bb:ee:ca:16:ff:ce:8d:c9:f4:8a:a4:af:9f:6f:2c:45:
         e9:f6:e9:01:a7:ef:56:57:6a:36:72:b1:20:77:a9:cc:43:9c:
         36:e9:3a:d8:89:c3:da:90:c0:98:62:2e:c4:3e:c8:64:fe:81:
         85:28:7f:b0:6d:61:60:06:a6:fb:f7:c5:ec:2d:89:18:6a:f8:
         c7:0e:27:03:30:00:8b:45:d5:77:93:ce:8f:2a:5f:eb:e5:1e:
         38:b6:e0:db:8f:a3:fa:ea:cf:6c:59:2b:78:df:0b:91:35:be:
         a1:d9:1d:e8:43:31:a6:3f:b7:06:2f:db:dd:2f:4c:0a:50:b8:
         8b:e0:f0:4e:ab:db:60:bb:18:de:8d:a6:b5:29:ba:bf:50:5e:
         7d:fe:c9:96:f1:26:b5:10:8c:07:a5:a3:8f:2e:97:e4:ff:8b:
         8b:44:66:05:20:7a:93:c9:8e:a8:02:04:c2:25:e0:cb:6f:0d:
         58:09:f5:09:f4:05:d3:0c:89:52:e7:f8:77:c8:50:b2:d3:00:
         b7:ef:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----