Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3139312e302f32342d3234203d3e203439393939.roa
File:                     36342e35302e3139312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          ZR2DtvnIwuFcmfq66iNqYI4PuLLmcZOt9MtkQ/VLpR0=
Subject key identifier:   90:F2:5F:AE:25:22:46:0A:EF:E2:E6:9F:65:C1:C9:98:BF:D1:08:AF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7E26C89EE8EC52835E58A48C5546F4BAAEC9DA37
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3139312e302f32342d3234203d3e203439393939.roa
Signing time:             Sat 03 Dec 2022 20:03:11 +0000
ROA not before:           Sat 03 Dec 2022 19:58:11 +0000
ROA not after:            Sat 02 Dec 2023 20:03:11 +0000
asID:                     49999
IP address blocks:        64.50.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:26:c8:9e:e8:ec:52:83:5e:58:a4:8c:55:46:f4:ba:ae:c9:da:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  3 19:58:11 2022 GMT
            Not After : Dec  2 20:03:11 2023 GMT
        Subject: CN=90F25FAE2522460AEFE2E69F65C1C998BFD108AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:65:02:0a:a6:85:cf:86:5c:2b:4e:20:a0:
                    37:fd:fe:e9:ac:fa:bc:ee:9e:be:5e:2e:0c:d5:76:
                    e2:bf:d9:45:e5:ce:91:06:62:52:60:a0:31:37:ea:
                    99:17:39:c0:ac:27:22:1c:fb:53:d7:84:28:56:83:
                    65:63:51:31:c6:f0:9c:81:ec:a6:c0:b8:ba:b6:03:
                    32:5b:e5:4d:f2:87:68:28:d5:01:cd:cf:0e:59:d4:
                    79:7f:91:98:74:96:4b:6b:5a:35:1f:e0:dd:36:77:
                    d0:eb:df:ec:9f:f0:a4:da:46:63:16:cd:4b:eb:f9:
                    34:5f:b9:69:a0:12:15:fc:cb:5b:60:55:36:eb:88:
                    9f:6b:3e:24:67:62:79:4b:ba:9f:98:be:db:04:d9:
                    10:bb:b3:cd:f3:7c:18:75:11:ed:5b:e1:84:7b:d8:
                    72:31:f7:d6:c0:4c:4d:78:21:87:b8:3c:95:e9:f5:
                    67:99:10:ba:36:26:d3:3f:bc:b8:dd:d3:1b:d0:ea:
                    0e:4b:71:ed:a5:99:cd:2e:10:4b:b2:18:39:34:7f:
                    96:e6:b0:ef:e2:f5:e5:f9:f5:08:14:e6:94:5b:d3:
                    01:01:03:92:2a:e1:68:f2:9b:c6:6f:62:de:c8:ac:
                    34:26:96:e2:9c:87:06:83:78:32:82:57:60:8b:4b:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F2:5F:AE:25:22:46:0A:EF:E2:E6:9F:65:C1:C9:98:BF:D1:08:AF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3139312e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:71:09:03:85:8d:d3:5e:b2:cb:c1:6a:14:24:57:b6:75:5c:
         04:38:35:74:3e:3a:43:bb:cc:a0:91:4b:39:92:3d:ca:5f:2c:
         c6:89:fa:67:13:76:89:40:67:1c:6a:31:00:b0:7e:7b:9a:cd:
         66:cf:1f:e5:06:a1:b3:1e:5e:90:db:b6:b7:12:b0:03:e1:b6:
         91:71:93:c6:94:72:f1:3c:74:35:4a:1d:05:ab:f3:63:6f:f9:
         72:3e:a4:db:08:f4:cc:c3:0b:d7:6d:9e:95:4d:36:54:a4:36:
         bc:74:54:61:ef:d9:7e:c5:86:96:ec:6a:6b:13:f9:75:06:9a:
         24:83:f2:65:9d:78:da:7c:9d:e0:ba:67:b1:68:72:31:a8:65:
         60:9e:da:9d:3c:0c:b9:ab:b1:6b:75:41:41:c0:83:df:7f:ab:
         4d:31:83:ba:88:d5:20:72:6b:b1:3e:77:58:f9:71:50:78:4f:
         87:97:e2:1d:31:a1:2b:a0:ff:cf:33:d2:78:31:ce:3a:50:35:
         dd:20:64:a2:0d:6f:2d:aa:2f:89:e1:15:95:35:f8:00:fa:c2:
         24:8a:f2:fa:d9:00:6f:02:e5:aa:db:63:35:31:dc:33:ae:68:
         6d:7c:82:c0:5c:d2:34:b2:71:56:ca:70:98:c7:09:2e:b1:25:
         1a:c8:25:3a
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfibInujsUoNeWKSMVUb0uq7J2jcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjIxMjAzMTk1ODExWhcNMjMxMjAyMjAwMzEx
WjAzMTEwLwYDVQQDEyg5MEYyNUZBRTI1MjI0NjBBRUZFMkU2OUY2NUMxQzk5OEJG
RDEwOEFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DtlAgqmhc+G
XCtOIKA3/f7prPq87p6+Xi4M1Xbiv9lF5c6RBmJSYKAxN+qZFznArCciHPtT14Qo
VoNlY1ExxvCcgeymwLi6tgMyW+VN8odoKNUBzc8OWdR5f5GYdJZLa1o1H+DdNnfQ
69/sn/Ck2kZjFs1L6/k0X7lpoBIV/MtbYFU264ifaz4kZ2J5S7qfmL7bBNkQu7PN
83wYdRHtW+GEe9hyMffWwExNeCGHuDyV6fVnmRC6NibTP7y43dMb0OoOS3HtpZnN
LhBLshg5NH+W5rDv4vXl+fUIFOaUW9MBAQOSKuFo8pvGb2LeyKw0JpbinIcGg3gy
gldgi0tLgwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJDyX64lIkYK7+Lmn2XByZi/
0QivMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8xLzM2MzQyZTM1MzAyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzkzOTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMr8wDQYJKoZIhvcNAQELBQAD
ggEBAKFxCQOFjdNessvBahQkV7Z1XAQ4NXQ+OkO7zKCRSzmSPcpfLMaJ+mcTdolA
ZxxqMQCwfnuazWbPH+UGobMeXpDbtrcSsAPhtpFxk8aUcvE8dDVKHQWr82Nv+XI+
pNsI9MzDC9dtnpVNNlSkNrx0VGHv2X7FhpbsamsT+XUGmiSD8mWdeNp8neC6Z7Fo
cjGoZWCe2p08DLmrsWt1QUHAg99/q00xg7qI1SBya7E+d1j5cVB4T4eX4h0xoSug
/88z0ngxzjpQNd0gZKINby2qL4nhFZU1+AD6wiSK8vrZAG8C5arbYzUx3DOuaG18
gsBc0jSycVbKcJjHCS6xJRrIJTo=
-----END CERTIFICATE-----