Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132342e302f32342d3234203d3e20313337343039.roa
File:                     36372e3231302e3132342e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier:          I1n/1uXbnw4WI5L9fDO7DJ4M91pddiuozDctf91qjBo=
Subject key identifier:   A0:87:61:F8:F5:C4:E0:9D:96:00:77:1E:E1:7C:2C:EA:2A:8C:98:42
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3BFD969843B3B12D78B731266D2ADBB51D7BC796
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132342e302f32342d3234203d3e20313337343039.roa
Signing time:             Tue 06 Dec 2022 03:20:51 +0000
ROA not before:           Tue 06 Dec 2022 03:15:51 +0000
ROA not after:            Tue 05 Dec 2023 03:20:51 +0000
asID:                     137409
IP address blocks:        67.210.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fd:96:98:43:b3:b1:2d:78:b7:31:26:6d:2a:db:b5:1d:7b:c7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  6 03:15:51 2022 GMT
            Not After : Dec  5 03:20:51 2023 GMT
        Subject: CN=A08761F8F5C4E09D9600771EE17C2CEA2A8C9842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:d4:78:39:c5:7f:af:36:5f:d7:57:3b:a6:
                    1e:70:16:0f:1b:fe:11:98:cb:3f:f1:85:f0:0c:66:
                    02:2f:fa:5c:34:61:2d:1c:e8:04:4a:ae:a3:35:f2:
                    2a:c0:e7:04:7c:14:de:2a:f1:3a:ca:e2:4b:27:ee:
                    00:64:5c:6b:0b:39:04:c3:57:72:eb:9d:8a:44:75:
                    92:3a:9c:51:08:76:cb:58:97:b1:31:17:ad:0c:94:
                    0b:f3:46:32:4b:34:e3:77:44:76:45:55:14:e2:7e:
                    70:af:6c:4b:ef:f6:03:ba:7d:44:29:4a:32:e0:b5:
                    70:fb:5a:16:bd:95:d9:de:f2:02:f8:40:1b:23:7f:
                    54:58:45:1e:c0:54:0a:b4:61:07:fb:0d:38:d4:df:
                    c5:42:c4:36:6d:c7:35:a2:90:87:62:e2:c9:4b:ef:
                    d3:b6:8f:c6:d2:72:ec:84:48:6f:69:92:43:a9:66:
                    49:99:57:c0:e5:df:a7:31:15:d9:6a:28:a1:e1:33:
                    5b:16:4a:72:65:8a:ba:04:c5:2d:38:38:a8:8d:c6:
                    98:fb:1a:16:72:db:65:32:03:e2:41:34:1f:46:6d:
                    07:3d:bf:68:b7:4f:67:d6:8b:3c:e6:cf:24:3d:9b:
                    cd:0a:d2:28:d4:c4:5c:f2:82:b8:3b:1e:70:f5:49:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:87:61:F8:F5:C4:E0:9D:96:00:77:1E:E1:7C:2C:EA:2A:8C:98:42
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132342e302f32342d3234203d3e20313337343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:72:6e:c9:35:d5:62:9f:f3:e4:35:1f:82:78:a9:3b:e2:02:
         0f:a0:52:0d:45:00:87:eb:da:92:52:ab:01:ba:3c:e6:3d:79:
         be:ea:55:ee:27:8d:18:d8:f9:96:b5:0d:a5:0e:e0:56:b2:ca:
         1b:45:75:3e:f5:b1:2a:98:59:c4:e2:24:3a:5b:aa:84:cc:ae:
         cc:0a:d2:fc:c1:05:b5:2b:e1:4a:20:8d:c4:30:c0:76:d0:f3:
         35:4b:5f:5f:e6:28:dc:45:2d:76:aa:5d:b0:61:b3:a9:18:98:
         25:96:c5:b9:27:d1:5e:93:29:3c:c9:c6:56:52:e5:62:88:72:
         72:03:47:aa:0b:42:03:aa:06:b7:3e:5f:c4:3b:62:dd:25:41:
         f9:40:9d:09:cc:2e:3d:77:7a:72:d0:68:d1:33:58:30:aa:b4:
         ee:2c:ab:4c:39:ef:74:64:11:3d:90:c0:c4:04:61:b2:8d:b9:
         07:cd:56:eb:f6:e5:14:9c:07:76:a6:7e:34:d1:fd:cd:06:d7:
         22:84:b1:16:52:03:98:61:f0:7e:cc:ef:6b:39:f7:02:ed:bc:
         36:6b:1e:d1:57:04:9e:2a:31:aa:9f:a8:64:07:b8:ce:4e:43:
         21:28:96:ba:28:73:11:e1:99:95:70:37:ef:33:71:0c:ba:66:
         5f:65:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----