Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132352e302f32342d3234203d3e20313337343039.roa
File:                     36372e3231302e3132352e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier:          rw6sMooYkAAI6UN7v8yVb72tTZbvaFvRGD/Rc+suxww=
Subject key identifier:   22:DF:D3:C4:D9:65:49:0C:83:D1:17:88:EF:65:82:66:02:CE:A5:C6
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7D5F5AA4BB03071060D704CC4694FDAD1BCA0EDE
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132352e302f32342d3234203d3e20313337343039.roa
Signing time:             Tue 06 Dec 2022 03:20:50 +0000
ROA not before:           Tue 06 Dec 2022 03:15:50 +0000
ROA not after:            Tue 05 Dec 2023 03:20:50 +0000
asID:                     137409
IP address blocks:        67.210.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:5a:a4:bb:03:07:10:60:d7:04:cc:46:94:fd:ad:1b:ca:0e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  6 03:15:50 2022 GMT
            Not After : Dec  5 03:20:50 2023 GMT
        Subject: CN=22DFD3C4D965490C83D11788EF65826602CEA5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:71:cd:68:69:0d:4d:7d:91:9e:79:1f:11:
                    5b:90:c1:9d:07:19:69:94:e3:b0:a4:e3:66:d7:9d:
                    b0:bf:96:7d:61:01:6a:be:6c:e8:45:7a:df:c5:8c:
                    fd:39:46:19:6b:b5:34:81:25:32:4d:34:0a:97:4e:
                    49:b9:42:b7:d4:4b:92:c1:f8:e5:8d:38:91:5e:c2:
                    d4:24:e0:7e:53:0c:00:8a:fb:9f:7f:4e:35:33:e8:
                    df:f8:b5:b3:ec:28:f7:08:4b:5e:2e:59:41:c0:a3:
                    5c:88:b8:6c:7e:10:9f:20:a0:69:19:38:b3:d0:2b:
                    b8:9e:8a:85:2f:58:59:22:8b:93:89:d8:52:f5:65:
                    65:73:83:85:26:d0:8e:32:5c:5f:f7:5e:11:34:89:
                    46:77:9e:ab:cf:7d:44:3e:8d:1c:9d:6e:72:31:d5:
                    8e:c6:22:3c:79:de:36:b5:2f:ce:73:89:32:5b:5c:
                    4d:67:f6:1a:59:39:19:7a:62:d3:7a:a3:ca:d8:54:
                    b8:8f:dd:61:96:eb:f7:ef:09:bb:f5:5f:da:cd:04:
                    0d:5e:82:8c:e5:e0:36:93:ec:c3:b2:3a:7c:5f:02:
                    11:e2:66:e7:43:9a:32:fc:3a:63:65:78:3e:7a:ef:
                    1d:0f:5e:0f:29:2c:98:68:cc:5d:8a:3e:09:08:ff:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DF:D3:C4:D9:65:49:0C:83:D1:17:88:EF:65:82:66:02:CE:A5:C6
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3132352e302f32342d3234203d3e20313337343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:02:f8:81:ec:e6:14:0e:b8:96:61:fd:a1:70:ad:0a:e4:51:
         a7:74:51:c5:b8:49:4a:ef:4f:7f:56:43:c7:ab:35:0b:f7:cc:
         bf:6b:6d:d2:79:5d:2d:ae:9c:e5:78:b7:b4:9d:0a:70:f6:d2:
         6f:67:c3:c6:d5:3b:3a:e5:32:82:c1:fa:3a:04:e6:b4:5d:cb:
         ca:67:ed:70:77:ab:10:da:77:7b:50:99:85:1a:d6:d6:6c:1e:
         8d:27:37:67:96:24:f7:98:eb:a6:fb:60:3c:4a:be:81:57:d0:
         0d:e4:d6:1d:dc:b3:20:db:0d:14:b4:ec:66:f3:32:a5:df:eb:
         4b:82:80:3e:3a:a6:7d:b6:e9:0d:f1:0a:eb:93:d8:f5:53:00:
         c7:27:9a:1a:91:e8:83:21:0a:9b:12:e2:95:d6:20:4c:ec:e5:
         14:78:68:d7:b6:8f:b6:2d:e2:0d:fb:b1:5b:b3:10:b5:76:54:
         2c:7a:7b:ab:ed:d5:4f:89:56:c8:a1:bd:e7:7e:e6:32:b3:ae:
         63:e6:60:7e:48:b8:ab:43:8f:b7:f0:74:d9:b0:07:e1:c8:12:
         cc:e2:17:51:07:3a:d5:12:4b:a3:47:6f:21:63:c3:e9:fd:de:
         0f:e7:b1:a8:41:7f:92:98:c6:df:4a:4c:29:6f:06:73:ad:96:
         7a:c0:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----