Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39362e302f32322d3232203d3e203439393939.roa
File:                     36372e3231302e39362e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          GFEJprCp10vP3shOcGLbSilnTV05rvij4kRDwwtdHm0=
Subject key identifier:   CE:A9:75:4C:0A:AA:1A:4B:14:B9:4B:8C:49:BB:E5:72:3D:5E:D3:37
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       59D09D107EC62A4D10AC73255450A1CFA8E785BA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39362e302f32322d3232203d3e203439393939.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     49999
IP address blocks:        67.210.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d0:9d:10:7e:c6:2a:4d:10:ac:73:25:54:50:a1:cf:a8:e7:85:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=CEA9754C0AAA1A4B14B94B8C49BBE5723D5ED337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:3c:72:16:61:ae:26:63:94:9f:5b:a7:2c:
                    dc:02:42:99:0e:f8:ea:79:a7:eb:11:62:33:f3:0f:
                    ef:bb:07:0e:8a:f4:fc:fd:9e:c3:04:15:8c:4d:ae:
                    c1:0a:9b:f8:45:e7:ad:79:ee:85:8a:e3:a9:20:9b:
                    df:c7:55:ff:91:96:e6:fe:40:a5:99:56:16:a1:68:
                    04:48:ac:59:1c:72:18:31:0c:5d:71:3f:dc:ed:6c:
                    0b:74:76:e7:91:80:ed:7e:4e:71:0e:8b:74:0a:c8:
                    d2:ee:df:71:91:d4:0e:fd:74:78:65:4e:44:8b:c5:
                    5a:d8:22:29:d9:19:00:dc:09:9a:7a:65:43:a4:3e:
                    bd:12:ed:72:be:1d:b2:c3:de:51:33:61:6a:e8:d8:
                    0e:5c:0a:77:be:1a:a0:26:c7:7e:05:1f:7c:31:f2:
                    b8:9e:30:92:32:b6:02:f1:cc:77:b5:a6:eb:a8:95:
                    17:4b:bc:0b:a4:4d:00:32:18:66:59:e7:0d:2b:06:
                    dc:eb:df:23:f4:52:0f:86:c3:e7:42:95:d5:11:a0:
                    d5:b3:e6:e0:6e:09:e4:63:c5:14:53:08:93:21:f9:
                    a1:aa:d8:a3:0d:48:7f:5b:d6:b1:85:c5:e0:53:af:
                    9a:6c:e1:70:27:fd:fd:64:a5:3e:d1:a4:df:e3:f4:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A9:75:4C:0A:AA:1A:4B:14:B9:4B:8C:49:BB:E5:72:3D:5E:D3:37
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39362e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:e7:05:80:79:d1:59:0e:77:88:e5:ed:83:8b:c5:6d:9d:bb:
         38:66:3a:02:08:f7:8a:a8:49:fb:6a:1a:ac:f6:88:d5:14:ce:
         2d:bf:fe:02:54:fd:d8:8e:dc:cc:f6:9a:67:c6:5b:d2:24:e1:
         c5:b2:60:c5:7c:7e:c5:05:98:0a:24:32:21:f8:d6:fc:8b:e5:
         22:c1:3f:c8:67:a2:09:bc:fe:58:ee:9f:7f:e0:17:38:8d:46:
         d9:0f:bf:32:96:e9:d1:36:99:1f:eb:f1:30:26:77:77:d0:c6:
         22:64:68:2e:73:6c:02:5e:e4:0e:d8:55:92:e2:46:8e:23:cc:
         fd:c0:2b:d5:82:18:eb:ba:96:2c:d2:ac:24:f2:85:c8:d2:0b:
         2d:57:ef:d3:57:f6:b8:3c:06:da:82:78:30:5d:d8:f6:7b:08:
         b2:5b:ac:e5:d5:4c:95:ef:15:76:7c:76:6c:be:6e:b9:f5:37:
         e4:89:98:77:ce:a9:14:35:cf:67:df:e1:52:90:cb:0c:5a:c4:
         b2:92:2b:ef:7c:88:77:45:74:ad:57:69:a3:35:ac:e5:c8:0a:
         40:10:f2:c5:05:58:56:ff:bb:37:da:80:ac:fe:3d:aa:69:8d:
         33:99:64:9b:58:fb:52:ec:b2:72:cc:cd:98:1c:66:b3:90:ff:
         48:56:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----