Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3507.roa
File:                     AS3507.roa (raw, json)
Hash identifier:          Xs4zzy8WpJqCExC/sk+b/SHi+Wh33/YAwSb+Ffwr//g=
Subject key identifier:   C1:CF:08:18:56:A3:87:06:40:1D:1B:8E:D6:B2:58:AD:6B:45:BF:AE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       30121AAD3D11919C862F2647996B73A1F1EC973D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3507.roa
Signing time:             Tue 25 Apr 2023 11:34:02 +0000
ROA not before:           Tue 25 Apr 2023 11:29:02 +0000
ROA not after:            Tue 23 Apr 2024 11:34:02 +0000
asID:                     3507
IP address blocks:        216.227.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:12:1a:ad:3d:11:91:9c:86:2f:26:47:99:6b:73:a1:f1:ec:97:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 25 11:29:02 2023 GMT
            Not After : Apr 23 11:34:02 2024 GMT
        Subject: CN=C1CF081856A38706401D1B8ED6B258AD6B45BFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:d2:92:fb:be:72:c7:61:56:31:45:fe:8c:
                    be:f6:0f:e9:0f:7c:58:dd:73:94:62:56:e4:41:5e:
                    8e:66:32:7f:36:9a:2c:c9:d9:e1:10:07:c3:b0:6d:
                    f5:20:77:43:dd:88:af:2b:c9:53:14:87:3e:57:fc:
                    d6:27:da:4e:09:41:23:be:e8:7d:a8:81:19:c3:17:
                    b8:0a:54:2a:7f:17:9c:f9:27:ce:71:db:79:d4:71:
                    1e:f4:be:eb:e6:dc:d7:05:26:eb:9c:ca:67:32:08:
                    89:55:51:f1:81:5c:31:c4:72:bb:35:50:e6:e1:01:
                    59:a2:a6:19:cd:d7:5c:52:4d:64:c4:e1:03:1b:a4:
                    29:40:b7:f4:13:c9:c1:be:03:67:06:04:63:77:8d:
                    5f:92:e6:1d:1c:c2:ef:76:8f:8f:84:fe:4c:9a:78:
                    92:6f:9a:7a:23:5e:52:58:b6:dc:46:22:0d:77:e7:
                    3c:32:8c:d6:29:b7:c5:d8:ed:d0:aa:fd:38:8c:dd:
                    8d:ca:3d:1f:07:e2:cf:fc:76:a3:82:5c:63:e3:e0:
                    28:17:39:ac:08:a3:35:ea:e4:08:ff:d2:ec:95:e6:
                    60:8e:77:13:ec:6c:21:e5:41:54:14:1c:3c:3c:dc:
                    d6:37:63:d8:5f:59:50:a9:26:54:63:b4:4e:f5:2d:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CF:08:18:56:A3:87:06:40:1D:1B:8E:D6:B2:58:AD:6B:45:BF:AE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3507.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:be:b3:2e:96:7e:ab:90:6b:f7:8c:65:ea:69:f4:34:2a:
         89:6f:0a:78:b5:93:87:6a:0c:04:91:5f:c3:1f:ea:86:bc:5d:
         85:6a:0d:40:25:58:e4:b4:26:ce:55:ff:99:86:d0:35:44:8e:
         ba:ec:b8:9f:ff:a1:9d:2c:a3:fc:96:f1:55:4f:4b:db:46:2c:
         00:5e:d3:72:83:31:94:5e:c7:d7:7f:79:6e:1f:bf:7d:55:4c:
         24:46:72:5a:c8:91:8c:77:ba:f1:7f:6d:b0:d6:fe:f6:2d:22:
         6a:4e:e6:9b:bf:e6:a5:85:8e:4c:9a:3d:bd:0c:ca:4d:1c:95:
         86:27:c4:b5:5f:7e:66:fd:6c:70:96:34:d4:f6:42:7c:b4:7a:
         f8:9c:64:37:f6:bb:8f:49:7b:32:f3:be:e1:5e:10:cd:1d:33:
         d6:5a:5f:cc:32:60:f5:4c:d8:0d:79:1a:45:20:de:c2:ac:94:
         9c:3d:9f:cc:de:aa:6d:60:4e:ea:e9:fb:4d:8d:ec:78:b6:0e:
         72:ef:4b:2d:2f:76:71:d1:63:06:76:6e:35:9f:0e:f2:44:56:
         3d:5f:33:d4:e6:89:e5:6f:46:98:bd:12:e7:86:52:fe:57:09:
         4c:01:11:22:cf:90:07:ec:bd:40:f0:e3:0f:82:cd:7f:f0:7f:
         27:5f:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----