Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e203631393737.roa
File:                     3139322e3230392e36332e302f32342d3234203d3e203631393737.roa (raw, json)
Hash identifier:          xKBD/9JTJQh7l2sMDL6m1bCr0C4t+Cd74N6A/dg9aig=
Subject key identifier:   FC:62:84:84:0E:70:50:67:93:00:7F:5A:18:FD:17:2B:D9:6A:01:C2
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       431ABE7824ACA68D3BFCE330B6F7581170BDB955
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e203631393737.roa
Signing time:             Tue 31 Jan 2023 13:28:57 +0000
ROA not before:           Tue 31 Jan 2023 13:23:57 +0000
ROA not after:            Tue 30 Jan 2024 13:28:57 +0000
asID:                     61977
IP address blocks:        192.209.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1a:be:78:24:ac:a6:8d:3b:fc:e3:30:b6:f7:58:11:70:bd:b9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jan 31 13:23:57 2023 GMT
            Not After : Jan 30 13:28:57 2024 GMT
        Subject: CN=FC6284840E70506793007F5A18FD172BD96A01C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:5c:c3:16:ce:fa:89:e0:2c:fa:da:8e:58:
                    22:82:0c:40:e1:92:54:40:c6:11:3b:2d:d3:99:bb:
                    49:9a:8a:3b:6a:f5:41:7a:11:2d:de:f3:f4:82:38:
                    96:b8:c0:7b:db:9a:be:49:97:48:eb:96:2b:71:93:
                    69:54:0a:07:5e:57:5a:95:9d:7e:84:36:64:2d:b8:
                    b6:7f:25:a8:1e:42:ec:78:b7:a6:d5:1b:aa:81:0c:
                    4b:59:23:e4:b1:66:97:fe:36:91:c1:a7:08:2e:19:
                    2d:5b:aa:1c:80:bc:ec:8e:13:03:1a:56:7b:1b:fc:
                    c2:ce:da:97:e0:a5:9b:cf:8c:e5:c6:27:14:ed:d0:
                    91:a5:c7:22:58:7a:d3:64:7c:ca:e6:51:77:8d:20:
                    31:59:53:12:1f:61:b1:ba:9e:46:69:2a:e0:0b:49:
                    c3:d0:0e:43:9b:d3:d8:85:44:20:52:ab:4b:40:40:
                    9e:8a:57:2f:9e:46:ba:c9:40:38:d1:cb:ef:70:a1:
                    19:e2:17:61:d2:c7:14:24:94:93:68:aa:9a:c7:48:
                    37:cc:a0:25:b1:94:95:54:4b:e4:f7:8b:cc:4d:9b:
                    e8:3d:36:17:cf:61:49:24:21:7c:ee:87:2b:60:65:
                    87:4e:d0:bc:da:40:2c:d4:f8:30:2d:12:e7:c0:6b:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:84:84:0E:70:50:67:93:00:7F:5A:18:FD:17:2B:D9:6A:01:C2
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e203631393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:85:19:f2:cb:1e:06:f5:8b:74:28:19:6d:6d:1a:90:36:
         6c:40:29:86:a9:68:cb:91:e3:3b:c0:2f:fc:6b:91:d6:78:d5:
         ec:f8:53:32:18:a9:80:56:42:c9:1e:d4:12:71:da:b5:f9:03:
         a7:af:e4:f2:64:ce:99:bb:72:02:4b:cd:6c:00:a4:45:a1:a0:
         18:d7:e3:50:f3:07:6f:12:7c:e1:d1:a4:a2:55:44:67:eb:26:
         d3:de:19:0e:15:58:39:bf:0e:b3:7b:67:0a:ed:c6:1f:27:49:
         60:ac:9e:8f:2d:f9:3e:e4:8a:1e:2e:5a:bd:03:33:70:9b:6d:
         49:96:56:5a:20:8b:0c:8c:6f:a7:00:28:e2:b3:1b:59:e3:c1:
         9c:3d:68:47:e3:5c:c0:3c:99:ef:56:7b:cb:55:64:3b:b3:34:
         3f:b5:d2:36:e5:78:9a:2f:d8:0b:e2:73:41:51:c7:ee:58:37:
         47:7d:33:32:1f:8e:5a:39:55:2f:a5:bf:31:e6:c9:1a:44:bb:
         fd:9b:5a:6c:da:78:60:d6:7a:04:05:bf:35:bf:35:eb:46:64:
         79:a9:c0:f8:da:c0:0f:49:98:09:51:88:3a:1b:50:14:d9:ef:
         07:cc:e5:c9:50:80:97:41:26:e8:13:f0:83:53:2e:4a:0b:67:
         d9:ad:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----