Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150523.roa
File:                     AS150523.roa (raw, json)
Hash identifier:          STtc+h9Ox6RNLWCChBznksv8V148GGpJhnLeLROo0HI=
Subject key identifier:   74:79:60:41:45:48:B7:D6:43:72:BF:23:DB:36:51:13:AE:57:3F:CD
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2FD9F298A3B48086CB3B73FABA3017A2D1B174B1
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150523.roa
Signing time:             Sat 18 Feb 2023 14:28:21 +0000
ROA not before:           Sat 18 Feb 2023 14:23:21 +0000
ROA not after:            Sat 17 Feb 2024 14:28:21 +0000
asID:                     150523
IP address blocks:        2a06:a005:2210::/44 maxlen: 48
                          2a06:a005:2230::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:f2:98:a3:b4:80:86:cb:3b:73:fa:ba:30:17:a2:d1:b1:74:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 18 14:23:21 2023 GMT
            Not After : Feb 17 14:28:21 2024 GMT
        Subject: CN=747960414548B7D64372BF23DB365113AE573FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:0b:cd:4a:ef:1c:03:83:98:a8:6c:e7:0a:
                    29:50:cd:93:a1:87:82:43:3c:a7:31:f6:06:e3:5d:
                    3f:3c:47:2f:2a:e2:ba:62:76:67:b3:62:1b:4c:a7:
                    f3:8d:2f:30:6b:5c:9e:bf:b9:49:ae:d9:0f:13:86:
                    1e:02:29:f6:49:3d:5e:c4:eb:bf:9e:55:ad:d2:70:
                    92:e7:a9:07:70:c3:9e:76:1a:99:88:54:02:09:09:
                    15:43:1f:54:e3:66:7e:2c:3b:e0:56:0c:15:f7:f9:
                    98:f1:b1:bc:4a:56:18:50:83:1a:ad:7a:81:85:a5:
                    aa:06:62:40:f6:cd:e3:ea:7c:6b:ce:59:43:bb:7c:
                    a3:42:ba:ca:93:b9:7d:38:95:8d:7a:75:7c:cf:a4:
                    65:ae:ff:9c:48:6c:7f:d1:c2:e8:e5:11:34:e3:8d:
                    83:79:a9:6c:a9:8c:6f:df:3f:e7:e6:ef:cc:f8:21:
                    ba:c0:4d:12:23:3b:33:f4:f5:35:1e:9b:32:95:24:
                    a9:00:ea:20:8b:56:2b:2f:c4:05:e9:22:37:44:05:
                    96:a2:84:fa:2c:df:15:9b:b3:12:71:0d:aa:3e:8d:
                    98:07:54:c7:f9:34:80:63:97:45:ac:28:d4:ae:1b:
                    32:c6:7e:08:7f:14:93:9b:fb:f9:cb:34:d6:28:ff:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:60:41:45:48:B7:D6:43:72:BF:23:DB:36:51:13:AE:57:3F:CD
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS150523.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2210::/44
                  2a06:a005:2230::/44

    Signature Algorithm: sha256WithRSAEncryption
         cd:42:23:2b:04:19:29:4e:c8:e4:b4:76:11:a0:4e:a6:9f:18:
         f6:5a:de:4d:0e:ec:71:8d:df:95:9b:e5:f7:6c:b3:a7:b4:e2:
         8b:c1:82:83:f9:ff:1c:ee:da:a9:ec:3f:59:2f:d2:ef:c1:80:
         bc:f4:f5:9a:dd:23:7c:bc:07:ee:df:48:dc:f0:5b:ab:19:b5:
         4a:e3:d0:bb:33:8c:eb:93:78:19:5c:83:44:45:a5:fd:69:4b:
         e9:cd:7a:15:12:8c:79:a4:97:ba:97:4a:aa:c0:dc:69:30:d1:
         ff:d7:c6:10:93:ff:cb:7a:3a:68:fe:5f:b8:57:06:f9:ab:64:
         fe:20:67:3f:c6:4e:93:77:20:0d:86:e3:25:70:31:a0:a0:38:
         35:d1:2c:a4:ab:de:d5:72:f1:51:1b:1a:27:97:20:f8:f9:4c:
         30:d9:ed:fa:c7:4a:3d:86:05:6c:4e:5f:5d:e4:7b:78:14:a9:
         30:7f:ff:c7:91:b5:6a:f9:7a:3e:85:d8:ae:d5:d7:55:c7:f6:
         52:df:3f:a2:0d:24:b4:10:01:fb:52:25:0a:81:cc:ba:d1:dc:
         74:25:d3:fe:35:83:76:ca:c8:9e:97:c9:cf:e8:d2:19:be:3c:
         1b:3e:8e:6f:b7:e2:ba:72:73:11:3e:c2:d7:aa:71:b9:7e:15:
         20:27:e3:9b
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUL9nymKO0gIbLO3P6ujAXotGxdLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAyMTgxNDIzMjFaFw0yNDAyMTcxNDI4MjFaMDMxMTAvBgNV
BAMTKDc0Nzk2MDQxNDU0OEI3RDY0MzcyQkYyM0RCMzY1MTEzQUU1NzNGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscwvNSu8cA4OYqGznCilQzZOh
h4JDPKcx9gbjXT88Ry8q4rpidmezYhtMp/ONLzBrXJ6/uUmu2Q8Thh4CKfZJPV7E
67+eVa3ScJLnqQdww552GpmIVAIJCRVDH1TjZn4sO+BWDBX3+ZjxsbxKVhhQgxqt
eoGFpaoGYkD2zePqfGvOWUO7fKNCusqTuX04lY16dXzPpGWu/5xIbH/RwujlETTj
jYN5qWypjG/fP+fm78z4IbrATRIjOzP09TUemzKVJKkA6iCLVisvxAXpIjdEBZai
hPos3xWbsxJxDao+jZgHVMf5NIBjl0WsKNSuGzLGfgh/FJOb+/nLNNYo/4itAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUdHlgQUVIt9ZDcr8j2zZRE65XP80wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTUwNTIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcEKgagBSIQAwcEKgagBSIwMA0GCSqGSIb3DQEBCwUA
A4IBAQDNQiMrBBkpTsjktHYRoE6mnxj2Wt5NDuxxjd+Vm+X3bLOntOKLwYKD+f8c
7tqp7D9ZL9LvwYC89PWa3SN8vAfu30jc8FurGbVK49C7M4zrk3gZXINERaX9aUvp
zXoVEox5pJe6l0qqwNxpMNH/18YQk//Lejpo/l+4Vwb5q2T+IGc/xk6TdyANhuMl
cDGgoDg10Sykq97VcvFRGxonlyD4+Uww2e36x0o9hgVsTl9d5Ht4FKkwf//HkbVq
+Xo+hdiu1ddVx/ZS3z+iDSS0EAH7UiUKgcy60dx0JdP+NYN2ysiel8nP6NIZvjwb
Po5vt+K6cnMRPsLXqnG5fhUgJ+Ob
-----END CERTIFICATE-----