Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200160.roa
File:                     AS200160.roa (raw, json)
Hash identifier:          TL0tnFwYQzjHmja2ZZdJIR9u5BTxENjs3gPi1Ctq6Dg=
Subject key identifier:   89:86:EF:44:F5:CC:83:94:E8:15:B2:1E:43:F5:B9:EE:C4:E2:45:E5
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       64C424F2146EB764DC76DFBEC46EA1E9ED6041EA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200160.roa
Signing time:             Sat 04 Feb 2023 16:46:47 +0000
ROA not before:           Sat 04 Feb 2023 16:41:47 +0000
ROA not after:            Sat 03 Feb 2024 16:46:47 +0000
asID:                     200160
IP address blocks:        2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:18f0::/44 maxlen: 48
                          2a06:a005:2380::/44 maxlen: 48
                          2a06:a005:2c00::/44 maxlen: 48
                          2a06:a005:2c80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c4:24:f2:14:6e:b7:64:dc:76:df:be:c4:6e:a1:e9:ed:60:41:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb  4 16:41:47 2023 GMT
            Not After : Feb  3 16:46:47 2024 GMT
        Subject: CN=8986EF44F5CC8394E815B21E43F5B9EEC4E245E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:43:ad:53:9b:c1:a9:04:4e:81:9d:24:b6:
                    bf:8b:8a:1c:46:b1:1c:47:f8:ea:19:d7:61:4a:eb:
                    0b:00:07:5d:da:2f:69:60:19:ca:b2:91:e2:0b:11:
                    6c:18:bb:89:0d:13:13:13:a6:18:dc:66:0f:d5:4d:
                    9f:44:3d:ec:8b:9a:ab:ec:36:8b:9f:9a:d6:47:fb:
                    2e:ab:60:8c:c1:58:35:3a:9c:f6:4f:ab:e2:07:77:
                    2b:95:3b:03:07:df:7a:da:3e:6f:a8:91:68:73:98:
                    98:e3:00:92:13:ca:63:60:1b:80:8d:41:5f:5e:12:
                    76:7e:e8:29:93:ff:bf:7c:8e:40:40:39:e2:db:cd:
                    77:55:92:e7:32:76:8e:dc:ed:cc:2f:e7:b2:8c:3a:
                    86:3a:be:57:df:40:e5:e8:4b:81:e6:e2:af:c0:da:
                    aa:7f:92:13:1f:31:dd:2c:6d:1e:49:fa:df:01:c7:
                    07:3d:da:c8:61:6f:1f:a4:5b:22:f1:40:8b:24:6b:
                    76:a4:1b:22:3c:85:5c:f8:c4:df:09:f5:cd:a9:61:
                    8f:8a:dd:01:52:3a:74:97:c9:e8:19:a8:9a:be:23:
                    01:85:26:e7:84:fd:e8:36:a1:80:f8:b7:fd:01:ce:
                    ff:f2:24:df:4f:11:e0:99:fe:be:53:6f:20:9d:60:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:EF:44:F5:CC:83:94:E8:15:B2:1E:43:F5:B9:EE:C4:E2:45:E5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18d0::/44
                  2a06:a005:18f0::/44
                  2a06:a005:2380::/44
                  2a06:a005:2c00::/44
                  2a06:a005:2c80::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:d2:30:a8:4c:7b:a9:00:9f:e3:92:35:e6:ae:31:50:e6:11:
         3a:fb:31:26:a1:cc:68:58:9e:cc:7e:69:83:e2:3f:9a:9b:37:
         25:45:69:a3:0e:c0:65:a2:74:0d:7e:d5:0f:21:ed:ed:1a:64:
         7f:5f:18:c5:3f:a4:24:ba:cb:9f:44:c5:1f:2f:99:36:c6:bd:
         1a:a0:f3:13:de:bc:4f:55:7b:43:56:ce:4e:b5:f5:18:03:84:
         fa:19:95:12:85:17:cc:5b:e3:b1:25:8d:78:27:41:04:06:44:
         94:60:69:6b:c3:d0:27:ac:b7:b7:b6:ce:9c:c4:89:2a:c3:1b:
         5d:18:43:ee:43:e4:95:72:c6:44:9f:83:a9:80:04:fe:33:35:
         97:0b:be:5d:e3:7a:41:e4:53:50:1b:1a:31:09:d3:19:41:63:
         eb:e0:b4:da:e0:27:ef:ea:9a:06:77:b0:5b:7f:6e:76:5b:18:
         93:25:d1:43:fc:ea:a3:b8:4a:4d:3b:4e:a5:16:4a:94:e7:ad:
         80:68:7a:08:30:ee:87:3c:0f:5e:63:39:ba:49:cd:04:28:db:
         3c:3a:7b:09:ca:44:a3:40:c7:3e:fe:25:66:80:fe:83:21:78:
         2b:f1:24:ff:03:4c:c6:96:4b:fa:96:06:a2:50:79:0b:80:02:
         24:e2:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----