Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202685.roa
File:                     AS202685.roa (raw, json)
Hash identifier:          JDI0ncVOxy7WQAMwo1wvufw6RDVxYZkzm+IZmlIGhNk=
Subject key identifier:   20:96:EB:5A:93:3A:3D:26:37:5B:22:D5:22:70:86:4F:C7:47:86:B4
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6B78DFCFC37928905231E592E495316DEB4BC857
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202685.roa
Signing time:             Fri 13 Jan 2023 21:45:28 +0000
ROA not before:           Fri 13 Jan 2023 21:40:28 +0000
ROA not after:            Fri 12 Jan 2024 21:45:28 +0000
asID:                     202685
IP address blocks:        2a06:a005:1e80::/44 maxlen: 48
                          2a06:a005:1e90::/44 maxlen: 48
                          2a06:a005:1ea0::/44 maxlen: 48
                          2a06:a005:1eb0::/44 maxlen: 48
                          2a06:a005:1ec0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:78:df:cf:c3:79:28:90:52:31:e5:92:e4:95:31:6d:eb:4b:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 13 21:40:28 2023 GMT
            Not After : Jan 12 21:45:28 2024 GMT
        Subject: CN=2096EB5A933A3D26375B22D52270864FC74786B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:46:7c:13:12:36:47:31:5e:80:19:dd:3c:
                    33:02:6b:5d:da:ae:46:5a:c5:77:e4:b1:31:49:9a:
                    a7:5a:16:52:56:c1:91:6c:d3:59:0f:73:d4:7b:03:
                    47:11:9c:2a:a1:80:d0:0d:c8:d5:14:34:f0:c7:56:
                    94:ef:41:27:b2:51:df:24:b0:62:d2:0c:a7:1c:1b:
                    74:b1:81:9f:b0:4d:28:50:6e:d2:29:5a:17:57:6d:
                    62:b2:5d:82:23:7d:8b:7e:e7:88:1b:8e:8c:85:36:
                    ad:65:63:ce:63:71:69:3c:7c:25:43:b5:ce:d2:7c:
                    1a:ac:9c:26:84:68:2d:19:16:ad:62:4b:20:c9:25:
                    e1:94:c2:5a:99:8e:37:04:39:d7:d9:f2:68:d5:a6:
                    f7:a6:fd:61:66:5c:fd:50:35:c9:67:70:77:88:50:
                    e5:a6:f0:49:21:fe:6c:bf:11:55:1d:73:43:ab:74:
                    af:77:ec:79:44:27:b7:20:0c:cd:70:35:a4:d3:e0:
                    47:95:d2:9e:c6:c6:6e:07:cc:46:db:ee:37:05:87:
                    72:cb:9d:09:79:18:07:de:82:ba:46:77:c7:7e:5d:
                    50:a3:ab:4d:d7:78:1a:b3:df:2f:ce:57:50:a6:3c:
                    04:0f:20:43:52:d7:50:83:b1:4b:f6:78:2a:6f:b0:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:96:EB:5A:93:3A:3D:26:37:5B:22:D5:22:70:86:4F:C7:47:86:B4
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1e80::-2a06:a005:1ecf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:fd:ac:14:46:6f:1f:3c:72:2b:17:01:e7:30:13:58:43:16:
         2d:79:68:11:81:69:46:eb:e6:36:6b:ed:70:34:7c:2d:fa:c5:
         54:ed:99:c3:cf:2e:4f:62:9a:90:de:50:08:a4:e8:79:46:84:
         87:39:71:a2:e9:f2:3f:01:6d:13:db:ee:14:bf:98:ed:37:ab:
         79:46:ff:68:34:f3:36:52:86:c1:0b:f1:44:41:76:17:36:fb:
         01:b8:85:a8:1d:73:d6:92:0c:74:39:f6:38:ce:92:3f:80:47:
         fe:36:3a:a5:8e:fc:ae:89:0b:2e:fd:56:b2:ca:82:09:e0:7f:
         2c:e9:db:93:4c:7a:48:a2:9b:9e:26:df:e2:f4:96:d6:eb:69:
         16:37:ad:4d:a4:83:99:4c:61:72:b9:2a:13:c0:58:5e:0c:14:
         69:93:49:62:11:16:b2:9f:cc:7c:35:f9:71:9c:07:87:5b:98:
         8e:4c:17:73:f3:a7:60:62:db:20:3f:aa:45:6c:6d:40:9d:56:
         52:37:c9:4b:f5:1f:62:34:15:a9:f7:61:4e:05:6b:f9:e3:6c:
         bf:d1:0b:3d:1f:d9:9c:13:3d:73:89:d8:a4:c4:c6:59:b9:5e:
         ff:9d:cf:67:4e:5a:df:2a:41:e4:df:ec:c0:8f:31:7f:27:1a:
         07:94:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----