Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203979.roa
File:                     AS203979.roa (raw, json)
Hash identifier:          MHkV7/OjWRTF1WYbp2Q45kYaeOfpziN4hIATSxcBT4g=
Subject key identifier:   AE:D0:B6:EC:A3:0F:51:0F:27:60:94:37:90:C0:D6:DB:BF:2D:B1:C0
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       37D88C84BF52C833FEED9FE2D6437B24193A2C07
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203979.roa
Signing time:             Mon 06 Mar 2023 16:00:47 +0000
ROA not before:           Mon 06 Mar 2023 15:55:47 +0000
ROA not after:            Mon 04 Mar 2024 16:00:47 +0000
asID:                     203979
IP address blocks:        2a06:a005:454::/48 maxlen: 48
                          2a06:a005:455::/48 maxlen: 48
                          2a06:a005:45a::/48 maxlen: 48
                          2a06:a005:5a8::/48 maxlen: 48
                          2a06:a005:187e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d8:8c:84:bf:52:c8:33:fe:ed:9f:e2:d6:43:7b:24:19:3a:2c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar  6 15:55:47 2023 GMT
            Not After : Mar  4 16:00:47 2024 GMT
        Subject: CN=AED0B6ECA30F510F2760943790C0D6DBBF2DB1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:cc:11:37:15:cb:97:6d:32:3a:bb:d0:a1:
                    09:f7:46:6c:b8:3d:46:c7:51:72:fe:46:b4:b2:5b:
                    70:fd:4d:70:a3:20:f5:8f:43:10:c9:02:5b:08:e4:
                    f8:82:b9:11:08:2f:3f:32:0a:54:a0:3a:d3:23:4e:
                    bd:17:17:4a:73:10:7f:f9:95:f6:a0:26:29:4c:cd:
                    ec:ef:0d:8d:2a:d8:c6:9b:5b:04:45:f7:fb:f2:e3:
                    39:b8:dc:76:f5:e5:fa:9a:a8:d2:19:3e:67:06:f6:
                    d7:16:24:70:67:58:75:3f:21:87:76:74:db:b3:75:
                    0b:ac:7f:54:15:f7:99:d2:10:ef:63:af:d2:d4:7e:
                    11:76:f7:af:ec:d6:c3:2a:9f:01:2f:98:49:5d:1e:
                    86:89:c5:bb:1f:ea:19:98:10:05:82:52:a4:45:1c:
                    2d:05:f4:ab:b9:05:45:45:58:ea:d3:03:3a:01:0a:
                    e3:f5:be:50:0e:8f:a3:cb:45:f9:43:f8:a5:fd:a8:
                    ab:ee:d4:48:3e:a9:f5:43:69:4d:8e:2e:d3:62:93:
                    f7:df:17:56:e9:29:58:c0:42:03:0f:de:06:cf:cb:
                    5f:3a:94:70:53:ec:2f:3a:54:c9:95:2c:4b:a3:10:
                    e7:10:0f:da:f1:c7:46:4a:6e:9f:07:33:48:f9:e0:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D0:B6:EC:A3:0F:51:0F:27:60:94:37:90:C0:D6:DB:BF:2D:B1:C0
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203979.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:454::/47
                  2a06:a005:45a::/48
                  2a06:a005:5a8::/48
                  2a06:a005:187e::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:78:99:ca:d3:3a:7a:65:7c:c0:88:6a:16:5e:c2:98:54:e8:
         8d:99:6e:13:0a:cf:72:9e:7d:f4:e8:03:67:8f:9d:98:b6:ee:
         4e:5d:c3:fc:6b:bf:d9:ab:f2:36:6b:2a:65:10:93:e5:a0:4c:
         6c:2b:9b:79:39:1c:b7:14:ed:48:49:af:fa:92:cc:f7:b8:8a:
         50:c1:f4:5a:29:67:61:ec:a7:31:97:26:8a:f7:4a:d9:00:77:
         6b:d6:fa:5b:d1:04:4b:81:fe:e5:a6:f4:a5:4e:4d:c2:f8:8d:
         38:92:b6:60:82:86:0b:33:d3:c5:52:7e:31:dd:c3:30:4a:3a:
         f3:de:39:04:f4:1a:5b:18:df:42:3c:7e:63:b7:0d:e7:09:f4:
         83:0e:fb:f8:d5:28:50:42:91:8d:2a:3d:fa:61:00:6d:35:f9:
         77:a0:52:92:35:c4:b2:fe:dd:20:89:69:de:b8:8f:e9:73:08:
         a5:f2:83:b3:c5:0b:30:5f:f5:4a:c5:5b:5e:b6:8d:09:c8:d2:
         59:45:a3:7b:a4:cb:d6:7d:7e:ee:6e:6f:5f:0b:80:cf:0e:e0:
         a5:ce:5b:b5:5b:22:b9:81:94:5e:81:6d:6c:38:a1:3a:f1:5a:
         53:b0:7d:3b:a5:2b:21:d3:e1:74:52:d4:cf:6d:4a:a1:05:75:
         a2:88:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----