Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208548.roa
File:                     AS208548.roa (raw, json)
Hash identifier:          cvrpzzI11RwMSAD19H/IQMyS2gM0FumJRwU/MBFhnsc=
Subject key identifier:   D7:91:F0:34:BB:79:48:60:AF:A1:13:23:36:63:E7:F7:C7:EF:19:C2
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       28754E3DCC229C0FB82D225C59ECFE9D55318134
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208548.roa
Signing time:             Tue 03 Jan 2023 02:07:08 +0000
ROA not before:           Tue 03 Jan 2023 02:02:08 +0000
ROA not after:            Tue 02 Jan 2024 02:07:08 +0000
asID:                     208548
IP address blocks:        2a06:a000:300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:4e:3d:cc:22:9c:0f:b8:2d:22:5c:59:ec:fe:9d:55:31:81:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:08 2023 GMT
            Not After : Jan  2 02:07:08 2024 GMT
        Subject: CN=D791F034BB794860AFA113233663E7F7C7EF19C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:80:b8:04:ae:80:58:4d:90:36:f8:03:08:
                    20:87:50:f1:ec:44:29:7e:a5:6a:65:7b:59:20:67:
                    87:8b:77:20:ab:6f:ea:50:62:02:96:36:f8:ec:c6:
                    0d:cc:0a:74:3b:60:64:4f:1e:e1:e6:15:d5:ed:c6:
                    1f:cf:0a:5e:da:53:42:eb:1d:31:dd:c6:a2:ed:f2:
                    77:c5:28:e2:b3:c9:e3:b4:85:12:44:20:a1:06:12:
                    eb:84:fa:f7:1f:e2:05:ac:17:f2:9a:9a:d1:42:54:
                    2f:33:c4:78:93:80:e2:44:d7:22:d6:35:33:0c:11:
                    29:c4:f4:8f:1f:8f:c0:9e:0e:e7:48:2e:14:b6:c0:
                    9e:71:4d:4e:d6:33:fb:8b:3b:22:dc:51:d5:a3:e5:
                    18:fa:87:7c:54:a7:64:f9:31:b0:97:05:55:4a:28:
                    34:58:64:74:12:1b:d1:a3:aa:dd:22:2f:1c:52:35:
                    82:cc:b1:89:c2:c9:dd:93:5e:0e:13:da:f2:30:cc:
                    51:0a:55:d6:67:67:0b:83:b0:b6:ca:9e:b9:d5:fa:
                    8a:40:72:43:a6:53:86:be:ad:66:83:21:7b:e1:f9:
                    36:de:9a:1c:cf:f3:63:7b:60:c1:31:87:6d:96:7a:
                    18:46:38:7f:99:cc:81:a8:c0:69:a9:5d:c1:77:90:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:F0:34:BB:79:48:60:AF:A1:13:23:36:63:E7:F7:C7:EF:19:C2
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:d6:1a:90:bc:5a:1e:a7:2d:bb:d8:ca:67:ec:b2:b5:34:b3:
         65:3a:84:67:3d:2b:43:7e:4c:db:c3:a2:06:15:46:4f:aa:05:
         c4:9c:03:a0:e6:e8:50:6a:e2:c8:cf:3a:72:d3:f1:67:37:ee:
         49:9c:63:34:d4:9b:e0:65:52:93:cb:79:b1:2b:4d:94:8a:b2:
         ff:4e:b7:0a:27:b6:25:b8:e4:a7:dd:dc:01:bd:2f:d9:89:c4:
         28:4e:d1:d8:fa:55:f9:09:7c:3e:0c:ac:bf:ed:2d:ae:03:eb:
         17:b2:26:80:aa:bc:2a:b9:e0:75:6e:9e:f4:a6:08:c2:d2:6c:
         54:88:76:6b:d3:d0:e5:34:a3:44:83:39:bc:3e:1f:2d:f1:25:
         7a:2d:24:1f:85:68:72:14:b6:4e:b8:0a:b2:7a:2e:d6:79:f7:
         8c:19:24:78:b8:60:6d:6e:6a:86:a0:2d:d4:6a:aa:78:5d:c5:
         73:32:57:3a:ff:b1:cc:05:f2:57:cf:86:e5:cc:0f:f2:6e:ab:
         21:54:92:b7:9a:08:45:56:78:7c:f0:c7:84:be:9f:f8:50:c8:
         ac:02:a4:a8:c6:10:af:5c:f1:b7:cc:f1:49:cd:7e:d4:17:0a:
         de:e8:3f:c4:1b:19:b1:b9:2a:95:a9:af:d8:05:1c:08:06:9a:
         30:ec:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----