Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211877.roa
File:                     AS211877.roa (raw, json)
Hash identifier:          p9AaYqIqMBXTXmCDPCtAKlUE7ro4NieykY0JAXJXxno=
Subject key identifier:   D1:5D:BC:49:99:82:98:E4:62:F5:8D:A9:B2:1C:B9:FE:7D:A6:F9:68
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       061F6825F595D86F1CFD100A94E3E8C43758AEE3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211877.roa
Signing time:             Fri 03 Feb 2023 15:27:06 +0000
ROA not before:           Fri 03 Feb 2023 15:22:06 +0000
ROA not after:            Fri 02 Feb 2024 15:27:06 +0000
asID:                     211877
IP address blocks:        2a06:a005:15d8::/46 maxlen: 48
                          2a06:a005:15dc::/46 maxlen: 48
                          2a06:a005:1874::/46 maxlen: 48
                          2a06:a005:1878::/46 maxlen: 48
                          2a06:a005:187c::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1f:68:25:f5:95:d8:6f:1c:fd:10:0a:94:e3:e8:c4:37:58:ae:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb  3 15:22:06 2023 GMT
            Not After : Feb  2 15:27:06 2024 GMT
        Subject: CN=D15DBC49998298E462F58DA9B21CB9FE7DA6F968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:07:71:23:25:58:3e:b2:6a:15:75:22:c8:
                    a3:3f:6c:c1:ce:a1:19:e1:1b:f1:bf:15:40:8c:90:
                    4b:2d:16:3f:cc:f9:62:fb:bc:a8:7b:5e:9d:3a:73:
                    01:45:21:61:cd:3d:27:24:1e:ff:c4:16:e4:a2:79:
                    82:3e:15:5d:1a:02:bc:4f:14:bd:af:c4:fb:f4:3e:
                    dc:b2:27:92:d9:0b:13:2d:c0:dd:04:3f:c0:84:e9:
                    3e:87:4f:4b:3f:e1:58:73:ca:ac:c8:82:fa:e4:0c:
                    4e:53:08:74:40:8e:85:ff:a2:b8:95:50:42:dc:1a:
                    2f:43:dc:c2:7e:05:a1:12:0d:f3:4f:44:f3:11:7f:
                    2c:12:4d:a8:e0:dc:45:b5:34:34:b3:8a:7b:c3:a0:
                    7d:05:1a:83:22:6f:8e:84:b9:05:13:3c:0e:d7:62:
                    c8:36:f7:ee:9c:ee:2a:20:06:9d:fb:e8:b9:83:68:
                    ae:82:c4:78:cd:3a:f3:70:17:01:34:05:12:2b:f8:
                    44:07:d8:f3:02:7d:bd:bc:16:ef:b3:33:ad:ac:e6:
                    bc:c9:24:41:9f:20:04:9a:4d:4b:69:4e:9f:a8:5e:
                    6f:76:53:40:2d:72:d9:2c:33:c5:c8:7f:b0:c9:df:
                    69:e4:62:6e:5c:c6:5f:f6:f5:2e:c2:d0:ce:f0:a8:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:BC:49:99:82:98:E4:62:F5:8D:A9:B2:1C:B9:FE:7D:A6:F9:68
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:15d8::/45
                  2a06:a005:1874::-2a06:a005:187f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:ee:fc:0d:e2:8e:01:b4:1f:b9:60:d2:bc:e2:cb:34:13:
         9b:9b:47:14:a3:41:f7:a9:a7:55:5d:a3:69:e7:f3:d1:55:35:
         07:85:1e:8f:97:ba:16:20:b1:dd:c5:c0:47:ab:d9:64:7c:f0:
         03:e1:5b:5d:2e:22:ef:8b:5b:d4:99:12:4b:fb:9b:ac:6a:e5:
         cc:38:cb:2e:76:01:38:a6:e1:a3:85:97:6f:a8:c0:bb:c6:bd:
         01:8c:b7:33:34:e5:da:2e:91:c3:b4:e8:62:75:3d:00:80:68:
         62:3c:8d:14:11:09:5a:db:fc:47:24:85:c7:63:c0:45:40:28:
         db:05:7c:7f:9c:62:f6:bc:20:c3:7e:7e:9f:e6:d8:16:d2:b9:
         0c:21:0e:af:82:2d:21:e8:6a:99:5d:a2:c0:65:ee:8a:f2:78:
         80:d1:ef:8d:c8:0f:de:a3:77:4e:05:8d:a5:b9:4d:a8:07:6c:
         41:86:a1:68:0c:4b:6d:a6:19:bb:24:f6:ff:b0:4a:12:6c:42:
         b2:d2:b1:08:45:59:5d:d9:fe:f3:40:be:c6:c6:f3:b2:65:07:
         3a:9e:fa:51:13:ce:f7:47:92:63:90:dd:65:6c:7e:2d:97:c7:
         d6:ae:db:63:af:2b:34:a4:e8:8c:af:5c:94:ea:6b:97:33:95:
         bd:3f:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----