Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212154.roa
File:                     AS212154.roa (raw, json)
Hash identifier:          6+Sr8gns+Ve4vg1Y/zg0DuAP1aEgwHBMqIDa2RBpSVU=
Subject key identifier:   0D:60:62:55:7D:B1:3C:24:7C:C8:6B:E5:6C:63:BB:66:8C:6A:9B:50
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       387109E887CF733114DC6F61DE65C0F8D04192AC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212154.roa
Signing time:             Tue 03 Jan 2023 02:07:21 +0000
ROA not before:           Tue 03 Jan 2023 02:02:21 +0000
ROA not after:            Tue 02 Jan 2024 02:07:21 +0000
asID:                     212154
IP address blocks:        2a06:a005:5a5::/48 maxlen: 48
                          2a06:a005:a03::/48 maxlen: 48
                          2a06:a005:16f0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:71:09:e8:87:cf:73:31:14:dc:6f:61:de:65:c0:f8:d0:41:92:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:21 2023 GMT
            Not After : Jan  2 02:07:21 2024 GMT
        Subject: CN=0D6062557DB13C247CC86BE56C63BB668C6A9B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:5b:0a:90:6d:5f:07:15:4d:a6:b8:84:93:
                    a0:45:f7:f9:5c:45:d5:8b:0e:04:9e:1f:6c:e0:a2:
                    2a:e8:86:64:a5:aa:90:94:0d:5b:1f:1c:79:56:2a:
                    69:98:eb:eb:1d:35:f0:2b:bf:09:24:2f:bf:c8:ec:
                    c9:dc:e7:b8:ca:63:4b:03:e5:5e:5a:13:94:8f:67:
                    60:a7:7e:59:4d:72:20:2e:5d:3e:6a:0f:ec:a1:5e:
                    91:2a:41:6a:b8:c6:a5:d3:e4:94:a9:5f:9f:fc:1c:
                    aa:2f:7b:2e:35:a7:df:68:06:0f:86:28:e3:36:ea:
                    a3:24:23:24:ad:8c:cf:d2:a8:46:cc:31:cf:32:a3:
                    b9:fa:c8:74:7e:7e:1e:26:28:73:87:fe:4b:05:f6:
                    5b:12:9a:f7:16:05:d1:61:cf:be:34:12:5d:0b:c0:
                    75:d3:a6:99:0a:dc:31:65:99:a0:77:c2:82:b1:c0:
                    15:64:89:71:05:ef:3d:53:0a:36:14:ce:30:35:6e:
                    01:6e:0e:8f:6b:8d:27:fc:67:fc:51:43:e5:95:1d:
                    08:8f:97:10:1a:db:d2:6b:f0:c2:e3:39:21:c7:4e:
                    32:fe:62:66:f0:2c:0b:6e:c9:66:5d:3a:37:f5:d6:
                    79:65:6c:3e:64:08:5d:38:70:8c:c1:4e:d3:76:dd:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:60:62:55:7D:B1:3C:24:7C:C8:6B:E5:6C:63:BB:66:8C:6A:9B:50
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a5::/48
                  2a06:a005:a03::/48
                  2a06:a005:16f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:4b:58:c3:fe:55:e0:9e:75:88:fd:32:70:09:90:7e:68:
         6a:e5:66:da:c3:7f:84:ea:56:1e:83:5e:34:f1:67:76:d8:26:
         bb:03:2f:ff:7a:25:96:22:95:96:e9:d4:ac:43:08:07:52:ab:
         f5:60:35:f9:64:a6:be:ce:78:72:18:61:ed:68:7f:49:98:2d:
         82:07:7c:ae:55:af:32:77:08:4b:66:dc:b5:3f:b7:cf:73:14:
         76:3e:4e:d4:22:34:1e:03:cd:70:68:15:e4:22:38:de:13:d1:
         d3:1a:1b:59:40:5f:5f:f4:db:e9:47:00:b3:ce:e1:78:6f:db:
         52:7a:8b:e9:a7:91:fe:e5:1e:ca:32:a3:f0:50:2d:42:28:5a:
         12:ba:b0:65:f6:8f:26:c8:3c:74:82:d8:57:d9:74:72:2c:08:
         a6:99:76:9d:1b:04:06:32:de:50:c5:cf:0c:1c:56:4c:b1:bb:
         58:01:fc:57:b4:af:4f:90:7c:44:13:c1:3f:10:60:b0:0e:b0:
         ac:10:d3:db:6f:49:6b:7b:09:b3:da:ab:3e:e9:95:9c:8d:f4:
         e4:ef:a6:cb:f8:de:ce:9b:ca:db:b7:83:02:9d:f1:2d:5a:59:
         f5:fa:21:e6:de:80:25:4a:39:81:f6:d5:dd:eb:2b:c3:d3:d4:
         48:7d:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----