Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS45772.roa
File:                     AS45772.roa (raw, json)
Hash identifier:          8V/g+DE4DxVTaMOgt+8xzEmnkXETvP6njLvVamkvp9M=
Subject key identifier:   97:14:26:D5:26:48:F8:9F:3F:97:8C:3D:47:F3:78:3B:68:E0:93:15
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       34CF979DFC8794F46ED891405BFA39CE8021F397
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS45772.roa
Signing time:             Tue 03 Jan 2023 02:07:19 +0000
ROA not before:           Tue 03 Jan 2023 02:02:19 +0000
ROA not after:            Tue 02 Jan 2024 02:07:19 +0000
asID:                     45772
IP address blocks:        2a06:a005:1ee0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cf:97:9d:fc:87:94:f4:6e:d8:91:40:5b:fa:39:ce:80:21:f3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:19 2023 GMT
            Not After : Jan  2 02:07:19 2024 GMT
        Subject: CN=971426D52648F89F3F978C3D47F3783B68E09315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:10:8c:76:70:19:65:34:43:ba:d5:8c:05:
                    30:a3:62:c4:91:76:1d:e7:30:35:59:da:e7:1d:5d:
                    87:ea:f9:c0:0f:dc:b7:38:23:11:b0:8c:67:41:82:
                    80:8d:8d:aa:84:31:63:b0:41:bd:40:c2:c4:ae:88:
                    d9:a9:3c:d3:08:72:df:5d:c7:e4:3d:38:25:2e:dc:
                    a0:bd:44:cc:37:a3:e1:a4:25:30:6d:ca:71:9c:12:
                    56:49:d4:33:8e:1e:50:60:36:80:2b:aa:44:7d:26:
                    b3:04:4f:95:d0:98:59:19:1f:59:f1:ee:ef:c3:a9:
                    e2:64:05:df:cf:ab:51:3a:b8:e3:a9:97:0c:92:10:
                    e9:fa:c1:ff:53:22:95:57:84:e3:1c:42:b2:f6:b7:
                    81:35:95:1e:ea:07:d9:e4:38:b6:c0:20:c0:93:04:
                    ca:1a:cd:8d:a2:06:d0:3e:69:ae:3c:15:fe:d6:35:
                    ee:4c:c3:2f:a2:11:06:df:2e:46:21:6d:17:62:f3:
                    9b:8c:70:44:19:f8:d9:a0:4a:33:6d:b2:d1:03:9c:
                    e3:a4:de:ad:56:d8:f1:2b:20:b2:e1:e8:ae:bc:d0:
                    b3:92:d7:e0:6a:28:1e:3a:ec:26:17:d5:90:25:f1:
                    11:75:45:ff:79:8b:35:9e:99:e7:fb:41:6f:df:b2:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:14:26:D5:26:48:F8:9F:3F:97:8C:3D:47:F3:78:3B:68:E0:93:15
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS45772.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:3f:80:39:97:50:b6:fe:31:95:00:d7:ec:aa:fe:46:c5:52:
         73:26:c8:05:2d:58:98:3f:5c:89:3e:aa:1d:7b:82:5f:8e:2b:
         cd:be:79:44:3e:20:c1:4e:a1:df:da:5d:40:9b:18:78:37:5b:
         cc:e6:5b:97:55:55:14:aa:68:fa:e8:99:8d:fa:ca:67:43:83:
         ce:de:53:e4:f7:13:4d:50:8b:fd:09:ab:60:98:fe:23:54:d1:
         5d:61:90:74:e7:b5:87:57:86:d0:d3:b2:33:74:29:e1:bd:64:
         91:1b:db:42:6b:4c:82:92:de:33:f3:59:21:c1:65:84:eb:6d:
         3d:c1:91:a9:1b:25:04:a0:22:52:1d:48:b7:f3:7c:af:0a:50:
         9e:bb:74:4f:56:d7:62:25:dc:08:ef:ff:a4:14:d5:36:91:b3:
         f2:c0:17:4d:e6:36:ff:b1:21:7c:78:21:95:4f:55:0e:7c:7a:
         c9:02:10:2c:19:68:01:ef:f6:57:9a:b1:47:f0:f3:0d:04:e8:
         e0:a7:f8:f9:66:38:1c:66:75:4c:bd:78:b7:79:2f:7b:6c:67:
         56:63:d4:c2:db:e9:82:e7:45:76:19:26:30:57:9a:93:fa:48:
         54:af:45:76:15:a8:c3:2b:08:09:17:1b:ce:fb:e8:cc:f6:cc:
         16:cd:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----