Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61004.roa
File:                     AS61004.roa (raw, json)
Hash identifier:          l5+loHKtC+RXjTaiqf/xLBPGGIWWkIa7qa0Jky8bueg=
Subject key identifier:   4F:F7:7D:17:81:BB:3E:E4:D0:1B:29:79:B3:8C:DB:41:08:E3:B0:84
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6FFC6214380D15FD93BD6B1B72DB9BEC3C72872A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61004.roa
Signing time:             Tue 03 Jan 2023 02:07:07 +0000
ROA not before:           Tue 03 Jan 2023 02:02:07 +0000
ROA not after:            Tue 02 Jan 2024 02:07:07 +0000
asID:                     61004
IP address blocks:        2a06:a005:5aa::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:62:14:38:0d:15:fd:93:bd:6b:1b:72:db:9b:ec:3c:72:87:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:07 2023 GMT
            Not After : Jan  2 02:07:07 2024 GMT
        Subject: CN=4FF77D1781BB3EE4D01B2979B38CDB4108E3B084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7a:b7:e9:65:aa:53:a0:19:65:4d:9a:dd:88:
                    a7:82:db:1a:f8:2c:fe:a9:0d:79:38:45:72:52:2a:
                    e7:5f:ba:42:d2:bf:dd:db:82:63:63:44:45:1c:b8:
                    78:5d:9a:5c:cd:e9:61:a3:94:f4:86:37:4d:ab:95:
                    c8:51:3b:4d:db:1c:63:b8:ce:6d:09:cc:94:87:f8:
                    1f:c2:08:40:55:9e:29:63:f0:3b:f9:f0:31:9c:0b:
                    ed:2a:ca:57:a4:1e:7c:d2:86:45:77:e1:d0:dd:bb:
                    9a:f0:25:f3:df:fb:36:c5:b7:07:db:40:04:9a:48:
                    06:c0:2e:ed:65:31:bb:2d:b6:46:e6:4a:fd:ec:80:
                    71:2e:bb:34:6a:07:1f:7e:6d:c0:8d:34:06:e7:f0:
                    06:0c:8f:6f:7c:cf:ad:09:d0:a9:40:1d:f5:68:76:
                    0f:82:a1:cf:ac:33:5e:3b:11:79:3e:9c:0b:28:51:
                    9b:48:e3:ba:cc:1d:fd:7a:1e:3d:47:49:0a:e7:7e:
                    12:b0:a2:c5:24:d9:10:6c:fa:04:aa:c5:d2:9b:7d:
                    9f:df:22:27:ae:91:da:aa:16:a4:24:bc:01:7f:ce:
                    9a:d6:b1:ed:99:de:22:5f:40:f4:2e:0f:45:a1:e1:
                    d2:bc:11:a0:eb:ae:97:42:ac:f8:dd:fd:89:a6:c7:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F7:7D:17:81:BB:3E:E4:D0:1B:29:79:B3:8C:DB:41:08:E3:B0:84
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61004.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:77:d8:88:93:37:47:05:42:3b:3e:26:5b:c7:9d:d6:7d:
         19:1d:5f:91:d1:2f:a1:df:13:38:45:c9:14:c0:0e:8d:73:1b:
         e7:6d:80:1a:41:3a:a9:38:1c:95:94:22:eb:a0:b7:c1:75:db:
         db:e1:da:8c:eb:d2:87:d4:8e:df:64:ce:62:44:0e:71:42:00:
         1e:d0:77:56:e9:ac:3d:e2:62:5e:55:dc:ad:9a:43:f8:5f:c0:
         dd:2c:c4:1f:5a:3c:bc:ab:90:3c:1a:3f:5f:18:a9:21:32:f6:
         30:ac:f4:79:c6:fb:f9:84:a7:8a:00:cd:b2:30:a5:7b:11:5a:
         79:92:d0:f1:e1:1f:e2:a7:de:cb:16:ca:de:64:6d:e1:4d:b7:
         1f:d6:cd:4f:d3:b0:e5:8e:0d:a9:96:ae:a9:6e:64:13:5b:16:
         61:80:09:16:a6:9c:ac:6f:43:aa:7f:49:d6:a7:a0:58:a4:7c:
         e3:1f:17:67:2b:51:bc:21:de:4d:30:f8:77:85:db:db:3a:7e:
         bc:0c:61:7b:1f:36:12:ba:1a:0d:d5:a6:24:84:ef:ce:a3:dd:
         75:49:34:63:3d:bd:de:16:cb:cc:a5:09:fa:41:fd:4d:01:37:
         bc:1a:06:0f:7c:1f:97:7c:d2:1b:8a:95:7b:2d:57:38:f0:60:
         f7:e0:bc:57
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUb/xiFDgNFf2TvWsbctub7DxyhyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAxMDMwMjAyMDdaFw0yNDAxMDIwMjA3MDdaMDMxMTAvBgNV
BAMTKDRGRjc3RDE3ODFCQjNFRTREMDFCMjk3OUIzOENEQjQxMDhFM0IwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzerfpZapToBllTZrdiKeC2xr4
LP6pDXk4RXJSKudfukLSv93bgmNjREUcuHhdmlzN6WGjlPSGN02rlchRO03bHGO4
zm0JzJSH+B/CCEBVnilj8Dv58DGcC+0qylekHnzShkV34dDdu5rwJfPf+zbFtwfb
QASaSAbALu1lMbsttkbmSv3sgHEuuzRqBx9+bcCNNAbn8AYMj298z60J0KlAHfVo
dg+Coc+sM147EXk+nAsoUZtI47rMHf16Hj1HSQrnfhKwosUk2RBs+gSqxdKbfZ/f
IieukdqqFqQkvAF/zprWse2Z3iJfQPQuD0Wh4dK8EaDrrpdCrPjd/Ymmx/T3AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUT/d9F4G7PuTQGyl5s4zbQQjjsIQwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NjEwMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqBqAFBaowDQYJKoZIhvcNAQELBQADggEBAHt4d9iI
kzdHBUI7PiZbx53WfRkdX5HRL6HfEzhFyRTADo1zG+dtgBpBOqk4HJWUIuugt8F1
29vh2ozr0ofUjt9kzmJEDnFCAB7Qd1bprD3iYl5V3K2aQ/hfwN0sxB9aPLyrkDwa
P18YqSEy9jCs9HnG+/mEp4oAzbIwpXsRWnmS0PHhH+Kn3ssWyt5kbeFNtx/WzU/T
sOWODamWrqluZBNbFmGACRamnKxvQ6p/SdanoFikfOMfF2crUbwh3k0w+HeF29s6
frwMYXsfNhK6Gg3VpiSE786j3XVJNGM9vd4Wy8ylCfpB/U0BN7waBg98H5d80huK
lXstVzjwYPfgvFc=
-----END CERTIFICATE-----