Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS945.roa
File:                     AS945.roa (raw, json)
Hash identifier:          iKG7WxyL9ZC9vw/skd5nS4yO8TicdmvEMxBIo/8iZig=
Subject key identifier:   26:B2:99:64:05:8C:50:9C:E0:71:B3:1A:68:EC:A3:00:07:43:3F:4A
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       14461829197B0D00D44CAB0F134450DBDD00D310
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS945.roa
Signing time:             Tue 03 Jan 2023 02:07:10 +0000
ROA not before:           Tue 03 Jan 2023 02:02:10 +0000
ROA not after:            Tue 02 Jan 2024 02:07:10 +0000
asID:                     945
IP address blocks:        2a06:1280:b00b::/48 maxlen: 48
                          2a06:a001:b00b::/48 maxlen: 48
                          2a06:a006:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:46:18:29:19:7b:0d:00:d4:4c:ab:0f:13:44:50:db:dd:00:d3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:10 2023 GMT
            Not After : Jan  2 02:07:10 2024 GMT
        Subject: CN=26B29964058C509CE071B31A68ECA30007433F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:e3:e5:5f:03:b0:51:74:52:ae:08:39:39:
                    f8:3f:23:49:70:0d:cf:8b:62:9f:b0:7d:13:f3:88:
                    a5:c7:fe:fe:0f:e7:08:e1:84:58:5c:79:f6:a4:b6:
                    41:77:b4:91:40:20:ea:b7:8e:de:2a:45:38:2f:fa:
                    7c:ef:fb:1b:d9:f4:15:4c:35:d4:d0:8f:16:59:7a:
                    51:3b:71:f2:3c:98:95:0c:cc:94:e5:6d:7c:dc:bb:
                    8f:3f:56:2a:02:ce:78:17:31:68:87:34:ba:a2:a4:
                    44:e0:ee:f1:4f:d9:15:2f:1d:33:95:a6:ca:48:5c:
                    5e:f8:e5:0c:cf:fe:26:cd:78:3c:7d:2d:67:45:45:
                    75:b2:a0:65:b6:f1:e1:57:61:61:0a:5b:e0:83:a4:
                    47:ba:da:45:ca:ef:db:44:76:e4:6d:b5:54:6d:77:
                    f6:33:88:55:1f:08:d3:0a:29:8d:a7:f6:57:05:a5:
                    28:63:3e:d1:c6:30:ea:1f:74:4f:53:0a:5d:45:ab:
                    27:ef:96:aa:ba:8b:77:0f:2c:46:08:26:48:8b:df:
                    27:25:84:f3:9f:25:5d:7a:a7:48:f7:ca:46:f1:d2:
                    9c:ed:39:6b:e2:f6:ac:c4:3a:42:4a:46:54:c5:50:
                    8a:52:33:43:c0:41:7c:fb:02:63:b5:6d:52:e8:21:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B2:99:64:05:8C:50:9C:E0:71:B3:1A:68:EC:A3:00:07:43:3F:4A
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS945.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280:b00b::/48
                  2a06:a001:b00b::/48
                  2a06:a006:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:88:f2:ca:53:89:c7:22:0f:3d:96:6a:34:f4:17:2f:60:ea:
         6c:a4:18:9b:9d:8d:f0:b6:d2:7d:78:5f:36:8c:cf:c9:ff:5c:
         18:a1:f2:29:39:1a:0b:25:d8:c1:fe:73:ba:49:b7:03:06:fc:
         64:7f:79:18:b7:57:2c:35:3d:e7:1c:6d:ed:b4:28:4f:54:76:
         9c:bb:8b:72:ef:3d:21:de:d4:ba:31:b7:0a:31:31:15:ee:f7:
         c7:11:8a:6e:89:37:59:68:88:7d:73:d5:e8:12:c3:25:6d:d7:
         3a:ed:a2:a4:bb:67:69:20:fb:50:76:bb:7e:e6:f0:bc:2b:9b:
         5b:7f:73:61:3b:9b:b3:07:7a:25:8b:f1:c2:1c:fa:f5:d4:40:
         d3:b3:a6:98:d4:5f:32:13:2f:0e:5c:ed:b4:e4:67:c2:17:40:
         83:e1:4d:dd:7d:d5:f5:5d:c9:f4:e2:3c:14:6a:2e:e1:c5:1a:
         0c:10:34:f6:02:8e:1d:2c:32:a2:0b:44:3f:65:4f:1b:df:83:
         00:1f:bc:7c:dc:a4:f6:c2:ab:b6:d2:95:67:4f:8f:d3:51:99:
         81:96:83:e1:57:5a:78:f8:b6:71:30:b2:ad:6f:ea:cd:b6:c8:
         34:41:ef:46:31:29:c0:26:81:52:df:c0:11:c9:da:cb:ce:6c:
         a3:8c:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----