Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa
File:                     3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa (raw, json)
Hash identifier:          2y41w0NKGXceoFO3FiHjoubg3g8yGZ1jK0tJBfawlu0=
Subject key identifier:   73:39:CF:42:54:3E:71:BC:99:BC:28:C1:1E:D8:E7:6A:4D:AD:24:25
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       5A3C2A2A1E15A19270D7A67C5EA8B5F52402747E
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa
Signing time:             Mon 16 Jan 2023 18:53:01 +0000
ROA not before:           Mon 16 Jan 2023 18:48:01 +0000
ROA not after:            Mon 15 Jan 2024 18:53:01 +0000
asID:                     203458
IP address blocks:        103.68.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3c:2a:2a:1e:15:a1:92:70:d7:a6:7c:5e:a8:b5:f5:24:02:74:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jan 16 18:48:01 2023 GMT
            Not After : Jan 15 18:53:01 2024 GMT
        Subject: CN=7339CF42543E71BC99BC28C11ED8E76A4DAD2425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:9b:9b:7d:7e:49:6c:0c:3a:72:f1:99:ca:
                    b1:bf:02:c7:0f:13:ac:c7:9c:47:24:73:de:4e:ba:
                    c2:05:c9:8f:17:84:7c:51:8a:42:00:d1:72:be:3a:
                    f7:90:78:49:66:56:1e:2b:bb:52:20:80:4d:76:f7:
                    d2:80:7e:02:91:12:34:3f:28:2e:57:3f:a9:1a:0f:
                    28:32:dd:dc:58:7c:17:63:34:0b:51:a3:35:9d:dc:
                    4e:e8:2d:c5:85:1d:68:dd:8c:5d:ad:7b:0f:5c:d1:
                    0f:2e:ae:75:76:57:12:f9:52:58:dd:e5:1a:5c:58:
                    5c:3b:02:c0:37:33:a4:cd:88:46:a0:96:aa:6e:3a:
                    2c:ae:11:77:59:96:f7:86:8f:1c:b3:72:9b:4d:2d:
                    25:85:02:f0:10:8f:d9:1f:ab:25:be:cc:3c:cc:6e:
                    54:8d:2b:9e:61:67:33:dc:6d:29:3a:8a:95:8e:55:
                    7b:36:32:e8:83:e9:c1:29:54:15:9c:83:95:1d:55:
                    e6:9a:4d:79:ac:ae:16:bb:15:3c:86:3b:15:c5:67:
                    ef:a5:99:df:94:e1:53:b7:cd:4e:c4:c9:e9:72:bc:
                    2f:56:f8:6b:3d:e6:dc:df:9c:16:5f:c5:e6:a8:2a:
                    dd:91:cb:ee:65:c0:f2:29:6f:de:fa:2c:e0:53:6e:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:39:CF:42:54:3E:71:BC:99:BC:28:C1:1E:D8:E7:6A:4D:AD:24:25
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:1f:03:81:c2:aa:ce:98:fd:27:80:40:85:13:2a:4f:f3:
         48:00:a6:b7:dd:f2:32:ea:37:db:90:fe:05:73:8b:68:7e:93:
         a8:82:1d:22:22:f0:3b:f5:87:c2:fe:c1:5c:35:0e:9f:d1:9f:
         ee:11:ed:f8:40:9b:d7:ca:79:8d:e4:a1:a6:76:c5:91:53:28:
         ff:07:d7:eb:82:52:d9:47:bc:76:a9:83:a9:b2:2a:1a:6e:ce:
         61:0e:fc:8c:f9:9b:f7:b9:7a:61:6f:83:2a:76:01:b9:1c:02:
         64:c6:76:47:71:b7:b6:ee:d5:f8:c1:2d:1e:81:0e:94:f7:6f:
         9e:d2:07:3b:cd:cf:06:1e:f6:9c:ab:50:4c:fc:f9:b7:0c:aa:
         16:af:bf:d9:de:4a:23:3e:85:54:16:20:36:7c:e5:6e:8b:94:
         89:9e:7d:a4:bb:68:d6:06:28:ae:f3:ba:0b:a4:b7:02:a7:9c:
         ec:84:03:0e:cd:c3:74:b9:8e:a5:27:5a:3c:13:72:01:5f:bd:
         10:5d:3a:5c:9d:11:19:a9:52:bf:0f:ac:4e:56:7c:b9:68:0d:
         db:2d:ab:20:33:18:b7:0c:b0:08:d6:7e:51:6b:98:4c:e8:63:
         15:76:4f:ac:3e:e3:02:d1:49:bc:bb:03:10:52:e4:3b:e2:fd:
         c3:f7:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----