Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e203631333137.roa
File:                     3139392e3230342e3136332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          bJy9PsaFdHv7HtTC05F5MLbWU3oMnOcp67HaeXXzfHM=
Subject key identifier:   1E:12:D6:C4:8F:36:7A:6B:8A:21:8A:CD:52:AE:2B:1C:C8:EA:26:70
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       27F0F8AB1B9A9B2EFEB9829677F7FFAE34A746AD
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 09 Jan 2023 07:06:51 +0000
ROA not before:           Mon 09 Jan 2023 07:01:51 +0000
ROA not after:            Mon 08 Jan 2024 07:06:51 +0000
asID:                     61317
IP address blocks:        199.204.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f0:f8:ab:1b:9a:9b:2e:fe:b9:82:96:77:f7:ff:ae:34:a7:46:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Jan  9 07:01:51 2023 GMT
            Not After : Jan  8 07:06:51 2024 GMT
        Subject: CN=1E12D6C48F367A6B8A218ACD52AE2B1CC8EA2670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:0e:51:9d:e8:34:54:21:69:8f:e8:47:f1:
                    4b:4d:e2:33:18:81:f8:e9:d7:94:71:2d:f6:cf:8e:
                    b1:2a:72:3f:df:b6:d5:59:25:b4:b6:4e:03:8a:d9:
                    1c:07:75:87:20:56:26:4a:c7:3e:03:a4:58:4c:1f:
                    2e:95:ad:06:be:b2:cb:17:1c:d8:ee:07:39:99:94:
                    04:80:53:4d:b2:b9:e5:86:b8:57:15:d6:e1:e8:6b:
                    db:cd:52:42:9c:2c:27:4f:d8:db:ed:0b:9b:a0:fa:
                    6b:bb:1b:5b:ac:d8:2f:69:c4:1c:ab:71:03:d6:36:
                    74:4a:22:6e:02:0c:30:94:a5:18:f1:b1:f2:9b:13:
                    2a:ed:52:40:56:fc:74:1c:68:c0:b3:b6:8d:4e:c6:
                    e7:56:00:19:0c:a8:26:4e:d4:07:50:3d:c4:05:fd:
                    01:41:69:b8:6d:ff:fb:3f:95:e1:ef:68:14:fa:f6:
                    f5:88:1b:67:5e:bd:8d:64:2f:fc:50:e8:24:3b:9b:
                    78:ea:c7:fa:89:13:22:f5:fe:f3:bc:f4:a5:6b:0d:
                    bc:d5:a1:84:05:e2:59:3a:39:7f:2d:ba:3e:5b:89:
                    7a:52:5b:b7:52:95:37:fd:d0:38:b5:67:c7:ae:76:
                    2e:13:b8:36:11:af:fb:39:94:01:2f:13:f9:fb:55:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:12:D6:C4:8F:36:7A:6B:8A:21:8A:CD:52:AE:2B:1C:C8:EA:26:70
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:cf:0b:e6:30:e8:3a:c4:56:d4:8d:4d:cd:41:84:34:fd:
         1c:b3:07:2a:af:e6:40:39:55:aa:bb:4f:0b:7d:24:37:11:38:
         72:8c:86:e4:23:b8:9d:70:ef:34:63:68:99:fb:a7:3f:2a:ab:
         f1:29:84:6f:1e:5c:bf:fd:c6:09:92:4d:0a:ba:d3:aa:7c:d1:
         0c:40:9b:7d:0d:7e:aa:88:17:ad:cf:77:9b:63:4e:bb:56:3d:
         8a:5a:82:9c:fd:2f:4e:bc:45:4a:31:a3:14:99:f9:3f:6d:c0:
         11:0a:fc:d8:57:2d:c2:6f:eb:f0:a3:7e:4f:d8:ef:71:42:52:
         50:e9:52:04:1c:ec:00:d1:42:0e:29:50:c5:7c:39:4f:81:55:
         c5:70:51:ed:33:61:bb:c2:89:c9:2e:b4:aa:ab:14:5d:23:dd:
         36:1f:94:3d:80:37:c8:5d:aa:ec:63:2f:80:ff:01:6a:f3:72:
         f6:f6:b0:b2:2e:7d:d0:ba:d8:d8:e0:c8:59:c8:74:ed:75:ab:
         4f:58:b8:3f:48:72:e8:e3:1c:8d:b9:fb:2d:f1:97:ca:45:3b:
         8d:33:b6:b7:18:b5:a7:f7:c8:c3:0b:70:57:e3:9d:f1:bf:36:
         60:df:e6:f4:a8:73:1b:fa:94:65:bf:01:9c:bf:20:22:f0:02:
         8f:75:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----