Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132312e322e302f32342d3234203d3e203236313237.roa
File:                     35302e3132312e322e302f32342d3234203d3e203236313237.roa (raw, json)
Hash identifier:          l8Q5jgzMudrTfOqb4vP852/lvTtQYdMub+gSVJloONw=
Subject key identifier:   5E:F4:62:7B:E1:AD:0E:0B:1C:AB:59:BA:9A:72:82:8E:73:50:E8:85
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       45075FEFDCB73F413015C402201BA88C488D66A8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132312e322e302f32342d3234203d3e203236313237.roa
Signing time:             Wed 12 Jul 2023 13:14:28 +0000
ROA not before:           Wed 12 Jul 2023 13:09:28 +0000
ROA not after:            Wed 10 Jul 2024 13:14:28 +0000
asID:                     26127
IP address blocks:        50.121.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:07:5f:ef:dc:b7:3f:41:30:15:c4:02:20:1b:a8:8c:48:8d:66:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jul 12 13:09:28 2023 GMT
            Not After : Jul 10 13:14:28 2024 GMT
        Subject: CN=5EF4627BE1AD0E0B1CAB59BA9A72828E7350E885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:f2:d9:10:53:ae:f9:dc:cc:bf:55:97:be:
                    f6:e7:5e:63:d4:eb:28:1d:40:47:81:f2:e5:6d:3e:
                    a8:f0:7d:7e:07:cc:3d:8f:a0:9b:0e:37:78:9c:34:
                    ba:f5:9b:7d:ce:ea:1c:14:11:84:e7:f2:de:37:8e:
                    74:12:44:95:06:af:a6:73:f7:0b:f6:e1:23:6a:86:
                    92:e8:15:84:2c:1c:d6:d2:15:da:6b:14:5f:d8:69:
                    bd:55:45:2f:26:53:62:c7:c4:4d:79:57:3f:e3:4c:
                    d3:c9:f9:0c:51:05:ce:12:19:3d:a8:0b:c1:11:de:
                    bb:33:e9:72:41:1c:7a:3d:84:40:77:2a:58:4a:28:
                    5d:4f:cb:c9:cd:14:02:0e:61:9b:68:7d:a9:3d:0b:
                    bd:e0:54:c1:e8:b6:c1:61:f0:09:a9:56:b8:0d:33:
                    f9:51:24:89:df:35:b2:ec:81:6f:57:cc:41:a8:5f:
                    c2:bd:2c:c5:25:16:0b:0f:40:42:f6:d2:63:65:bd:
                    9f:32:50:25:89:83:26:c0:e3:45:53:59:aa:c6:fb:
                    00:6d:0d:cd:24:b8:c3:46:77:35:50:76:d2:95:26:
                    62:a6:b2:c3:2c:92:ac:b4:20:f8:b3:51:51:91:02:
                    6a:15:76:ce:62:c7:c3:4a:06:2a:1a:73:98:49:54:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F4:62:7B:E1:AD:0E:0B:1C:AB:59:BA:9A:72:82:8E:73:50:E8:85
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132312e322e302f32342d3234203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.121.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:71:29:69:f3:a1:0f:8a:07:ac:36:86:f4:65:c4:70:74:c9:
         c8:ac:a5:70:44:7d:d2:15:35:6e:92:af:e8:19:8b:b3:e3:3f:
         1f:0c:bf:48:64:14:0e:67:47:a1:07:a2:aa:f2:fa:53:a7:e8:
         6e:98:84:d0:8b:77:5f:e5:ce:50:83:cb:09:34:51:62:00:26:
         57:c8:7a:1b:c9:6d:90:35:bd:5e:4b:bf:06:91:8d:dd:82:a1:
         39:89:43:ea:03:dd:47:25:42:b1:d5:80:6d:ca:b8:cf:76:ce:
         79:71:55:53:21:02:e1:15:a7:ae:d2:7a:78:35:22:a3:87:53:
         ea:3d:13:27:69:11:e7:5b:e3:b1:a0:32:17:5c:52:12:0d:3b:
         68:7d:d2:64:f7:4f:f7:4c:4a:1e:e9:12:4b:1e:1d:f7:2f:60:
         2f:52:6c:d4:ff:d2:df:7b:76:b4:82:a2:83:40:d0:49:5d:e7:
         df:59:ad:7c:95:53:a3:70:4b:6c:94:65:f6:9e:e9:c3:8d:0f:
         c4:b8:77:4d:16:b5:73:2a:c6:2d:71:88:89:14:fc:56:3a:eb:
         83:3a:aa:ac:a8:ae:95:07:7d:7d:43:73:7f:f8:7c:07:2e:bf:
         a1:39:32:51:f3:20:76:27:e3:09:06:e3:50:cd:d4:cd:58:98:
         51:a3:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----