Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/6c5cd635-d37f-30aa-b025-45e349a8aec3.roa
File:                     6c5cd635-d37f-30aa-b025-45e349a8aec3.roa (raw, json)
Hash identifier:          +BnrgifiTbCFUgI+XTIE56Dbx4CBg9QOk1AI6Oq5sQo=
Subject key identifier:   B4:05:E7:58:82:4E:DE:21:1F:C2:73:02:17:66:7D:27:8B:3D:18:45
Certificate issuer:       /CN=7b614d35-18c4-4d90-8912-71bdd962e489
Certificate serial:       010D0C9F4328583F60D08A4C408A6D95DAE75300
Authority key identifier: 88:32:2E:E1:7E:1E:46:9A:0F:F4:3A:5E:D7:C2:17:16:88:F8:A8:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/6c5cd635-d37f-30aa-b025-45e349a8aec3.roa
Signing time:             Mon 26 Sep 2022 21:17:48 +0000
ROA not before:           Mon 26 Sep 2022 21:17:48 +0000
ROA not after:            Sun 29 Dec 2024 05:00:00 +0000
asID:                     16509
IP address blocks:        23.141.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:60:d0:8a:4c:40:8a:6d:95:da:e7:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b614d35-18c4-4d90-8912-71bdd962e489
        Validity
            Not Before: Sep 26 21:17:48 2022 GMT
            Not After : Dec 29 05:00:00 2024 GMT
        Subject: CN=5fabb2ad-250e-4fee-87b5-5631e036dff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:6e:bc:7b:f4:fb:b0:c9:dc:18:a4:80:bc:
                    50:03:09:44:b5:c0:ee:a9:7c:b1:b6:55:12:0e:5f:
                    f4:a9:9c:0c:0a:42:41:79:4c:50:c7:ed:ef:41:8b:
                    ae:8d:95:ea:fb:f4:ee:e4:c4:ff:23:b9:9a:16:dd:
                    50:52:3d:bc:54:dc:46:fb:e7:cf:e6:56:f0:9f:80:
                    e5:2a:0a:44:de:2c:7d:5c:be:56:de:fc:d4:4f:b1:
                    61:4f:da:6b:2b:57:f4:64:8f:83:35:21:ca:55:a6:
                    c2:cc:6e:a8:25:87:7f:43:a1:56:f2:53:0c:dd:d1:
                    aa:dc:0e:4e:ec:ad:81:ab:3b:69:46:f9:eb:15:a7:
                    43:7c:a7:54:dc:35:a7:9a:9a:d6:4b:f9:eb:20:7b:
                    6f:f1:1d:59:64:a7:5b:45:db:52:d1:dc:94:58:9f:
                    ab:65:24:30:2a:3f:d2:a6:1f:8b:ff:52:39:02:f1:
                    df:47:23:c0:ca:62:b8:62:ca:ed:78:94:15:95:7a:
                    86:84:39:a4:91:77:c1:c3:1c:21:1b:05:a2:ce:9e:
                    22:c0:20:87:60:b7:7b:2e:4e:22:29:d3:dd:32:fe:
                    fc:dc:05:a3:57:78:e1:f5:1c:84:fa:87:e5:2c:2e:
                    2b:20:77:e7:0d:75:f3:23:80:36:5e:b1:ae:c2:35:
                    a9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:05:E7:58:82:4E:DE:21:1F:C2:73:02:17:66:7D:27:8B:3D:18:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/6c5cd635-d37f-30aa-b025-45e349a8aec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489/7b614d35-18c4-4d90-8912-71bdd962e489.crl

            X509v3 Authority Key Identifier:
                keyid:88:32:2E:E1:7E:1E:46:9A:0F:F4:3A:5E:D7:C2:17:16:88:F8:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b614d35-18c4-4d90-8912-71bdd962e489.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:33:d8:86:17:3c:0e:24:70:71:1e:8b:f9:71:1d:4c:a0:b2:
         34:cc:20:59:6c:ed:f3:17:17:01:dd:a1:5c:ba:5a:a8:ea:2e:
         06:5c:85:ad:21:64:56:65:1c:2b:93:ab:f7:7b:be:ab:c5:47:
         49:4a:a5:8b:35:f6:3b:7a:87:e2:80:6d:ca:31:bb:c4:fa:bc:
         a0:4c:31:7b:6d:63:f8:65:1c:a3:c1:26:3e:fd:12:b1:3e:86:
         aa:ab:70:49:77:ed:19:e7:95:d6:92:96:14:3a:59:95:d2:a1:
         25:9f:a8:9f:78:0d:71:16:ed:5b:96:f2:d5:bd:cb:95:5d:33:
         64:d4:ce:08:ea:d6:e6:fc:4f:06:4b:94:e8:8a:9a:6f:dc:91:
         11:78:e2:78:57:e2:75:57:7e:63:59:d8:66:1e:38:59:9f:ba:
         ba:22:22:96:7a:2c:79:83:f9:a4:6c:7c:ed:32:1c:39:d1:bf:
         22:fd:63:94:f5:cf:01:75:c7:62:98:37:e7:9c:d4:fa:bb:06:
         92:6c:24:5f:16:15:f0:9c:2a:e5:4e:37:96:62:21:7d:9d:78:
         73:77:2d:af:57:63:d7:6a:f0:1b:5c:0b:1e:d2:46:cf:36:b5:
         7e:94:fe:c9:73:b0:04:bd:79:4f:6d:ab:3e:0d:0f:a0:61:cb:
         01:49:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----