Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/3317056e-7204-3792-98f8-a2a3c8af97e4.roa
File:                     3317056e-7204-3792-98f8-a2a3c8af97e4.roa (raw, json)
Hash identifier:          nYWvGV5frFk4wNl1Ao0oSmV50kUNf43j8DizWNtA+tg=
Subject key identifier:   DB:A4:99:DD:0B:5F:1A:D6:D5:FC:AB:08:6C:22:34:76:F3:79:E8:A9
Certificate issuer:       /CN=b2679e6f-3d82-435c-a3df-766830f41503
Certificate serial:       010D0C9F4328583F75B0EC29F7C02DCB50CD8608
Authority key identifier: 7D:BC:35:E1:F1:B7:F7:C7:1F:EF:EE:34:09:74:1C:75:94:C7:2C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/3317056e-7204-3792-98f8-a2a3c8af97e4.roa
Signing time:             Tue 04 Oct 2022 15:51:41 +0000
ROA not before:           Tue 04 Oct 2022 15:51:41 +0000
ROA not after:            Mon 06 Jan 2025 05:00:00 +0000
asID:                     400393
IP address blocks:        23.130.24.0/24 maxlen: 24
                          2602:271::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:75:b0:ec:29:f7:c0:2d:cb:50:cd:86:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2679e6f-3d82-435c-a3df-766830f41503
        Validity
            Not Before: Oct  4 15:51:41 2022 GMT
            Not After : Jan  6 05:00:00 2025 GMT
        Subject: CN=3b53c1d1-415f-499e-a154-8926fbc5cffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:8f:27:76:16:c4:a0:be:aa:4e:fb:a8:17:
                    28:95:ff:5c:7f:89:70:d5:84:b0:a0:46:aa:26:1a:
                    59:db:8d:ae:c9:95:fb:05:3d:44:63:9b:cc:6a:0e:
                    56:0c:d1:49:9f:1e:9e:eb:19:e4:eb:3a:19:37:45:
                    a5:fa:ca:fa:07:de:7b:0b:f9:ea:bf:f5:2b:ef:96:
                    02:68:24:a4:fa:30:14:f1:82:85:92:64:b3:a7:ca:
                    13:00:72:a4:08:69:d2:58:9d:4d:fe:c8:a6:6d:fb:
                    79:2f:20:e5:83:bb:3e:99:5d:e5:ef:79:5f:1f:97:
                    e8:d5:e8:5b:45:8f:1e:d4:a7:d3:37:a7:61:c0:22:
                    c8:77:2b:1a:ff:34:fe:2e:b4:8b:17:9b:48:d9:95:
                    32:6f:c0:88:3b:fb:5c:5f:94:f5:75:e5:c1:c6:1b:
                    e2:97:1c:a3:9d:57:48:2f:8d:e6:49:27:cb:8b:09:
                    4d:99:44:1f:76:bc:a0:60:d2:45:bb:65:7c:93:20:
                    c5:f8:a4:bc:41:d9:e8:6d:77:99:8e:27:7b:03:9c:
                    cc:12:af:40:3d:c1:1e:62:e5:e5:2d:63:5a:23:c0:
                    3d:70:14:ec:d9:21:b1:8d:c5:2b:6c:9d:b6:31:ec:
                    a2:8d:94:c8:f9:8f:95:94:d7:03:a8:0c:de:57:a7:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:99:DD:0B:5F:1A:D6:D5:FC:AB:08:6C:22:34:76:F3:79:E8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/3317056e-7204-3792-98f8-a2a3c8af97e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/b2679e6f-3d82-435c-a3df-766830f41503.crl

            X509v3 Authority Key Identifier:
                keyid:7D:BC:35:E1:F1:B7:F7:C7:1F:EF:EE:34:09:74:1C:75:94:C7:2C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.24.0/24
                IPv6:
                  2602:271::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:63:94:ee:7e:4f:39:fc:45:9e:cf:bd:90:33:bb:4c:9e:
         47:38:36:c6:6e:9a:5f:b3:a9:b9:5a:f6:a3:b6:10:70:c2:2f:
         ba:01:52:8f:39:b1:ab:af:06:b9:c0:8f:d1:ae:11:8d:b4:a2:
         dd:e2:bd:52:a9:90:d3:22:d7:12:75:79:69:25:ac:7c:f0:ae:
         27:97:23:24:9f:9c:1b:3a:79:17:f9:fb:b4:ec:f4:15:0b:23:
         74:05:d8:9b:fe:f1:31:0f:45:42:ef:85:d3:6b:fe:77:9f:3c:
         dc:02:94:62:57:33:4f:19:4e:be:30:8c:0e:23:04:6d:3c:46:
         62:d8:e9:7b:92:00:6d:93:0c:c5:05:13:3a:4f:06:95:fa:2e:
         e0:f2:28:0f:5c:0f:f1:ef:bd:27:7c:b5:83:41:72:b3:95:29:
         f9:49:7a:98:c4:62:73:ef:a3:50:88:a0:60:0f:69:84:3b:a8:
         5e:54:30:ee:7e:e8:b0:da:7c:4f:ce:64:6e:c3:a9:03:b2:40:
         94:08:a7:cc:0c:36:ca:64:fe:21:91:60:bf:e9:3a:bf:d0:1d:
         86:42:cb:28:b3:31:0c:ae:a9:9a:33:bd:8b:0b:02:58:d1:e4:
         0a:84:88:d0:74:87:ff:88:f0:cf:90:c8:d8:3b:24:dc:0a:77:
         69:7d:88:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----