Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/c951ccc9-145d-3006-a2c3-706b398e5071.roa
File:                     c951ccc9-145d-3006-a2c3-706b398e5071.roa (raw, json)
Hash identifier:          7fuIQVkFZVsQn9R5YB+2sfml0kNCegIPPjOulQRyyio=
Subject key identifier:   26:A6:A2:5A:DF:41:A3:A9:AD:1D:89:69:79:41:A8:6E:AD:77:9D:E6
Certificate issuer:       /CN=9da2c17e-38b5-4574-b273-36a0f0b2956d
Certificate serial:       010D0C9F43285845D8C2A0CAD24E48A00435CC20
Authority key identifier: CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/c951ccc9-145d-3006-a2c3-706b398e5071.roa
Signing time:             Sun 12 May 2024 09:12:50 +0000
ROA not before:           Sun 12 May 2024 09:12:50 +0000
ROA not after:            Sat 10 Aug 2024 09:12:50 +0000
asID:                     26383
IP address blocks:        23.177.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 02:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d8:c2:a0:ca:d2:4e:48:a0:04:35:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da2c17e-38b5-4574-b273-36a0f0b2956d
        Validity
            Not Before: May 12 09:12:50 2024 GMT
            Not After : Aug 10 09:12:50 2024 GMT
        Subject: CN=f3f57ca8-177c-4f7f-b92f-a04c8e1abc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:96:8f:ee:da:e8:58:2b:d3:8d:30:c5:cb:
                    d0:12:63:34:b5:2b:3d:8a:9d:51:6e:28:3e:5a:0a:
                    e8:a2:a8:01:2b:25:47:45:9e:3f:e6:ba:f3:75:95:
                    95:3a:30:e0:a6:22:a8:e8:53:0d:50:e9:30:48:ea:
                    bc:d5:69:47:1b:f7:e6:e9:c7:65:f2:7e:66:21:74:
                    61:b4:53:7e:3b:99:35:7a:80:f4:b8:6c:74:76:c2:
                    c7:bd:63:d2:5f:29:50:3c:1f:54:ed:02:82:fd:da:
                    fd:df:fa:5e:c8:5d:16:30:3a:f7:48:29:b4:9a:95:
                    a2:5c:44:9e:5a:18:c7:d3:b4:67:7f:07:72:4d:d7:
                    77:2a:b0:74:1d:2b:c5:fe:c7:9b:f4:ff:fa:6b:a3:
                    70:1f:61:d9:32:8d:ac:7d:43:5d:e6:46:9f:06:85:
                    78:07:a1:1f:37:8a:b3:39:8c:49:ff:28:92:56:64:
                    6c:dd:bb:12:cf:21:c5:91:8f:10:3c:3e:3e:85:eb:
                    00:2f:12:b5:d4:68:4e:91:4c:ff:26:a1:ca:0d:b7:
                    bb:b6:96:f7:f1:b0:48:92:73:03:1e:96:42:d0:1a:
                    57:3e:12:0e:e0:d7:2b:e8:f9:b5:a7:40:24:62:f4:
                    c7:22:10:86:7d:99:90:82:74:22:05:4e:88:55:99:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A6:A2:5A:DF:41:A3:A9:AD:1D:89:69:79:41:A8:6E:AD:77:9D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/c951ccc9-145d-3006-a2c3-706b398e5071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.crl

            X509v3 Authority Key Identifier:
                keyid:CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:03:05:02:b5:ab:5e:aa:cb:59:12:03:3d:08:bd:31:bf:bc:
         a0:cc:80:01:33:ae:93:f0:23:cc:bb:ac:61:94:ea:0e:ef:88:
         cc:0a:e7:64:ea:af:4d:ba:62:13:60:65:49:91:7c:37:aa:aa:
         85:51:72:d4:05:a5:e3:be:03:76:4d:50:01:b5:c7:89:5f:fb:
         f7:88:53:27:7a:38:d6:cd:bb:db:28:ae:0d:70:4c:02:8e:c2:
         00:64:9b:60:3a:ce:00:79:74:5c:63:41:3f:f7:c7:49:49:06:
         ce:9a:ff:ce:d3:09:1a:45:65:ad:be:78:21:ca:a4:8b:65:18:
         38:fb:48:7c:f0:a5:ec:53:c0:89:c4:c8:db:b5:9e:3d:91:94:
         ac:f5:af:60:72:dc:c4:03:40:dc:8f:cf:d8:ef:54:62:89:90:
         8b:a0:f9:19:e6:19:d3:0a:11:68:0e:a9:a7:bb:de:d3:47:eb:
         ba:64:a2:36:4e:55:5e:71:8c:87:67:49:d8:fd:e8:a6:05:ef:
         40:8c:c1:61:a2:29:93:23:e1:20:68:51:84:47:fb:fc:a9:73:
         e1:f3:47:73:46:34:6c:18:6a:3b:1d:2b:7b:b1:f4:41:3d:e1:
         21:db:ee:13:21:1f:73:9a:da:3f:1d:9d:6f:88:d3:57:2a:d8:
         e1:96:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----