Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/d1b531ba-945b-3cfb-9bbd-2053904770aa.roa
File:                     d1b531ba-945b-3cfb-9bbd-2053904770aa.roa (raw, json)
Hash identifier:          AJzdCiNdgVpkTfmGzx/wFyJCFZyiqcSQwI/gGobSHio=
Subject key identifier:   CA:A0:FB:8F:21:9B:69:76:06:D5:7E:DA:A4:2C:D4:40:8F:21:7E:9F
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F4328584301F465208803E879A35532E8
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/d1b531ba-945b-3cfb-9bbd-2053904770aa.roa
Signing time:             Sat 26 Aug 2023 01:00:21 +0000
ROA not before:           Sat 26 Aug 2023 01:00:21 +0000
ROA not after:            Fri 24 Nov 2023 02:00:21 +0000
asID:                     22191
IP address blocks:        130.45.224.0/23 maxlen: 23
                          130.45.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:01:f4:65:20:88:03:e8:79:a3:55:32:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Aug 26 01:00:21 2023 GMT
            Not After : Nov 24 02:00:21 2023 GMT
        Subject: CN=5aed07ee-1cc4-4d99-b983-8d3d3133c8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:28:ca:36:c7:62:6b:ed:df:0c:76:59:12:
                    8a:c5:0b:97:06:22:8c:d7:59:a9:db:08:fd:f5:d6:
                    00:74:3d:f4:cf:ef:a6:bc:2e:e4:cc:95:c7:c1:50:
                    51:f8:2f:d7:ae:98:da:ad:53:87:62:1e:1d:41:58:
                    37:2b:f3:19:38:63:8e:8d:cd:b5:13:a1:37:c1:a0:
                    e5:1e:8b:bb:d4:f9:3c:15:a7:9e:ca:db:3d:de:29:
                    14:9a:ac:90:fe:9c:2c:e1:ff:0c:90:38:77:4d:0a:
                    d2:00:72:2f:fe:4c:d2:bc:4d:69:88:0e:1a:15:8f:
                    6e:9e:53:40:0b:0a:01:ed:3e:c4:b8:12:7d:f4:bd:
                    5c:78:9c:67:dc:b2:30:15:93:bb:5d:2e:97:84:7c:
                    5a:09:73:27:24:9d:06:d9:6c:7f:39:0a:59:1a:95:
                    ab:aa:28:23:c3:ae:a3:56:b2:30:a5:ac:a0:a1:8a:
                    0e:a3:80:50:f2:7f:7b:4d:21:c3:ca:ba:cb:fb:26:
                    75:e7:2f:2a:42:47:f4:a3:45:e0:92:ac:cd:fa:8c:
                    84:56:4b:4a:53:cd:7d:e1:78:a2:00:63:80:60:20:
                    c9:06:67:e9:d4:52:7e:8c:9b:b8:a6:52:09:d8:c3:
                    41:cf:ff:a5:86:14:a1:c0:78:14:57:8b:f2:9d:99:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A0:FB:8F:21:9B:69:76:06:D5:7E:DA:A4:2C:D4:40:8F:21:7E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/d1b531ba-945b-3cfb-9bbd-2053904770aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.45.224.0/23
                  130.45.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:94:d1:41:a2:40:ce:a3:ef:a4:83:12:bd:fc:8a:0b:ec:
         ea:6f:3b:8c:c9:98:8c:cb:82:b5:41:8e:5f:1b:a8:eb:b6:6c:
         ba:f4:40:4f:8b:06:e7:06:86:97:f9:6d:34:6d:f7:9f:c4:20:
         15:ad:2a:1c:e5:85:74:55:45:96:48:75:a8:64:f8:f8:a7:1e:
         66:8e:44:56:bc:86:41:28:c4:8e:6c:11:3e:fb:0e:4a:8c:d1:
         57:7f:f4:a5:0c:af:31:97:de:99:a8:6e:51:c1:04:70:73:af:
         67:ea:68:de:b1:d1:60:71:c7:4a:e2:3d:0b:f3:5a:3d:51:ba:
         60:ba:57:f1:eb:26:77:6d:38:60:25:4a:18:58:24:5e:d8:ad:
         33:bb:28:a7:5f:2c:ed:09:70:38:7e:dc:46:ff:7a:b3:74:8e:
         37:20:d1:6b:8e:91:75:ed:8f:29:f0:b2:c1:62:f1:4f:3d:ed:
         99:fe:ca:5a:c0:5d:f3:4f:45:15:8d:56:09:9b:ee:3c:62:a8:
         e8:7d:c5:aa:9a:5f:80:a6:63:14:65:f3:97:db:2f:eb:63:20:
         3c:d6:b6:1f:94:e4:e5:e8:43:80:cc:b8:fd:6b:92:f1:d1:b8:
         fc:10:fe:22:94:39:fd:0f:9c:1c:11:13:fe:f2:1b:ab:97:bf:
         ce:69:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----