Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/9316f841-0556-3d5c-95e6-e6375d392dc9.roa
File:                     9316f841-0556-3d5c-95e6-e6375d392dc9.roa (raw, json)
Hash identifier:          LixHNopNj51hhepwDj/NCUD+aKcB9WuGviTENOITZiU=
Subject key identifier:   C0:05:8E:48:0C:39:29:BB:65:AF:1C:25:3B:C4:BF:EE:4C:DB:B5:24
Certificate issuer:       /CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Certificate serial:       010D0C9F43285843FBEB103F5FBB2DF2C501CE00
Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/9316f841-0556-3d5c-95e6-e6375d392dc9.roa
Signing time:             Thu 23 Nov 2023 13:53:43 +0000
ROA not before:           Thu 23 Nov 2023 13:53:43 +0000
ROA not after:            Wed 21 Feb 2024 13:53:43 +0000
asID:                     7018
IP address blocks:        23.165.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fb:eb:10:3f:5f:bb:2d:f2:c5:01:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
        Validity
            Not Before: Nov 23 13:53:43 2023 GMT
            Not After : Feb 21 13:53:43 2024 GMT
        Subject: CN=82b447bb-13e6-4c73-9837-5d96c3e8dd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:90:ed:42:d2:aa:1a:46:66:3c:b5:56:64:
                    ee:f6:81:70:b1:a4:a6:0c:fc:aa:8e:90:ad:01:eb:
                    19:26:2a:05:8a:66:08:3f:c9:66:50:70:c2:9f:b9:
                    2d:0d:80:8b:88:0c:2a:f1:d5:d4:01:62:62:74:54:
                    dc:e6:67:ae:56:0b:30:5d:4c:58:23:d3:71:13:be:
                    e3:34:0b:f3:9b:a4:af:a2:9b:42:ca:1e:ed:b1:8b:
                    d9:03:98:6f:d9:26:ac:d8:13:d0:ed:ec:2a:54:0e:
                    6a:29:f2:6e:26:0c:d3:c9:42:86:8d:73:32:94:00:
                    97:87:b6:8d:5c:57:ce:0f:c4:65:90:30:d2:09:0b:
                    bb:f7:71:ea:94:68:a1:8b:f0:4f:62:69:99:8e:e7:
                    21:d4:9f:bd:d1:3f:bc:8a:31:8f:51:68:cc:37:03:
                    57:b7:51:01:41:a9:f5:7e:21:58:55:df:d2:fa:ac:
                    0a:34:43:92:4e:67:e8:c1:46:39:18:ec:60:3b:e1:
                    76:e0:c0:19:ed:e4:43:8b:ef:03:06:a8:41:9e:d7:
                    ff:b9:a6:ed:bc:cf:a4:53:88:78:d3:ee:c2:d4:88:
                    ce:f6:9a:48:ad:21:2d:a1:96:ac:23:c3:52:21:9f:
                    b2:1c:96:ef:8e:35:81:39:db:fb:46:7b:47:6e:f6:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:05:8E:48:0C:39:29:BB:65:AF:1C:25:3B:C4:BF:EE:4C:DB:B5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/9316f841-0556-3d5c-95e6-e6375d392dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:30:c7:4e:b4:54:f7:76:2b:3b:e7:54:c6:d6:7d:49:93:41:
         68:f2:c6:3c:f8:f0:9c:40:bf:48:d8:c4:9e:f3:03:1b:68:98:
         d9:23:3f:10:bd:f1:b6:1d:e0:13:fc:ca:f1:f0:f0:9c:f0:10:
         7f:73:5b:bc:14:0d:a1:98:e0:68:ea:9f:27:f5:0b:aa:2d:96:
         53:b5:5a:15:2f:b4:99:e8:17:c4:24:73:61:ca:17:7e:08:48:
         45:3a:40:c4:51:4f:c3:76:d7:22:0f:29:7b:82:29:2f:1a:f4:
         15:14:9d:3c:f2:dd:da:80:97:f5:12:dc:90:ed:73:c3:51:c7:
         06:d6:ec:a6:a5:21:a2:79:03:9d:fb:d9:11:b5:8a:a3:de:04:
         a5:68:dd:24:8b:95:f7:80:b3:ed:82:06:0e:23:4d:26:90:1f:
         f2:91:ce:36:1a:46:6c:66:39:0b:37:18:fa:4d:1e:98:ea:5e:
         34:ee:3a:b4:48:57:15:f0:10:10:41:1f:54:69:94:e5:80:16:
         46:c6:bd:53:5d:b9:e5:5b:fe:0b:f4:ce:39:97:37:0f:f9:72:
         43:84:9d:f7:f1:04:aa:5f:6a:da:d9:3f:dd:2c:ea:80:2d:b3:
         34:5e:38:3c:b6:7e:1d:56:0f:8a:37:a9:5c:77:aa:29:75:08:
         2f:48:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----