Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/42ee565b-1942-3bbd-ba42-004a5c610da4.roa
File:                     42ee565b-1942-3bbd-ba42-004a5c610da4.roa (raw, json)
Hash identifier:          Di1BhDlojtuuzeNm+uPV3DHvnGrJv6e3W1VSiXcDn6s=
Subject key identifier:   A4:89:99:B1:D9:C4:86:9C:35:71:46:B8:86:CE:ED:02:68:F6:C6:DF
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285844606EFC0B2B032E932D280680
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/42ee565b-1942-3bbd-ba42-004a5c610da4.roa
Signing time:             Fri 29 Dec 2023 14:00:21 +0000
ROA not before:           Fri 29 Dec 2023 14:00:21 +0000
ROA not after:            Thu 28 Mar 2024 13:00:21 +0000
asID:                     18914
IP address blocks:        23.147.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 21:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:60:6e:fc:0b:2b:03:2e:93:2d:28:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Dec 29 14:00:21 2023 GMT
            Not After : Mar 28 13:00:21 2024 GMT
        Subject: CN=8043a2d6-a10a-43d4-8829-78850ca50cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:82:99:8a:cb:53:09:1b:b4:5e:8c:5d:bb:
                    6a:d3:bf:3d:37:b9:5d:2d:5c:72:d8:12:b9:e2:99:
                    5f:04:64:81:cc:71:42:1d:7b:3c:56:65:27:15:35:
                    ac:39:19:1c:b0:30:2d:15:d5:97:cb:6f:38:a1:05:
                    ad:3b:56:b1:3c:ee:e9:5e:eb:f4:02:65:1b:fb:93:
                    06:de:c4:69:9c:74:1f:41:bf:3a:0b:53:1f:fd:f6:
                    8a:50:98:03:f7:ee:11:57:9a:2c:5f:4e:42:37:12:
                    ed:43:13:88:aa:a4:66:a8:b0:25:99:47:38:be:85:
                    34:b7:12:5a:6d:e5:b2:5e:e9:e0:e7:a9:06:c8:c3:
                    90:e2:55:cf:d3:6c:b6:ec:d9:a2:bd:3a:9e:5a:ba:
                    1c:73:45:84:ec:ad:42:dc:b7:c9:96:a1:64:79:b9:
                    22:67:94:37:00:78:69:93:cd:89:a0:2c:b4:d3:d6:
                    c9:c0:24:3e:70:0e:31:38:45:17:88:07:26:93:e1:
                    83:2e:2d:ee:dd:dc:e9:58:cc:6f:ff:93:cd:9f:3f:
                    c4:f7:bc:bf:8a:8a:6b:72:1e:26:f4:17:e8:06:1a:
                    09:83:56:53:fb:d4:db:f8:ee:0c:91:2f:a4:99:f3:
                    a5:c5:5e:da:4b:ee:4f:df:91:62:3d:f7:b7:a2:a6:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:89:99:B1:D9:C4:86:9C:35:71:46:B8:86:CE:ED:02:68:F6:C6:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/42ee565b-1942-3bbd-ba42-004a5c610da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:27:bc:aa:c4:b0:07:92:f0:08:33:b8:69:6f:d6:12:39:19:
         d4:96:cf:36:e7:ac:47:05:62:10:45:cf:40:49:87:ad:f5:43:
         c7:03:a4:31:e6:98:d7:c9:df:4a:5e:0f:cf:18:a2:2c:3f:4b:
         b3:89:7f:d8:2a:e7:1f:8b:eb:eb:cb:f8:0d:5a:cb:d7:ba:1d:
         da:90:f7:fa:33:df:8d:c2:f7:36:42:c6:12:2a:ec:ea:56:eb:
         5a:f5:9a:50:ca:da:17:f9:a4:2f:a4:c1:b6:ce:47:c8:cc:cf:
         e1:ed:56:2e:30:c2:98:c8:d2:fc:c4:d8:a3:d1:c4:9d:c6:e4:
         d9:e5:cb:da:f3:83:59:63:b9:a9:de:35:e7:a2:10:2d:94:6a:
         7b:ca:e6:22:37:06:4f:27:a0:d2:87:dd:fc:31:46:81:6c:ac:
         aa:89:97:e2:0e:38:0b:bc:de:cf:a8:37:98:e1:fc:c3:00:93:
         2d:3e:17:71:cb:46:e2:31:08:e3:84:b4:93:02:b1:3e:2a:a5:
         bc:15:1a:fe:36:5b:c8:39:55:47:2f:32:b8:21:88:dd:5d:c6:
         9c:42:27:95:a4:8c:89:9f:2c:73:95:62:b6:c7:97:de:e1:81:
         bb:44:56:60:d8:cd:0e:83:46:2e:be:69:58:44:72:df:ea:4e:
         41:f5:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----