Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          0QlsLik7+KrYQEN8+6KNRtiCQ0zBWN7ykX664Gv418I=
Subject key identifier:   A0:A9:D2:A2:EE:41:A8:64:B7:31:C9:3E:6B:B5:46:A3:57:FC:FA:DD
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       23C1C8B0BDEAF901DA2366E40C941EA59F7C5738
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS23470.roa
Signing time:             Mon 21 Aug 2023 12:00:04 +0000
ROA not before:           Mon 21 Aug 2023 11:55:04 +0000
ROA not after:            Mon 19 Aug 2024 12:00:04 +0000
asID:                     23470
IP address blocks:        205.234.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 21 Aug 2023 12:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c1:c8:b0:bd:ea:f9:01:da:23:66:e4:0c:94:1e:a5:9f:7c:57:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Aug 21 11:55:04 2023 GMT
            Not After : Aug 19 12:00:04 2024 GMT
        Subject: CN=A0A9D2A2EE41A864B731C93E6BB546A357FCFADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:09:ff:eb:2d:5c:b2:0e:cc:27:8a:bf:8d:
                    f9:4e:65:b0:10:f9:60:c0:42:c2:f9:4a:d4:11:9e:
                    10:27:61:18:c6:97:55:11:eb:b6:09:63:8e:c3:a8:
                    4e:b4:78:83:2c:16:11:d4:f7:bb:a8:a7:cc:f0:b8:
                    aa:6d:ec:91:f1:6e:2f:93:14:05:8a:68:e6:4e:95:
                    9c:a9:be:cd:15:6c:ab:f7:33:09:b9:5e:e6:40:f0:
                    9d:58:c6:59:97:e3:85:be:f6:2f:c7:f5:ea:4b:2e:
                    82:79:aa:67:fd:4b:b0:d4:aa:d6:4d:dd:b1:89:3c:
                    3d:8b:dd:82:e6:e7:ae:17:b1:36:8f:eb:7a:a5:d7:
                    94:92:a2:8f:bc:48:ba:6d:e1:b1:62:aa:d4:ec:fa:
                    ae:fc:61:20:4e:67:60:20:98:e9:16:a3:c7:d9:bf:
                    91:62:e6:b1:1c:df:5a:5a:db:1a:5c:8c:fb:e6:13:
                    74:63:57:f0:5d:3c:68:7a:68:00:ae:b0:3f:3f:b5:
                    ea:2a:32:fc:59:d2:f6:ae:67:4f:a5:7b:47:e2:64:
                    82:70:94:5f:86:9f:42:b1:ef:e1:14:8d:df:91:24:
                    0f:d1:d7:34:c7:19:07:aa:5e:e6:b4:5b:62:37:15:
                    bb:de:6f:e0:1d:4f:95:fc:c2:f4:34:bb:c8:3c:48:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A9:D2:A2:EE:41:A8:64:B7:31:C9:3E:6B:B5:46:A3:57:FC:FA:DD
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:66:44:a9:ef:9b:d6:c3:8b:ba:1b:a4:37:28:c1:91:11:dd:
         7c:7d:ee:a5:a7:d9:92:b7:27:27:7e:b8:85:65:26:c1:f0:d5:
         51:4b:3e:70:98:5b:72:55:56:75:dc:eb:e6:6a:01:16:4e:2a:
         39:94:21:e8:eb:39:cb:82:80:ab:15:38:38:87:cc:4b:1c:ba:
         5f:0a:26:1b:1d:eb:77:26:09:ff:a5:a6:fa:fa:ee:83:31:e1:
         58:60:52:7c:03:ca:12:cc:18:ca:fb:90:69:c5:56:ea:1e:1e:
         5c:9d:45:3e:41:dc:41:ec:6d:c9:6c:49:7c:56:cd:0f:5b:40:
         b5:fd:78:e2:21:37:8e:85:f8:27:73:dc:c9:8b:92:2e:25:54:
         ea:df:b6:a3:d5:9c:6d:5d:6c:c9:0d:e8:6f:85:71:90:9b:43:
         d6:64:65:e9:9e:fb:99:6f:0c:9a:52:40:f7:f2:04:90:5d:5b:
         e5:b4:0e:9e:c2:d2:23:6f:0d:43:08:29:7a:39:1e:9d:62:f0:
         d9:90:1b:4f:0e:f7:18:63:89:42:4a:97:0a:0c:f4:4d:bf:bd:
         ea:f8:33:72:d6:3a:90:0b:3d:10:49:0b:e1:19:04:f4:05:32:
         04:ca:60:3b:d9:bf:e8:ad:22:44:0a:4d:18:34:f4:91:6d:85:
         df:c7:b0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----