Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/11a304f8-4027-3e0d-8d13-a02b961aaa83.roa
File:                     11a304f8-4027-3e0d-8d13-a02b961aaa83.roa (raw, json)
Hash identifier:          b/Nyx1K3i7ZPrKgySxGJwHTlwqNy7rvaCtY7aB3G2HQ=
Subject key identifier:   D5:86:C7:B3:85:8C:B5:D6:89:5B:A6:43:5D:11:8D:D0:26:13:CC:16
Certificate issuer:       /CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
Certificate serial:       010D0C9F432858470CAD5BD3894BD8729A268080
Authority key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/11a304f8-4027-3e0d-8d13-a02b961aaa83.roa
Signing time:             Fri 30 Aug 2024 16:18:57 +0000
ROA not before:           Fri 30 Aug 2024 16:18:57 +0000
ROA not after:            Thu 28 Nov 2024 17:18:57 +0000
asID:                     139257
IP address blocks:        23.142.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 01:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:ad:5b:d3:89:4b:d8:72:9a:26:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de
        Validity
            Not Before: Aug 30 16:18:57 2024 GMT
            Not After : Nov 28 17:18:57 2024 GMT
        Subject: CN=03195280-b5a9-4418-8dd2-4fbe6be2a07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:08:08:69:1d:bb:bc:e2:4c:5d:8d:fa:89:
                    e5:26:98:ca:e7:73:12:75:9e:14:23:9e:88:25:f2:
                    f4:14:d5:73:34:f5:d7:e2:e2:11:d7:ba:b4:f1:7e:
                    b9:12:cb:12:47:da:40:35:d9:69:30:71:ea:48:74:
                    cf:4f:61:7f:f3:7a:18:60:56:66:05:ed:1b:57:45:
                    b0:a9:52:76:56:b3:8d:87:61:16:25:50:97:d3:e6:
                    db:eb:7b:a0:ee:9b:7d:19:74:e2:fb:60:58:a3:7a:
                    1d:3b:34:bb:2d:17:1c:f7:4b:5d:82:38:1d:f6:02:
                    28:ce:dc:7d:b7:43:b2:c8:87:88:97:51:e6:2a:d3:
                    1b:4f:d6:e7:36:d1:a6:d2:d8:85:8d:15:cb:00:19:
                    e9:e9:74:dd:01:0e:8f:75:f7:76:0b:6c:98:b8:05:
                    35:9c:c1:af:5a:0d:36:f2:a4:cc:46:bd:d0:1b:b7:
                    98:4d:5e:db:0e:e2:ab:6a:18:93:a1:51:ba:77:69:
                    93:7d:51:66:c9:1b:df:2c:9e:73:75:ff:d5:c8:d7:
                    f9:73:9b:b0:e6:db:d6:e4:d4:3f:dd:c8:8d:c8:e8:
                    73:88:ce:50:0c:38:a7:1d:22:a5:e7:c8:9b:87:75:
                    b5:b7:5b:50:23:bc:59:ee:0a:17:0a:36:cb:2c:80:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:86:C7:B3:85:8C:B5:D6:89:5B:A6:43:5D:11:8D:D0:26:13:CC:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/11a304f8-4027-3e0d-8d13-a02b961aaa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.crl

            X509v3 Authority Key Identifier:
                keyid:ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:82:72:53:b8:d9:81:69:0b:5c:09:9d:3e:1e:9e:2e:74:
         ac:95:e7:37:a4:6b:87:8d:64:ec:70:10:89:7a:b4:78:60:ff:
         85:aa:5b:a5:79:41:7c:79:33:fc:e6:00:35:ef:ca:52:b7:83:
         d5:58:02:0a:7d:25:9e:5a:be:00:f3:c6:92:e2:a9:f7:65:e4:
         0c:a0:66:7b:f7:54:b5:32:b0:88:52:b5:67:3e:a4:a4:54:2d:
         ef:42:55:57:02:70:7a:1c:e4:a4:55:a0:50:39:a6:82:5e:52:
         75:8d:76:ea:fc:7b:14:01:0b:44:51:c8:ee:94:7a:b8:da:19:
         4f:47:00:ea:2c:39:9d:7b:fa:b5:33:3c:1f:08:ea:9a:cd:dc:
         78:25:a0:59:e2:51:92:aa:d1:36:e6:11:08:f3:0c:e7:af:39:
         e8:b1:d8:58:54:cf:0e:07:d3:0a:06:e2:94:de:26:f0:6e:9d:
         0b:d5:d5:4c:dd:a1:4c:cb:9d:ce:ce:7c:a6:e6:99:17:f1:2a:
         d2:2e:65:a2:fc:ed:79:ab:b1:6e:0b:50:14:fd:aa:49:ad:b1:
         20:fd:08:28:8d:e3:60:c1:a5:ed:c6:82:5b:e8:ee:a6:b1:cb:
         bc:51:02:42:2c:28:b1:98:c0:c9:4e:11:c4:e3:eb:20:c8:57:
         60:94:0a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----