Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3015bf7-8790-37a6-bbd5-3af87c01298e.roa
File:                     d3015bf7-8790-37a6-bbd5-3af87c01298e.roa (raw, json)
Hash identifier:          3M+2Io96VEP98EF7rWAtwDMDkRRTAbhWNIOSjyPQ8Sc=
Subject key identifier:   37:CE:1D:C8:3C:02:79:4F:7A:77:35:C8:42:75:83:4B:66:9A:4C:DB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285843DE9E2CBFA319B725E9926220
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3015bf7-8790-37a6-bbd5-3af87c01298e.roa
Signing time:             Mon 13 Nov 2023 02:00:15 +0000
ROA not before:           Mon 13 Nov 2023 02:00:15 +0000
ROA not after:            Sun 11 Feb 2024 02:00:15 +0000
asID:                     3949
IP address blocks:        204.2.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:de:9e:2c:bf:a3:19:b7:25:e9:92:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov 13 02:00:15 2023 GMT
            Not After : Feb 11 02:00:15 2024 GMT
        Subject: CN=3abdb76e-a504-4dd0-8369-e373def403af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:8b:4a:a8:dd:6d:1e:61:b1:5c:3e:74:bb:
                    34:33:20:9c:e4:5a:90:22:dc:30:83:49:f5:ac:9b:
                    8c:49:3d:35:e9:c1:08:67:e9:c0:0e:e7:4c:28:6d:
                    06:62:fb:fd:65:c3:09:36:fe:71:ea:9e:52:c1:e6:
                    22:93:8a:73:1c:cc:3d:c2:2d:46:67:dd:09:41:27:
                    18:84:76:f7:d0:0d:1d:87:07:61:60:d1:ea:89:3e:
                    55:14:92:26:99:10:70:97:46:05:2b:f4:53:ec:f4:
                    3c:f4:fe:03:a0:85:fd:ab:6a:42:f3:8d:a3:18:c8:
                    7b:b2:4d:77:a6:41:4d:cc:4b:5e:25:1c:bb:2d:e8:
                    86:8f:cc:4d:48:d8:fb:33:e0:bf:5c:0a:da:9d:7c:
                    6d:d0:b6:7a:88:0a:e1:55:3c:2f:66:71:a0:5c:b9:
                    69:de:66:27:3c:55:33:3c:3e:86:68:88:bd:73:af:
                    62:8a:7c:d9:02:35:ba:6e:ac:4f:59:a5:86:06:57:
                    b6:9f:24:b3:61:84:71:a6:aa:fe:36:1b:2d:48:76:
                    2e:73:15:d2:66:d6:1f:6d:cb:04:0b:f8:94:8c:ba:
                    3a:46:73:53:54:16:98:54:c3:48:f8:a6:21:98:0a:
                    db:20:ac:4b:e9:d1:86:22:01:cd:bf:f5:27:37:85:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CE:1D:C8:3C:02:79:4F:7A:77:35:C8:42:75:83:4B:66:9A:4C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3015bf7-8790-37a6-bbd5-3af87c01298e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f2:44:46:43:e3:c9:4a:da:80:36:af:bf:49:fe:2f:45:b2:
         76:69:9f:11:ea:57:50:4f:c1:88:dd:ce:4f:bc:8b:ea:cd:a2:
         8f:8c:bd:5e:74:2d:40:45:55:0e:77:22:f0:28:43:9e:61:c7:
         e9:d9:b3:a7:d8:d1:50:fe:db:87:4b:ab:58:5c:dc:c1:10:78:
         1e:7c:42:2d:eb:b2:ce:3a:3a:94:c4:e9:71:cd:f2:40:e1:46:
         6b:25:44:dc:3c:4b:f7:7f:db:a6:42:40:bf:e0:74:d6:89:43:
         e7:61:9a:f5:ad:c5:34:af:7f:d3:a4:c3:52:c3:d2:b5:90:c7:
         6c:29:94:d0:5c:71:61:b4:39:55:64:9e:2c:ad:29:83:b8:5d:
         8d:64:b3:5a:38:a0:ea:2f:26:ab:77:6d:cf:f7:d6:f4:03:04:
         8e:59:a8:5b:0c:b4:16:71:3a:61:cb:55:48:1c:98:98:58:c5:
         84:fd:26:16:d2:95:1a:68:8f:ed:8a:8f:46:c6:37:70:65:75:
         f1:7e:33:71:64:d5:70:ce:c5:19:cd:4f:42:39:a0:12:84:68:
         4b:40:1a:a1:08:c6:fa:67:73:d5:cb:e5:56:ef:8c:a7:c0:9a:
         22:b3:d5:6e:cb:ae:94:25:04:73:2b:da:28:02:7b:0f:67:0b:
         a0:e6:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----