Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/140a826f-d323-34a8-ad93-6520553f0f73.roa
File:                     140a826f-d323-34a8-ad93-6520553f0f73.roa (raw, json)
Hash identifier:          KGhhNPpGUuDDuctY4ieO6s61uAhkgiEr5WIaWIUfuSE=
Subject key identifier:   56:01:63:65:68:10:84:21:11:AC:2E:7E:63:F2:57:63:B8:16:F9:0A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846EC30079EFCFFCF37D3AA0F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/140a826f-d323-34a8-ad93-6520553f0f73.roa
Signing time:             Mon 19 Aug 2024 01:00:31 +0000
ROA not before:           Mon 19 Aug 2024 01:00:31 +0000
ROA not after:            Sun 17 Nov 2024 02:00:31 +0000
asID:                     5650
IP address blocks:        23.27.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 19:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ec:30:07:9e:fc:ff:cf:37:d3:aa:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 19 01:00:31 2024 GMT
            Not After : Nov 17 02:00:31 2024 GMT
        Subject: CN=77951641-cdec-48d2-96f9-e8f82fbb1ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:98:5a:bd:ed:96:26:e7:90:e6:04:3c:75:
                    8f:07:b9:d9:cb:96:6e:dc:7b:df:94:ba:90:b0:a6:
                    b4:3f:81:62:74:e1:60:94:82:a5:7e:e1:07:e1:93:
                    fc:64:8b:13:1e:ce:c3:e3:af:d5:a9:97:38:f8:05:
                    bb:4b:00:c7:67:d1:19:ac:7f:27:17:c3:8d:20:ac:
                    3e:59:27:0e:fd:5d:ee:d2:42:52:ea:07:0a:4a:2d:
                    bd:5b:97:69:d8:25:2c:b9:a1:0d:0a:04:5c:a3:4c:
                    d9:96:91:dc:cf:17:6a:4e:4d:a8:d5:4c:1f:dd:1b:
                    fc:b3:95:e5:5a:f2:f0:80:0f:e3:19:1b:cb:b2:6d:
                    63:71:5e:c2:7f:07:b7:05:1d:bc:58:4f:70:7e:a9:
                    7d:7f:ea:a8:66:39:5e:af:da:fe:c2:19:68:cf:83:
                    c4:a9:6f:7b:7f:d1:eb:15:0b:19:5c:79:76:bb:78:
                    51:3a:5e:98:79:a2:08:2c:19:6f:fc:74:34:e0:a4:
                    22:b0:dd:da:26:d7:1c:95:26:b1:4b:49:fd:f3:ed:
                    91:aa:2b:40:b8:ad:48:c7:e0:d5:a5:d9:df:d2:01:
                    3f:c1:95:f3:57:92:7a:65:0a:18:03:03:83:f2:3e:
                    07:67:97:00:09:65:5b:ec:fc:fc:14:b9:de:85:ed:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:01:63:65:68:10:84:21:11:AC:2E:7E:63:F2:57:63:B8:16:F9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/140a826f-d323-34a8-ad93-6520553f0f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:30:93:5e:31:a5:c8:a7:15:c4:4f:5d:55:29:9e:46:9a:
         9a:ff:a9:32:cb:ad:ba:7d:ef:29:05:e8:41:2a:af:ec:a7:1e:
         35:e3:c0:c5:81:92:b0:ae:8d:21:47:9e:7a:15:61:91:57:4a:
         a7:9f:f6:03:e7:48:0b:51:03:19:ac:93:02:72:b3:5b:a6:1d:
         68:b0:e1:5f:4c:43:0e:6b:66:39:db:f9:3e:93:5b:38:1c:4a:
         90:cf:d3:fb:3a:d5:eb:83:ef:67:a5:b7:5b:03:9a:62:4e:92:
         35:2b:ab:68:e7:4f:af:ff:dd:b9:19:a3:5f:ec:1f:68:68:bb:
         a8:13:9c:9e:b7:af:78:08:a7:e2:45:b2:22:95:bb:9e:f9:44:
         d0:71:a9:63:6a:ed:e8:0d:c5:2f:e9:ad:26:a4:ed:06:f8:d4:
         e7:ba:c8:6f:20:7f:27:4a:45:87:f1:54:dc:e0:eb:97:4e:5d:
         3b:44:dd:80:dc:c6:52:c5:a4:6c:57:21:b6:91:4f:46:3e:25:
         a9:41:3a:00:60:54:c1:74:62:07:d0:bb:0f:9b:7d:4b:92:35:
         73:4b:06:f1:51:b7:f4:50:ed:e2:5e:3b:48:dd:d2:40:cd:34:
         3b:32:a6:48:f7:4e:33:1f:2e:92:82:7b:1d:50:ca:91:31:14:
         ba:b2:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----