Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31217516-3289-3f58-b6c6-25e3f8dac8a4.roa
File:                     31217516-3289-3f58-b6c6-25e3f8dac8a4.roa (raw, json)
Hash identifier:          QFyqpkPADr+WFZyBwR7vbYR+pZUzPaDp2CPivesoLf8=
Subject key identifier:   BC:B0:42:71:DF:4D:DE:DD:A8:F8:64:62:CB:5A:51:15:1D:6E:E6:16
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F6447C4007836FB9D9A640
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31217516-3289-3f58-b6c6-25e3f8dac8a4.roa
Signing time:             Fri 12 Apr 2024 17:24:47 +0000
ROA not before:           Fri 12 Apr 2024 17:24:47 +0000
ROA not after:            Thu 11 Jul 2024 17:24:47 +0000
asID:                     400899
IP address blocks:        23.27.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 30 May 2024 21:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:44:7c:40:07:83:6f:b9:d9:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:47 2024 GMT
            Not After : Jul 11 17:24:47 2024 GMT
        Subject: CN=c957ae7f-a659-42c4-81d1-b2251075855a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:0d:be:99:9d:fe:77:81:09:7a:18:86:0d:
                    9a:95:84:7c:fd:8d:22:18:d0:d4:f9:e4:74:1d:6e:
                    c9:96:d4:17:e4:97:88:eb:0a:45:8d:1c:39:60:7c:
                    e4:fd:ef:59:45:9b:d8:99:f7:55:b1:51:62:a7:4c:
                    0b:7c:c5:1d:ef:5e:68:46:d1:a2:7c:09:dd:85:98:
                    12:33:d0:4f:cb:0d:44:ed:41:8b:70:36:d9:36:ec:
                    bf:63:2d:ca:9c:40:fa:fe:7f:42:17:11:1a:15:59:
                    dd:b8:74:8a:14:f7:87:c5:97:27:d3:d4:2f:f3:00:
                    9d:ca:60:a8:d9:10:37:89:c5:52:0f:75:13:b9:2f:
                    1d:0a:68:15:9b:c3:ef:cc:22:d6:8b:b2:99:50:74:
                    46:82:a0:f7:5c:e6:40:88:97:bb:55:ed:b7:36:58:
                    9e:02:14:7e:7c:6b:bf:50:68:68:9a:bd:81:3a:fe:
                    1a:97:b0:e1:48:3c:11:61:23:c6:5b:eb:8e:34:a7:
                    ec:27:e5:b8:63:a0:03:ac:c2:05:20:80:18:81:29:
                    cf:55:fb:a0:ec:19:28:f4:54:cd:a4:9a:9f:73:6a:
                    51:a1:67:0a:02:f1:b6:38:45:a4:9f:50:1e:28:30:
                    e0:1d:0a:3e:28:22:64:4e:31:ef:8a:56:42:b6:c6:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B0:42:71:DF:4D:DE:DD:A8:F8:64:62:CB:5A:51:15:1D:6E:E6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/31217516-3289-3f58-b6c6-25e3f8dac8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:08:d3:52:d5:b2:67:40:2e:3b:56:7f:75:f4:0f:50:80:df:
         7b:22:c2:13:ba:3f:64:27:1f:f0:d6:6b:29:95:19:67:4c:64:
         e3:5f:31:19:b5:66:22:cb:4f:8e:f0:cc:be:64:39:76:9c:6a:
         5c:4d:30:45:03:2f:77:e7:6c:ff:9b:67:70:a7:09:bd:b0:9a:
         ef:cc:04:62:02:02:6b:59:7f:78:ec:5e:ae:d4:74:e0:31:8e:
         be:db:30:a4:bd:90:2e:ea:ec:55:1f:33:40:24:8d:a3:74:39:
         04:c7:72:51:d9:cd:63:6f:d0:44:6e:1f:e6:41:30:93:48:fb:
         24:03:eb:56:b9:e7:67:82:4c:db:e0:20:8f:ea:30:f3:0e:33:
         28:83:a5:db:fa:4e:00:e2:cd:cd:8b:be:97:21:74:ca:15:24:
         94:58:34:c3:ec:59:98:91:8a:bb:47:f3:fd:b3:c3:10:fc:80:
         2f:3e:97:1c:44:35:70:15:16:a9:17:91:a6:28:d0:a3:62:d9:
         89:40:fb:dd:92:d5:95:4b:04:bb:27:5b:e7:44:4b:95:a1:9e:
         11:1c:1d:80:55:7e:fc:26:29:2b:9e:45:a1:ff:0d:c4:de:df:
         13:e0:a6:70:15:31:bd:04:50:06:3c:e4:ca:40:fc:40:a0:be:
         e9:83:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----