Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65b9f705-8bb9-3ac9-a852-c9713d5d25c8.roa
File:                     65b9f705-8bb9-3ac9-a852-c9713d5d25c8.roa (raw, json)
Hash identifier:          ZJlZyG2pABGXJSAbIQsIJVoTU2RnqKf7wvGrXc1c5+Q=
Subject key identifier:   DA:43:17:E4:B3:98:6C:88:2D:ED:90:35:67:61:0C:BB:8A:BF:A8:15
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F64455C92381CEFC5C2900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65b9f705-8bb9-3ac9-a852-c9713d5d25c8.roa
Signing time:             Fri 12 Apr 2024 17:24:47 +0000
ROA not before:           Fri 12 Apr 2024 17:24:47 +0000
ROA not after:            Thu 11 Jul 2024 17:24:47 +0000
asID:                     400043
IP address blocks:        23.27.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 20:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:44:55:c9:23:81:ce:fc:5c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:47 2024 GMT
            Not After : Jul 11 17:24:47 2024 GMT
        Subject: CN=cf9ff9d2-66d1-4192-97da-76d8edee08b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:a4:d6:95:4a:1d:ba:3e:d0:87:86:f0:7e:
                    25:f9:68:c6:90:53:f5:de:06:6f:fc:cc:6d:d5:c7:
                    70:ca:41:b5:06:03:a7:2d:b2:21:f6:ee:c2:6b:d7:
                    5a:f1:bd:95:04:8f:8e:50:92:f5:bc:2e:7c:9f:ce:
                    2e:7f:46:a5:05:fe:8e:04:c8:cf:a6:90:38:c6:9b:
                    31:c7:42:6c:57:ea:93:e0:fa:c0:5c:79:72:01:80:
                    02:da:8b:1f:4a:b3:53:68:f2:fe:86:c3:3d:da:fb:
                    49:c0:3b:33:36:39:67:c3:6a:cf:3c:f6:47:19:67:
                    bb:56:12:7c:23:f5:06:cb:c9:56:1f:d6:73:6b:9a:
                    f2:4b:66:44:d9:3f:3f:98:f0:14:89:15:47:13:d6:
                    4b:ca:9f:6a:0b:34:42:1f:86:39:8d:93:7a:37:dd:
                    f5:40:9e:da:a6:63:02:9f:2d:18:34:8e:b9:35:70:
                    ab:79:de:fd:cf:cf:bc:68:c3:b1:29:8d:5d:23:e3:
                    70:e5:fe:95:c7:3e:1c:36:cd:3a:e2:08:9f:0d:b1:
                    a8:52:e6:83:32:f5:01:73:34:e7:6a:3f:4b:61:0c:
                    b4:ff:1b:97:4f:cb:6c:cf:d6:28:b1:60:f2:6a:97:
                    0d:51:0d:0a:e7:5a:7d:c7:16:a7:f8:fc:80:76:8e:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:43:17:E4:B3:98:6C:88:2D:ED:90:35:67:61:0C:BB:8A:BF:A8:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65b9f705-8bb9-3ac9-a852-c9713d5d25c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:d7:48:3a:71:da:ed:72:75:1f:50:c7:dc:d9:06:5d:cd:
         a7:56:99:d3:6a:37:99:62:2c:3b:1e:2e:31:3a:ef:d7:16:0d:
         e1:04:f5:6d:c4:ee:2b:aa:27:68:2d:d1:5f:cd:31:45:cc:3a:
         87:fc:66:1d:3b:a7:6d:af:30:aa:75:e5:da:d1:32:3b:9e:d1:
         da:c7:c6:fe:0e:c6:d2:df:dd:47:a0:25:6e:ef:44:ce:20:6c:
         7f:33:7e:20:a7:03:0d:7b:6a:29:64:0d:01:d2:55:88:81:d1:
         ba:aa:7f:94:df:40:94:0e:a1:66:40:fb:62:ca:33:d3:ca:8d:
         98:ad:4c:a3:d3:bc:60:f2:d1:0d:40:dd:e0:3c:f3:7b:a8:71:
         ae:87:d7:1b:7c:b0:d9:a3:6e:01:23:ff:60:37:da:0d:fe:2e:
         27:ca:08:d1:aa:59:74:0c:4b:3f:5e:0e:d3:88:8e:50:a5:54:
         ad:a7:d7:66:af:a8:26:fb:4d:7d:ba:6c:5c:1d:f8:41:f8:e9:
         03:79:34:fb:0f:00:04:15:58:d4:eb:08:1e:b3:a4:cf:24:cf:
         aa:06:37:ff:62:18:19:43:be:32:12:cd:86:1c:e1:ea:c0:11:
         3a:0a:47:62:29:82:00:c2:a2:d2:57:dc:dd:7a:23:98:57:7c:
         f9:41:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----