Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96244f52-2cf7-3d74-88ce-a945458586ec.roa
File:                     96244f52-2cf7-3d74-88ce-a945458586ec.roa (raw, json)
Hash identifier:          e8r8N4XME36kUvDR+gsXWFJ8YBDJ7gZX+HlY6Q/wJJI=
Subject key identifier:   FC:5F:3C:3A:CC:73:EB:A9:F8:49:20:7A:DC:61:51:D7:BA:02:52:1F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F643D42FF8E310AC3CD3E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96244f52-2cf7-3d74-88ce-a945458586ec.roa
Signing time:             Fri 12 Apr 2024 17:24:47 +0000
ROA not before:           Fri 12 Apr 2024 17:24:47 +0000
ROA not after:            Thu 11 Jul 2024 17:24:47 +0000
asID:                     396998
IP address blocks:        23.27.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 30 May 2024 21:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:43:d4:2f:f8:e3:10:ac:3c:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:47 2024 GMT
            Not After : Jul 11 17:24:47 2024 GMT
        Subject: CN=cd3247b7-aa40-49a8-b03c-61d1da9901ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:ca:e0:6f:18:20:55:5f:00:6b:fc:ec:63:
                    e7:2d:10:71:20:77:2c:a6:24:8f:21:5a:49:33:3b:
                    d6:67:59:75:a3:e5:6c:17:b3:7f:a7:d7:ee:e8:9b:
                    2f:d2:9d:57:d9:a3:60:f8:ed:a5:82:84:eb:58:1b:
                    3a:48:0a:ff:d6:e3:cc:43:1a:c2:01:a4:d1:ff:b4:
                    38:bb:e0:ec:56:1f:73:91:b5:cc:16:5a:3c:df:ee:
                    b6:0f:95:1e:24:4e:c8:25:42:5e:3b:cd:d4:df:ed:
                    f1:98:66:57:90:77:0d:8a:47:bd:f8:bb:2f:e0:99:
                    e8:d5:ea:2c:03:df:20:6f:f3:f6:1e:6f:97:9f:df:
                    e3:a9:8f:3e:58:14:8b:2e:4d:91:04:3a:b0:e5:9d:
                    f3:c7:b8:c9:a2:10:70:91:c9:e0:60:36:34:aa:79:
                    66:5f:ce:15:5c:73:5c:d9:f1:ff:69:fb:7f:e1:15:
                    e6:bb:63:06:7a:5f:6f:10:04:ed:80:b6:d8:04:2f:
                    54:28:d8:12:92:2c:2f:e8:07:bf:22:9c:3d:c3:d1:
                    86:aa:38:1d:9c:54:f1:3e:27:60:15:f7:f7:11:04:
                    92:b7:02:e8:2b:5b:c5:a9:d5:1f:6f:db:84:d7:51:
                    7e:c9:a7:89:5a:c7:36:8f:bf:5a:91:d0:f9:b7:bc:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:3C:3A:CC:73:EB:A9:F8:49:20:7A:DC:61:51:D7:BA:02:52:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96244f52-2cf7-3d74-88ce-a945458586ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:bf:14:22:dc:46:d8:f1:98:ea:4c:91:a0:2b:5d:1a:84:ce:
         4c:a0:25:31:53:d9:ea:29:63:34:9f:36:f8:81:87:16:00:91:
         58:e9:20:b5:34:2b:4a:74:ce:f3:3e:ea:42:7c:44:e3:db:d3:
         cc:f5:7d:31:b3:3e:35:37:7a:d0:76:bc:61:d3:78:a3:8a:02:
         65:b1:73:fc:d2:0b:aa:5d:1e:74:b3:ec:0c:40:bc:24:0c:4a:
         25:b8:52:40:4d:c5:b0:cc:36:a9:dc:89:15:32:04:41:59:13:
         7a:00:57:13:51:bb:07:f2:f6:cf:10:c9:82:20:0a:7b:02:b9:
         55:ac:e3:97:ad:d4:0f:04:c4:33:53:bb:96:9a:ca:70:b5:d3:
         5b:0c:64:d5:62:7a:c6:c1:e1:72:64:f5:bd:5f:6c:81:e6:97:
         d6:5f:fb:00:a9:0b:12:01:7a:3c:fa:df:ea:6b:ba:e5:a3:ff:
         66:13:98:3e:f1:8d:2e:9a:83:32:86:66:82:ac:a4:59:df:3f:
         a9:61:cf:6e:5f:0d:92:af:23:7a:87:96:f1:49:92:b7:e2:1b:
         41:46:11:97:14:28:40:ed:76:4f:a9:44:81:e3:73:7c:b7:67:
         c5:2d:89:9b:56:aa:ed:d2:56:27:65:66:ca:16:f3:b0:ce:c5:
         ba:21:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----