Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1436e54-20c1-3e6b-9d19-5e7a9ffa5498.roa
File:                     a1436e54-20c1-3e6b-9d19-5e7a9ffa5498.roa (raw, json)
Hash identifier:          JSBr/1O7Zo+WzAGfAMTc1h3acLU7xYvaoQncRzDox/I=
Subject key identifier:   A9:39:9F:08:23:BF:E1:56:BE:0E:7A:2F:8E:53:8A:5C:83:F0:1B:01
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584758200029DCC224FBD57E3100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1436e54-20c1-3e6b-9d19-5e7a9ffa5498.roa
Signing time:             Thu 26 Sep 2024 16:55:34 +0000
ROA not before:           Thu 26 Sep 2024 16:55:34 +0000
ROA not after:            Wed 25 Dec 2024 17:55:34 +0000
asID:                     406762
IP address blocks:        23.27.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 16:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:58:20:00:29:dc:c2:24:fb:d5:7e:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 16:55:34 2024 GMT
            Not After : Dec 25 17:55:34 2024 GMT
        Subject: CN=a1e0aa7c-21da-48c9-850d-5b920d2359b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:67:e7:70:54:5c:ac:30:34:c9:d6:5a:3e:
                    5a:00:96:5e:72:fa:01:00:ae:fe:3a:51:b9:8d:3a:
                    d8:34:d0:1c:9c:e5:c4:bb:37:98:e0:89:c7:5f:38:
                    01:a9:b5:d3:9a:40:16:26:1a:0d:b3:d5:ee:cf:b7:
                    22:56:42:f9:6d:6d:e1:7d:46:de:e0:ea:60:1f:49:
                    ee:26:b8:cb:2f:6d:1e:98:f7:49:45:a7:06:b2:33:
                    0e:69:a4:80:da:ec:f2:17:c1:3c:95:78:be:ef:54:
                    5f:0b:79:39:a7:0e:99:06:92:60:d0:82:83:84:e6:
                    17:d9:6d:5f:38:50:3f:26:0d:cd:20:8b:6b:3b:0e:
                    17:21:96:ed:8f:fe:87:a7:e5:77:e6:31:9c:d8:4a:
                    17:3c:d9:69:21:4f:f8:2c:88:2a:a7:49:e2:0c:b2:
                    0d:9b:9f:0b:86:3a:5f:42:e1:59:f5:57:42:cd:90:
                    10:9b:f6:12:11:5c:58:98:c8:92:a9:a0:09:8e:3c:
                    37:a5:f7:a2:9e:3a:39:f9:e5:6d:3f:2d:59:ab:ba:
                    39:3f:d2:97:e3:e6:3b:8e:f5:ce:86:e3:7b:47:f4:
                    41:f3:61:65:04:1c:2d:af:96:be:a0:2e:30:74:1b:
                    87:a7:28:00:0c:42:ce:66:43:48:09:14:39:09:af:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:9F:08:23:BF:E1:56:BE:0E:7A:2F:8E:53:8A:5C:83:F0:1B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1436e54-20c1-3e6b-9d19-5e7a9ffa5498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:8e:de:3d:bd:5d:58:08:1b:21:c3:15:dd:d2:1d:9b:5e:
         21:00:2a:c2:12:0c:82:0f:e6:f1:df:e2:75:e2:b6:87:d4:81:
         dd:65:5b:36:f7:3d:9d:be:8c:e4:f7:32:99:45:75:12:1c:59:
         9b:99:ce:db:5b:7d:24:f2:65:8f:da:f4:95:15:74:de:3c:11:
         50:71:95:dc:82:65:0e:88:04:73:b0:ed:04:de:09:30:b4:8a:
         d7:97:6c:f9:d3:4c:ac:4c:5c:a4:69:aa:2b:bf:f1:f3:4e:b4:
         d2:ea:86:c3:d2:6e:a9:66:ca:c9:bd:82:3e:34:27:97:b3:8e:
         09:47:80:19:ed:40:ac:b7:20:bf:7e:cd:9e:ed:2d:b2:54:fa:
         0b:7f:9e:28:33:a3:37:fa:bf:c0:26:3c:0e:34:79:aa:b8:55:
         25:09:a1:ae:f2:ac:c2:2f:62:fa:c7:2a:7e:57:da:f9:0d:c3:
         43:da:32:b7:19:10:f0:6f:c6:7a:10:96:02:4b:3b:b8:49:3f:
         0b:ce:29:17:27:3b:fb:cf:2c:fb:11:e4:97:70:2a:9d:d3:4c:
         9c:cc:5d:ae:d7:12:a5:79:d4:bd:8a:3f:3a:59:b7:4d:b0:09:
         0d:73:35:1a:b6:14:2e:f3:34:91:2d:1a:54:05:28:a8:e6:00:
         14:50:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----