Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e04a8c9d-2cd2-3886-874b-561a75037d9e.roa
File:                     e04a8c9d-2cd2-3886-874b-561a75037d9e.roa (raw, json)
Hash identifier:          UPRALIOTRN8LcnbYcsgBDYrfuvh8INUnNDfEGj7APtY=
Subject key identifier:   F5:53:2E:1A:0D:D7:B2:71:81:99:DB:31:A7:EB:ED:9B:AB:90:F1:50
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63BB42666A7C867014C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e04a8c9d-2cd2-3886-874b-561a75037d9e.roa
Signing time:             Fri 12 Apr 2024 17:24:43 +0000
ROA not before:           Fri 12 Apr 2024 17:24:43 +0000
ROA not after:            Thu 11 Jul 2024 17:24:43 +0000
asID:                     54500
IP address blocks:        23.27.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 20:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3b:b4:26:66:a7:c8:67:01:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:43 2024 GMT
            Not After : Jul 11 17:24:43 2024 GMT
        Subject: CN=65cee139-8fc4-4f5c-be74-fd03ee284e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:53:67:22:85:dd:47:39:8c:1c:2b:e6:8c:
                    65:9f:51:1d:db:34:f6:d7:12:45:38:f1:10:b7:f7:
                    02:e1:95:bb:c1:a9:c0:ef:8b:df:c7:22:ec:52:34:
                    f8:24:9c:13:92:1c:d4:f0:25:3e:24:0e:d2:3e:e3:
                    79:e3:62:01:a8:a4:78:0d:19:0c:54:07:29:08:77:
                    71:dd:f8:d5:5a:2e:16:b2:ba:4a:ff:ec:87:7a:66:
                    51:7f:83:eb:f6:ec:4f:6a:dd:57:e2:e0:83:6b:20:
                    c9:cf:d3:d6:c3:09:49:74:eb:f8:cb:21:5c:24:ce:
                    e4:fc:2e:07:e4:a3:ef:70:17:3f:84:65:7b:d1:ec:
                    3e:51:47:c5:d6:54:36:57:e5:21:ec:b4:f3:07:20:
                    2f:12:da:7e:3f:51:58:33:dc:87:20:5e:5d:76:0c:
                    b5:7f:da:1d:86:a6:67:e1:39:80:ba:6c:7b:71:07:
                    68:3e:3f:97:aa:e2:db:24:35:13:ec:d2:14:e2:74:
                    11:b5:94:0d:50:8d:ec:99:4b:e6:bf:17:d2:72:dc:
                    84:85:ea:61:42:a8:fe:e1:f7:e2:e0:aa:9b:ba:96:
                    2e:31:10:9e:f4:b8:0a:f2:00:f2:90:03:fd:15:e4:
                    0e:a0:46:cc:39:36:d0:4d:0e:a8:6b:f1:53:ca:17:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:2E:1A:0D:D7:B2:71:81:99:DB:31:A7:EB:ED:9B:AB:90:F1:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e04a8c9d-2cd2-3886-874b-561a75037d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d9:37:87:31:cd:ff:81:03:16:cc:e7:36:cd:6c:f9:f2:64:
         54:ad:12:0a:52:88:8c:96:28:02:87:9e:78:1d:18:d9:ee:df:
         43:99:5c:69:c5:5f:da:66:3a:a8:db:99:a3:43:26:6e:c9:0e:
         b3:3a:b6:bd:26:f5:6d:f3:6c:c8:4c:30:76:fd:ad:56:2f:61:
         b7:e4:3d:76:d6:db:b8:f6:23:e3:8c:bb:2b:97:84:2a:22:b6:
         22:90:23:86:e5:25:49:b2:fc:83:6a:d3:06:6e:4b:c4:5a:30:
         4d:0e:62:d2:b7:d5:6d:07:06:e5:d9:53:d5:aa:33:a3:96:c9:
         8e:82:25:05:c3:c7:d5:0c:5d:61:e1:1a:a8:81:c4:07:2e:1b:
         65:66:fd:78:f9:49:e3:d4:de:11:2e:3b:76:2c:b8:de:e5:2a:
         7b:38:1b:f3:8b:42:b2:55:95:c4:3f:d2:ca:58:c3:b8:37:ff:
         cd:d1:22:36:0b:2a:f9:72:a5:9e:8e:48:0a:b3:8b:62:d1:4f:
         d7:fb:56:43:93:73:87:25:45:a3:7f:ec:93:65:c5:6b:c7:6f:
         00:b8:97:03:19:e6:44:38:77:77:c9:35:2b:22:26:6c:74:fc:
         87:5f:17:90:c6:27:84:35:95:97:6f:80:a1:54:9f:21:41:7d:
         4c:b6:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----