Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6aa6c66-bd71-34da-90cc-24b697b4e820.roa
File:                     d6aa6c66-bd71-34da-90cc-24b697b4e820.roa (raw, json)
Hash identifier:          j87odNxaRT6KSIdkw5tzYtfXra1WJy6Lh0xV7LUfeEc=
Subject key identifier:   2E:D1:3E:4C:5D:A3:C0:23:D2:A7:F2:C5:D5:97:C5:7D:30:1C:08:48
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584472E245957B98B94DA0440C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6aa6c66-bd71-34da-90cc-24b697b4e820.roa
Signing time:             Fri 05 Jan 2024 04:37:12 +0000
ROA not before:           Fri 05 Jan 2024 04:37:12 +0000
ROA not after:            Thu 04 Apr 2024 03:37:12 +0000
asID:                     7029
IP address blocks:        98.23.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 16:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:e2:45:95:7b:98:b9:4d:a0:44:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan  5 04:37:12 2024 GMT
            Not After : Apr  4 03:37:12 2024 GMT
        Subject: CN=1c0b4bf4-d3b2-423f-a472-61b08b7630a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:2c:ac:00:d7:e2:b1:3a:2e:5b:1c:b0:ea:
                    a9:e8:6f:25:53:b3:4d:36:e3:b2:e0:26:73:d6:8d:
                    41:32:e6:95:f0:22:d5:c4:5d:05:14:b6:f7:be:a0:
                    de:84:e3:f6:d6:28:7f:d5:44:9c:9f:b8:64:9d:d4:
                    9a:4e:d4:bc:91:19:e4:cf:02:d9:48:1f:c9:53:e4:
                    5a:d0:2e:5d:54:28:d2:57:6e:c6:23:9e:24:df:fd:
                    39:78:7d:b9:82:82:91:d2:bb:04:0d:15:88:6b:46:
                    7d:00:e3:de:6f:7d:c8:d8:2b:2b:99:ee:a6:0a:50:
                    0b:ae:30:4b:f7:4f:46:34:3e:c0:ac:13:4b:2a:16:
                    6f:83:a3:8c:ac:c8:4e:e7:de:7b:09:dc:f9:02:7f:
                    59:f7:18:f8:2f:72:61:5f:f1:f6:d1:b5:6f:0d:5a:
                    02:b6:38:9c:6a:98:54:ae:7e:a1:ec:eb:a7:90:90:
                    35:33:c6:8d:2a:73:31:ca:63:ca:ce:66:b1:80:43:
                    05:dc:0c:90:b8:33:00:59:d8:00:92:03:71:91:37:
                    96:70:79:d7:6e:4f:fd:bd:69:bd:39:2a:20:ca:1b:
                    4b:a2:9b:e1:3c:79:e4:9d:de:30:35:3a:8d:b2:ed:
                    d2:af:54:8b:a4:1b:1e:86:9c:d3:ea:6c:81:b9:e0:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D1:3E:4C:5D:A3:C0:23:D2:A7:F2:C5:D5:97:C5:7D:30:1C:08:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6aa6c66-bd71-34da-90cc-24b697b4e820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.23.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:6a:cf:50:9c:14:7c:54:4f:ac:df:63:32:e0:34:4a:3f:
         e0:84:d9:43:2b:fd:01:d8:2f:fa:2d:ea:21:da:78:ea:c8:44:
         7c:05:ee:25:29:f2:a2:10:2f:df:a1:1c:9e:6b:ff:4b:fd:bc:
         ef:96:75:d2:d8:fa:93:8c:05:ea:a5:ae:80:1d:cd:1b:b8:60:
         2b:67:65:c8:18:69:e1:fa:be:5c:01:5a:b6:fe:54:0f:71:b3:
         60:9e:b5:d4:ce:bb:3f:f9:ba:f7:e1:25:af:77:4c:cd:50:80:
         92:4a:a9:45:d0:66:2c:2f:ba:fe:5c:4d:64:db:6e:bf:5a:08:
         ec:de:23:1d:07:a5:df:11:13:c7:1a:b0:97:1f:6c:0c:fd:c4:
         de:e8:08:b3:e5:99:9d:b2:e4:88:5f:41:38:74:cd:52:90:c9:
         66:f0:97:6b:ad:a6:3b:cd:a0:75:e4:2c:0d:8d:ef:df:7c:c8:
         ef:d4:01:0c:a9:fe:00:8d:3e:e9:de:54:2f:35:87:9c:8a:db:
         06:06:82:54:93:cd:01:65:ad:6c:7f:27:db:2f:4f:cf:92:97:
         f1:a6:eb:86:58:a0:f2:75:97:c7:77:b4:94:57:11:c8:cf:2e:
         da:a6:bc:1e:3b:a4:a4:10:2d:9e:6d:a9:e8:2d:d9:ad:28:9f:
         4c:b4:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----