Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/d5df1d8a-0836-3818-aa5c-f002b377065c.roa
File:                     d5df1d8a-0836-3818-aa5c-f002b377065c.roa (raw, json)
Hash identifier:          9ZC9xiB1MIp7TxOEdZgkEQcsQl/1E0fa+TgUi/lYkbI=
Subject key identifier:   C7:31:E8:5D:7A:36:4C:15:F0:39:C8:97:CF:F9:A4:64:B6:D1:A9:4C
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F4328583E42EAE705A006780B03DA5780
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/d5df1d8a-0836-3818-aa5c-f002b377065c.roa
Signing time:             Fri 05 Nov 2021 13:56:52 +0000
ROA not before:           Fri 05 Nov 2021 13:56:52 +0000
ROA not after:            Wed 18 Sep 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        23.247.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:42:ea:e7:05:a0:06:78:0b:03:da:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Nov  5 13:56:52 2021 GMT
            Not After : Sep 18 04:00:00 2024 GMT
        Subject: CN=bf2f99fa-57ab-4895-8e78-d3d3ccec4b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:56:be:c5:ce:27:9e:15:68:91:82:d2:08:
                    cd:64:82:30:bc:e2:a0:0b:be:2c:f6:bd:a3:cd:39:
                    fd:fb:9f:53:36:65:4c:c0:77:a3:2d:e3:7e:95:1a:
                    7b:43:09:b1:e1:49:b7:f9:ac:2c:4d:e2:d0:d6:e9:
                    ac:c0:9b:ec:ab:ca:d2:c7:75:cb:65:33:bd:99:48:
                    a0:28:60:ef:97:f5:6b:57:4c:3d:1d:58:b5:19:77:
                    30:a4:19:88:ba:7b:03:62:ad:1b:7e:f7:71:fd:3c:
                    6c:f3:4f:ca:7d:2f:b6:5a:e0:42:b5:fa:78:a5:6e:
                    02:f6:71:01:c9:2c:57:6d:49:14:43:62:71:ef:2b:
                    6d:8d:01:e9:0a:88:77:69:d0:f6:7d:c8:cd:27:0d:
                    6a:7b:b6:30:e1:2a:3e:e2:40:ca:25:ba:b9:a2:28:
                    4d:da:5a:78:77:ee:c1:16:de:a3:62:cb:86:54:79:
                    72:fa:a3:ae:df:cc:85:2e:e4:7c:d1:8d:e7:58:89:
                    64:67:1d:67:8b:4e:d1:eb:db:2c:a9:f3:8b:f4:5c:
                    d9:a6:2f:69:d9:e1:c7:33:4a:e8:45:04:1c:d8:94:
                    a0:ce:bc:9e:5d:2c:83:44:40:22:12:59:4d:15:2e:
                    71:0c:ab:ef:84:12:31:9c:47:19:be:c4:6e:08:fd:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:31:E8:5D:7A:36:4C:15:F0:39:C8:97:CF:F9:A4:64:B6:D1:A9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/d5df1d8a-0836-3818-aa5c-f002b377065c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:10:39:a1:cf:10:d6:d3:9f:65:dd:1d:85:b6:ab:bf:52:
         2b:f5:81:7b:54:70:8f:33:29:4d:a7:63:18:64:af:bd:a4:80:
         df:bd:4d:7e:f3:20:3c:b3:61:66:71:36:96:1c:b1:ee:00:1b:
         0c:59:cf:7e:74:c0:15:fc:77:a3:be:d1:12:9d:a3:04:66:0b:
         50:7a:c1:5e:2f:09:48:ba:2e:58:36:0e:62:48:42:c8:a1:c0:
         2d:1e:bc:65:f2:c3:14:7b:0c:f2:d7:7b:7d:69:d1:65:1f:15:
         f1:5c:3f:39:25:e0:83:78:71:c8:da:69:73:6b:de:0d:45:ad:
         1c:31:04:49:c4:2b:83:77:9d:b5:4d:bd:27:76:b9:41:85:29:
         59:dc:8c:79:dc:8d:ee:cc:89:2a:93:8c:5b:fe:1d:11:c3:25:
         54:67:62:8f:d6:8e:73:10:56:f6:d0:da:3a:cd:5c:27:de:67:
         ed:46:a3:b0:7f:75:a9:0f:77:6e:94:54:a9:9f:a7:a9:bf:4c:
         4d:ee:01:32:41:7a:20:68:4a:4e:52:3d:d2:3d:bc:c4:6c:f0:
         4e:8f:b6:f5:3c:2a:5a:94:c9:df:39:cb:39:8f:cf:f2:f4:7e:
         4b:48:96:c8:d4:67:10:68:75:f1:ea:4d:b3:8a:5d:43:76:75:
         bf:9b:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----