Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/db919abf-d954-3323-b4b1-706ad308fef8.roa
File:                     db919abf-d954-3323-b4b1-706ad308fef8.roa (raw, json)
Hash identifier:          aOQzrKnU3jxyqnljS06qEa1YMKQc+w+D9m/PSQQ4vrM=
Subject key identifier:   43:FC:45:48:E1:C5:77:E6:2A:F8:A5:15:3B:DC:61:09:83:BF:6E:6D
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F432858438EEFEF7E3839A73C17B0BF80
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/db919abf-d954-3323-b4b1-706ad308fef8.roa
Signing time:             Sun 15 Oct 2023 13:00:19 +0000
ROA not before:           Sun 15 Oct 2023 13:00:19 +0000
ROA not after:            Sat 13 Jan 2024 14:00:19 +0000
asID:                     8100
IP address blocks:        23.247.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:8e:ef:ef:7e:38:39:a7:3c:17:b0:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Oct 15 13:00:19 2023 GMT
            Not After : Jan 13 14:00:19 2024 GMT
        Subject: CN=463956c7-93d5-41d9-b59c-23e2c23506b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:40:ea:f5:d0:ab:db:50:3b:85:a3:af:98:
                    b4:24:e6:b1:3c:ed:04:22:30:4d:7b:0b:a2:95:2a:
                    1a:cf:e9:86:77:5b:ca:8c:67:b8:0f:f4:ad:0d:ef:
                    f0:ce:fb:c0:c0:d7:95:5d:b7:b1:aa:6d:f1:fb:a2:
                    e9:b9:f9:3c:8c:c2:b4:5d:c4:1f:5f:ee:93:8b:67:
                    03:1a:07:de:8e:d8:49:8f:e0:71:ea:02:47:45:df:
                    41:f8:52:65:68:09:80:4a:b6:00:54:f0:ed:fe:c2:
                    0c:2b:3e:51:cd:c8:d2:b1:81:24:0b:be:11:7d:b9:
                    c0:4b:c8:a6:1a:fd:d2:be:fc:a6:2e:df:0b:15:b3:
                    af:b8:e9:b9:10:d4:b4:55:ca:b3:28:86:78:23:f6:
                    96:d2:58:a8:f5:92:62:64:bb:f3:4c:a7:78:5a:34:
                    31:c5:e3:97:a1:9e:e2:94:ed:70:8c:7c:52:84:b5:
                    32:dd:05:26:ae:02:a4:c2:7a:43:4d:62:92:ae:6f:
                    66:7c:98:f3:7b:61:4c:db:92:12:63:56:bc:e7:f1:
                    24:85:f2:43:cb:44:33:7d:45:42:13:d4:b4:00:58:
                    d8:f4:9f:3a:9f:3c:91:e9:6f:3a:c6:fb:03:aa:13:
                    68:e5:76:ca:35:ad:07:b4:d3:57:ae:27:9e:8e:18:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:45:48:E1:C5:77:E6:2A:F8:A5:15:3B:DC:61:09:83:BF:6E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/db919abf-d954-3323-b4b1-706ad308fef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:3d:0f:d9:ff:13:e9:16:50:b9:b8:a8:9f:a0:68:8c:c0:
         d3:5a:34:77:a4:b3:76:4c:db:fc:06:60:45:1e:31:12:1b:a6:
         b4:2a:8e:11:23:82:c9:2e:c4:b8:57:10:73:70:da:40:ec:67:
         4c:63:8c:d4:43:01:7b:f1:2e:9d:0f:82:d0:1a:0b:d5:35:81:
         72:2a:d1:97:da:bd:d4:af:3a:c6:43:ce:b6:87:42:99:bf:37:
         79:17:ac:e2:6c:a7:68:ca:39:ea:07:c5:f4:a8:33:e2:05:b2:
         cc:18:80:ab:ba:31:bc:d2:2c:a6:9e:29:43:8f:2e:4b:c3:18:
         b5:1c:95:13:1a:2c:8c:0c:6b:d5:0a:90:27:5c:ff:71:16:66:
         45:f3:14:38:88:49:2b:35:b9:cc:3a:33:93:93:b7:ca:14:14:
         5b:b1:47:49:b5:93:0e:49:3b:93:c0:b9:64:e0:50:8d:b8:76:
         b6:04:5e:60:50:17:b2:dd:61:fa:75:c2:e3:50:05:25:cb:f5:
         41:80:49:f3:ca:52:9c:bc:58:2a:a0:d5:f5:4b:c4:38:9d:d1:
         36:00:a8:33:d8:a5:12:4c:b3:93:88:f3:a7:ef:5c:fa:de:09:
         c7:b7:94:2a:2b:fc:e6:84:6b:3d:7c:27:eb:c3:8c:b2:7d:47:
         22:55:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----