Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/43f8b3d1-a77b-3e5b-a42e-8f26270a9e56.roa
File:                     43f8b3d1-a77b-3e5b-a42e-8f26270a9e56.roa (raw, json)
Hash identifier:          CH0oYSBPb5aQ5ud5XRUtZDKyp4kHVYwMGhVqWigQqtk=
Subject key identifier:   01:08:EB:F1:1B:2E:2C:46:81:96:67:24:E3:AE:2C:CB:10:80:AF:D0
Certificate issuer:       /CN=dec85453-756b-41c4-9e89-03593a6d3f56
Certificate serial:       010D0C9F432858423216617B5229F9F826B0A980
Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/43f8b3d1-a77b-3e5b-a42e-8f26270a9e56.roa
Signing time:             Mon 12 Jun 2023 14:00:46 +0000
ROA not before:           Mon 12 Jun 2023 14:00:46 +0000
ROA not after:            Sun 10 Sep 2023 14:00:46 +0000
asID:                     200510
IP address blocks:        23.144.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:32:16:61:7b:52:29:f9:f8:26:b0:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56
        Validity
            Not Before: Jun 12 14:00:46 2023 GMT
            Not After : Sep 10 14:00:46 2023 GMT
        Subject: CN=834cfe86-389d-4d41-bff8-051bd0ecd62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:df:f8:da:d5:0f:cb:bd:48:d7:d1:73:bd:
                    29:c1:80:70:6b:0a:93:37:c0:62:c5:68:78:2e:97:
                    14:04:6b:fd:d1:be:51:2e:e2:55:5b:33:48:52:21:
                    a1:13:f3:4f:de:5a:89:a4:65:7a:04:74:c5:8b:aa:
                    80:f6:38:8f:fc:7d:11:9b:5c:6c:3d:2b:54:ce:49:
                    fc:c1:90:21:24:0d:c8:03:a3:c6:32:d6:71:db:9b:
                    9a:25:f1:7c:1a:e6:84:2d:8a:ac:c4:2d:aa:a3:23:
                    2d:60:e8:6e:57:af:48:92:f2:36:cb:67:ff:d0:41:
                    21:83:15:00:02:12:2a:75:2c:1e:36:84:b8:ef:51:
                    b8:9b:ce:3f:43:03:14:2c:9d:f7:7e:d0:b2:68:ac:
                    45:92:f2:4c:b9:8b:be:73:a4:05:d5:66:3b:5c:11:
                    b8:75:d9:f9:9d:ed:45:4e:65:a8:e6:e2:ea:fa:0d:
                    c4:86:fd:0c:31:74:1d:93:72:0d:7d:64:03:56:a3:
                    62:e0:b7:4e:c9:34:e7:d3:89:69:12:c6:05:f3:50:
                    8d:9f:39:86:18:bb:01:74:7c:02:74:79:cd:86:f6:
                    d5:ad:8c:52:23:71:c9:fd:39:ed:2c:6c:a4:f3:95:
                    e7:a6:a4:81:3b:02:5d:d9:2e:64:61:f0:dc:cb:2d:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:08:EB:F1:1B:2E:2C:46:81:96:67:24:E3:AE:2C:CB:10:80:AF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/43f8b3d1-a77b-3e5b-a42e-8f26270a9e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl

            X509v3 Authority Key Identifier:
                keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:ac:c7:2f:d3:64:60:a5:b7:7d:4d:0d:62:b9:35:27:a3:
         35:be:b7:a4:0e:8a:a9:19:61:59:56:24:6b:d8:26:57:03:f4:
         0c:11:e7:b9:e8:f1:28:b1:40:dd:90:2f:e3:1b:94:90:1a:71:
         66:7b:fc:86:9c:18:98:e1:58:30:c0:4b:44:b7:96:e9:64:f3:
         06:e1:b3:59:b4:8f:b0:ab:a2:40:fc:bc:4e:cc:87:89:28:7c:
         b7:72:c3:d3:91:fc:e4:27:1e:27:ed:f1:6d:f0:c2:8e:ad:8e:
         50:6a:ca:67:44:ab:f5:b8:8b:79:e3:4c:d2:c1:fd:2d:02:cf:
         dd:cc:d4:42:83:d2:62:ac:ff:8e:d7:51:92:56:45:d5:67:82:
         86:fe:bf:e3:1b:cc:46:42:98:6d:c4:ad:7f:77:ed:8f:f8:79:
         10:0a:19:52:a9:02:91:46:d0:42:16:f3:2b:b9:07:54:f4:20:
         a2:c7:7d:51:92:50:b0:4b:64:46:76:d2:99:bf:5d:bc:7e:21:
         ff:df:e1:97:63:dc:b4:fe:47:d2:73:68:46:74:bc:bd:3a:03:
         de:07:e1:1e:ed:f7:27:11:bd:e3:24:c1:3c:2e:8f:0d:c5:f6:
         49:6d:6e:89:b8:3e:c1:27:33:16:17:d1:50:3f:07:f3:af:32:
         46:90:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----