Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0bbb4af5-264b-3efd-9e62-30b45f6a9052.roa
File:                     0bbb4af5-264b-3efd-9e62-30b45f6a9052.roa (raw, json)
Hash identifier:          bY1Mp/uBtq1XwepAIxnI64B/GlfznwzymC1lJ7eorRo=
Subject key identifier:   C4:E6:47:20:5B:B7:19:8C:DA:2D:B6:4D:DD:30:D6:A3:A8:2B:F2:02
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584552ACA7B508EA3B71CD8A9800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0bbb4af5-264b-3efd-9e62-30b45f6a9052.roa
Signing time:             Mon 25 Mar 2024 08:30:14 +0000
ROA not before:           Mon 25 Mar 2024 08:30:14 +0000
ROA not after:            Sun 23 Jun 2024 08:30:14 +0000
asID:                     834
IP address blocks:        23.230.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 16:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:52:ac:a7:b5:08:ea:3b:71:cd:8a:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 25 08:30:14 2024 GMT
            Not After : Jun 23 08:30:14 2024 GMT
        Subject: CN=c003363f-0ab9-4e44-842d-6be7101f9278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:60:2e:d5:0a:b7:0a:21:da:d2:bb:33:b1:
                    17:95:04:f5:90:86:88:a2:5d:fa:f6:ef:66:7e:42:
                    5a:52:f0:01:18:6f:50:4c:8c:ec:fe:2e:72:73:50:
                    c8:79:c8:8c:5e:78:24:d8:e1:80:01:11:92:54:93:
                    14:08:c5:5b:1f:5e:63:e6:43:9c:6b:60:d6:56:84:
                    83:7d:45:51:14:39:0c:ef:3b:3f:25:f2:46:ef:e8:
                    9d:cd:ac:17:c6:8b:3d:65:ec:be:f3:72:45:ed:5c:
                    31:ca:dd:c0:b5:44:6b:71:69:ae:79:c3:50:75:a8:
                    44:22:cd:17:c5:fd:42:b3:25:2f:f9:a2:9d:7f:a5:
                    08:9f:4e:9a:04:74:96:ef:aa:a4:7c:d3:87:8f:ce:
                    8d:3b:60:57:9e:78:53:60:c1:20:54:88:2d:2b:1b:
                    2f:2a:7f:92:7a:da:90:03:0b:2b:ec:82:56:11:aa:
                    a6:9c:41:22:ec:54:92:19:33:a7:b4:cb:c1:3a:8f:
                    81:b3:01:05:da:ac:f8:ba:78:37:fd:c5:3c:ff:84:
                    ca:ad:d6:0a:2f:8d:02:1a:33:e7:fa:77:f1:01:0a:
                    0b:46:13:b1:1f:05:1f:62:dc:eb:2b:b1:b0:ab:2a:
                    70:99:ea:1d:13:e0:86:eb:05:79:59:23:9e:3b:ea:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E6:47:20:5B:B7:19:8C:DA:2D:B6:4D:DD:30:D6:A3:A8:2B:F2:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0bbb4af5-264b-3efd-9e62-30b45f6a9052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:53:cc:51:09:c3:61:3b:8b:82:3e:64:61:30:15:27:96:e2:
         4c:aa:83:10:65:51:b9:68:b1:3a:03:03:09:e5:25:2d:93:3e:
         3a:0d:af:19:85:7b:db:ce:04:dd:61:36:d8:7c:59:ee:f9:ea:
         bc:40:39:87:9e:60:96:be:30:9a:50:8d:7e:e7:18:11:52:7f:
         06:ac:c3:d3:c8:7d:8c:3d:4b:41:95:f9:f7:51:17:31:8c:bb:
         cc:72:24:bd:70:1e:da:67:e3:5c:c4:c0:96:e4:60:9e:19:fc:
         ce:0e:50:af:e6:3e:38:21:8a:94:fe:7a:68:80:b2:97:cf:1c:
         03:62:b4:e5:d3:6c:ed:70:d7:8b:d1:67:40:b6:f8:d2:4e:0b:
         3a:32:6e:99:92:1a:d0:f3:0a:12:15:71:c0:8a:55:bf:16:9a:
         37:87:fe:a6:3d:dc:da:14:01:54:5c:90:2e:87:57:74:a3:af:
         51:0b:86:ab:0b:7e:d0:7c:84:69:1f:4e:43:7f:b2:40:aa:cb:
         f0:18:96:49:bb:45:9d:18:9c:ba:e0:98:63:a2:ab:58:e9:54:
         ae:47:c6:9b:83:f6:00:33:07:b1:56:f4:73:75:c5:39:e0:79:
         7b:1c:a9:f2:b1:dd:42:f2:ff:f5:c6:a4:5e:28:c7:0b:a6:ba:
         66:74:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----