Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14f9cf60-3a74-3d28-888d-455657d12699.roa
File:                     14f9cf60-3a74-3d28-888d-455657d12699.roa (raw, json)
Hash identifier:          3qvYSuuKivJ/p7wamhAgx9NjQKjBDloLOHPWZuk9H+w=
Subject key identifier:   E4:8F:38:08:41:19:2D:07:A5:62:AD:AD:D8:7D:FB:B7:10:20:AE:A8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843422A231FA7D77D6278DA9DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14f9cf60-3a74-3d28-888d-455657d12699.roa
Signing time:             Mon 18 Sep 2023 01:00:23 +0000
ROA not before:           Mon 18 Sep 2023 01:00:23 +0000
ROA not after:            Sun 17 Dec 2023 02:00:23 +0000
asID:                     64267
IP address blocks:        192.177.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:42:2a:23:1f:a7:d7:7d:62:78:da:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 18 01:00:23 2023 GMT
            Not After : Dec 17 02:00:23 2023 GMT
        Subject: CN=3697b8de-8c6e-4c6a-a0b2-00566364dc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fd:f6:2f:67:7c:65:37:a4:9c:3e:3b:fc:54:
                    90:2e:10:68:89:db:d1:12:f3:b4:f8:8a:0e:b6:8c:
                    85:6e:e3:5b:2a:32:05:33:27:21:2c:49:00:69:2d:
                    d5:05:7c:d6:42:b4:66:cc:c8:82:b2:75:be:58:9e:
                    c2:46:51:1a:b2:25:a6:7c:b2:f0:88:29:79:6e:98:
                    07:a2:18:5a:a3:7e:8e:f1:81:8e:52:94:57:5b:4d:
                    84:57:aa:79:7c:7d:1c:e9:e0:22:c9:e2:91:89:9b:
                    34:a4:84:20:f2:25:5d:09:08:5e:0b:fb:8f:30:cc:
                    d4:92:b0:39:de:ae:95:02:88:62:5b:94:f4:0e:0c:
                    72:f1:9c:5b:ae:9b:e9:51:ed:84:9d:50:7b:d6:f0:
                    a9:c2:cf:83:99:1e:b4:17:07:0d:d5:7c:d6:e8:7b:
                    fc:75:3b:e9:e7:97:4a:95:f0:88:0f:84:81:03:ef:
                    5a:4b:5b:03:db:bf:20:1a:a7:ef:3a:a5:92:29:00:
                    03:78:e5:89:b4:b6:8b:98:af:5b:d6:53:26:84:09:
                    dc:5e:f4:15:6d:f3:3b:2e:fb:ee:41:e5:ad:3f:3c:
                    be:e4:67:ab:e4:8e:61:33:9c:78:9b:58:52:f9:75:
                    57:34:22:e5:43:e4:4e:e1:a0:48:f3:b0:4b:af:b8:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8F:38:08:41:19:2D:07:A5:62:AD:AD:D8:7D:FB:B7:10:20:AE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14f9cf60-3a74-3d28-888d-455657d12699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:f3:2f:8a:d8:2c:47:c6:62:5b:81:b9:fc:83:a6:0e:0b:
         7e:b8:b3:13:75:8a:9c:9c:37:20:b7:b5:e1:0f:70:c7:64:39:
         cf:59:00:52:3b:3e:16:8a:17:e5:c1:1c:85:ab:ac:e5:be:9b:
         b6:a6:82:89:44:14:d2:1a:bb:1b:87:0f:34:6b:eb:26:d8:da:
         ae:8b:8f:05:42:bb:3d:58:b9:5a:cc:c8:f5:72:38:ec:51:98:
         d5:85:68:ec:f8:9d:5c:34:56:6c:0d:64:2b:19:3d:e6:8a:8b:
         15:22:ed:b1:23:15:47:38:0a:40:6f:95:7a:f2:72:ab:05:95:
         5a:8e:a8:75:86:20:e9:7c:04:08:d0:ff:7e:6b:9d:a7:c2:1d:
         9d:2a:bf:35:25:ea:17:f5:68:e4:65:14:65:b0:20:fd:6a:f4:
         a5:35:a4:fe:81:81:cd:e7:b1:57:21:c9:d5:a5:6d:87:f1:b1:
         cb:a4:a2:bf:6e:46:38:3b:35:38:77:4f:68:08:76:bc:b4:9d:
         15:e3:c6:0d:82:8e:bb:a3:de:88:cf:1a:69:f3:6b:38:9a:65:
         2e:c0:e7:84:f0:68:cb:f1:28:ed:a7:90:26:4b:3e:1f:b9:e3:
         61:94:07:b9:6b:b0:64:d9:63:b4:0e:45:d8:66:96:fe:13:47:
         b0:2f:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----