Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a8d46fb-2c1b-3565-81fb-9141123edff2.roa
File:                     2a8d46fb-2c1b-3565-81fb-9141123edff2.roa (raw, json)
Hash identifier:          I23efQkRMseA3svoa77YeCMzj1jLZlLcePJLCgg1gzA=
Subject key identifier:   E9:47:D8:28:36:B9:96:C6:8B:9E:B4:B1:0D:DD:22:35:8A:65:A7:D4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858424683EC58180AFA2A535E4B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a8d46fb-2c1b-3565-81fb-9141123edff2.roa
Signing time:             Mon 19 Jun 2023 21:37:39 +0000
ROA not before:           Mon 19 Jun 2023 21:37:39 +0000
ROA not after:            Sun 17 Sep 2023 21:37:39 +0000
asID:                     834
IP address blocks:        45.39.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:83:ec:58:18:0a:fa:2a:53:5e:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 19 21:37:39 2023 GMT
            Not After : Sep 17 21:37:39 2023 GMT
        Subject: CN=b205fabb-a653-4886-a3cd-36b91a2298dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:a7:64:21:ee:53:81:6f:47:de:c5:71:a9:
                    eb:6c:e5:49:1f:16:ab:2b:8f:ce:2c:7e:82:40:5a:
                    31:e4:94:c3:01:a9:93:53:eb:54:9f:40:22:d3:b9:
                    eb:f4:86:1a:60:bb:d1:f7:a5:d7:dc:c9:d0:a4:04:
                    5b:99:09:0c:0a:54:66:90:b4:e3:fb:6b:9d:4d:08:
                    df:a6:dd:c4:a9:41:1c:01:e4:b9:1e:7f:e2:64:44:
                    11:fa:64:b7:7c:b2:9e:9a:60:19:62:a0:63:21:af:
                    3f:23:38:49:a4:9e:9f:03:86:b1:d4:75:c6:27:60:
                    12:5c:3c:5f:15:ed:2e:dc:bb:29:97:22:b1:92:2e:
                    2a:9a:3b:c6:c9:e9:48:d5:c3:7a:0b:a6:f9:da:b0:
                    2f:f6:bf:38:80:0d:6a:48:a1:cd:b4:c7:cd:ef:8b:
                    a7:6c:7b:54:9d:b4:b1:28:ea:ca:9d:55:fc:73:b3:
                    1e:07:88:55:6b:fe:08:84:4b:5f:2e:02:b4:32:6d:
                    bf:bc:1c:f0:6d:27:ac:73:aa:3e:45:fc:bb:a1:5d:
                    b2:fd:74:64:c4:99:8d:a6:c7:26:9c:62:f4:b2:af:
                    cc:9a:ae:c7:0f:2d:d9:6f:f0:57:c2:43:95:a6:a1:
                    fa:db:22:f1:47:54:9a:82:25:af:c5:15:12:17:62:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:47:D8:28:36:B9:96:C6:8B:9E:B4:B1:0D:DD:22:35:8A:65:A7:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a8d46fb-2c1b-3565-81fb-9141123edff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e0:b2:dc:1d:88:57:02:81:b5:16:c7:ef:25:51:3e:30:32:
         7d:9e:51:54:40:90:ac:87:6d:ac:99:a5:be:2e:e4:54:39:1f:
         c9:df:00:94:16:7c:29:8d:fd:4b:a7:e2:be:13:56:b5:4d:39:
         60:03:7c:b3:95:5f:60:5d:fc:3c:69:86:c8:5a:7a:8f:a9:25:
         6f:10:05:7a:de:46:5c:46:6f:8e:6a:c4:36:3c:8b:4f:d3:bc:
         71:40:6e:28:e3:5c:5a:38:e1:b7:21:6d:ad:08:80:21:aa:91:
         05:9a:7e:93:1b:29:94:a9:49:ea:3a:12:60:f9:01:79:97:bb:
         eb:2c:8a:fb:ab:6b:e2:fb:e8:1e:e0:8e:2e:93:19:50:b5:5e:
         ce:57:91:07:61:ed:32:85:77:8d:24:b9:24:4e:41:3b:88:71:
         ed:f1:0e:61:ea:56:54:d7:31:93:b1:f0:33:90:2f:24:d3:8d:
         1c:49:d1:98:8d:d2:96:ac:5b:e0:d3:b4:3e:bc:59:25:f5:49:
         75:34:74:60:d7:b6:95:14:ff:67:02:9b:d1:be:d4:30:11:75:
         2e:e2:0a:60:99:f7:e2:a3:e3:53:4b:c1:91:c0:f8:55:95:77:
         6b:63:fa:44:a0:dd:e3:9e:a6:ad:9f:ac:72:91:be:5c:86:a3:
         cd:22:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----