Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a996991-34c0-3b91-ad89-85e5e7cef55f.roa
File:                     6a996991-34c0-3b91-ad89-85e5e7cef55f.roa (raw, json)
Hash identifier:          yHFwtnyWBlBVoSHYgyL9Srl0gT55cMf8idF2xhSMMuI=
Subject key identifier:   DA:30:4C:11:57:88:1B:A2:43:61:3A:84:19:A9:CC:33:4C:51:B5:09
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858442303FDD9A425DE88996DD200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a996991-34c0-3b91-ad89-85e5e7cef55f.roa
Signing time:             Thu 07 Dec 2023 14:00:20 +0000
ROA not before:           Thu 07 Dec 2023 14:00:20 +0000
ROA not after:            Wed 06 Mar 2024 14:00:20 +0000
asID:                     54252
IP address blocks:        192.177.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:23:03:fd:d9:a4:25:de:88:99:6d:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec  7 14:00:20 2023 GMT
            Not After : Mar  6 14:00:20 2024 GMT
        Subject: CN=fa9fe07f-ce2c-43d9-9a06-c0495be0c284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:7b:a3:09:58:5f:08:87:9c:46:e2:ca:87:
                    88:a4:b1:e4:76:83:8f:44:1f:f3:40:25:c2:12:a1:
                    45:e4:6e:a4:cb:c3:0b:da:08:c2:85:cb:71:61:f2:
                    5a:5f:c8:16:6a:9a:b6:bf:fc:73:0c:fb:c7:f1:d0:
                    e7:84:13:b1:67:f9:f4:44:95:67:57:7a:0e:68:46:
                    bf:12:e4:e0:61:11:a3:a9:d3:1f:e9:6e:c6:73:e5:
                    1b:d1:df:b2:62:44:96:65:b9:19:9a:64:94:d9:24:
                    34:96:41:02:a8:10:66:d2:f0:7f:18:37:e1:77:f3:
                    ec:6a:13:e6:e4:4e:23:76:df:d9:69:ba:49:ec:17:
                    e4:10:48:5e:5a:9f:03:06:9f:bf:21:2e:2a:ea:4a:
                    06:2b:28:fa:2f:06:1a:a2:eb:4a:5b:0d:b7:3a:43:
                    b5:75:9e:af:da:e5:e2:a4:5a:18:c9:08:71:e9:8e:
                    a5:1a:07:80:e0:42:69:04:27:33:f2:78:22:94:09:
                    ba:8e:b3:ed:13:b1:bb:e9:12:e5:b4:57:0d:c4:b5:
                    30:69:e5:45:03:c7:20:2c:92:44:65:30:f6:27:95:
                    c1:ab:40:8a:82:1f:e1:77:1e:6a:65:63:aa:42:1c:
                    51:45:bd:60:33:b6:48:de:aa:60:96:56:a5:44:dd:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:30:4C:11:57:88:1B:A2:43:61:3A:84:19:A9:CC:33:4C:51:B5:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a996991-34c0-3b91-ad89-85e5e7cef55f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:82:7d:f8:7d:5b:70:c6:fb:97:a6:ed:60:69:17:06:1d:43:
         eb:ee:20:3a:e8:98:05:4b:91:e6:52:88:f5:3d:c7:36:8f:17:
         41:45:2a:6d:4f:07:63:de:cf:29:53:f0:c7:84:8e:f5:36:39:
         25:b7:b0:f0:a2:33:7b:41:1f:33:3c:08:9d:62:02:54:93:d0:
         d1:2f:1f:bd:5f:dc:c2:ff:c1:14:bf:42:74:61:12:2d:56:68:
         af:41:68:96:7d:9d:46:32:ea:29:1a:5a:93:b1:bb:d5:1c:cf:
         37:c6:be:e0:83:73:34:3f:7b:f9:e3:6b:e6:fe:c5:31:af:45:
         88:67:d0:dc:24:22:84:b8:fe:6f:8c:b7:80:08:32:20:59:5e:
         13:87:91:ee:8d:fa:2e:c9:3f:09:2e:8b:03:00:42:ec:10:b7:
         f6:d2:d3:4e:a8:8e:c5:d3:e9:2e:56:3e:67:7b:8e:48:27:f6:
         f7:8a:06:8c:d6:36:f5:58:bd:f1:14:0b:36:88:26:02:39:23:
         55:cc:4b:44:10:13:31:ae:b8:4b:d7:b0:0d:a7:76:7d:f4:c1:
         af:77:9b:18:b5:35:be:1d:51:77:8d:f9:b2:84:4d:b6:1a:29:
         82:0f:7c:94:c9:63:3d:ce:70:db:ba:3c:df:5b:60:0f:f4:a0:
         9c:0e:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----