Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a45e2717-4a22-3746-af5e-762468731bc3.roa
File:                     a45e2717-4a22-3746-af5e-762468731bc3.roa (raw, json)
Hash identifier:          jvo/egGX8rApWmFFdqAlBYJ554Zd9MWQ1dkHfD7AhfA=
Subject key identifier:   9D:65:3D:86:59:13:D8:8E:95:11:5F:17:DD:A5:D6:6D:99:7A:D5:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843EA32DB64692CDE6B8EB8D300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a45e2717-4a22-3746-af5e-762468731bc3.roa
Signing time:             Fri 17 Nov 2023 05:33:49 +0000
ROA not before:           Fri 17 Nov 2023 05:33:49 +0000
ROA not after:            Thu 15 Feb 2024 05:33:49 +0000
asID:                     64267
IP address blocks:        23.230.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ea:32:db:64:69:2c:de:6b:8e:b8:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 17 05:33:49 2023 GMT
            Not After : Feb 15 05:33:49 2024 GMT
        Subject: CN=66cf9035-b798-435c-9f80-3a9301eed674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:58:98:17:8e:1d:b3:36:12:8c:26:04:a4:
                    6d:9e:b7:bf:c5:5f:68:1e:7e:74:31:a2:08:53:70:
                    60:db:03:1d:f5:e2:75:b9:22:d5:29:a6:56:e9:ef:
                    d2:7d:d0:08:7e:45:37:c9:51:d6:0c:da:85:24:52:
                    8e:09:56:28:11:bc:09:3d:1f:c3:74:f6:ea:fa:d0:
                    f1:ee:4c:64:5d:5a:fd:27:5b:ab:70:f6:9b:c9:f8:
                    e1:c1:40:6c:7d:ae:f2:c1:dc:47:9f:10:3a:4e:83:
                    47:2b:de:fe:43:3d:90:2b:5c:73:f9:6e:a7:10:42:
                    a9:29:eb:90:3c:b7:46:dd:8b:36:b1:2a:56:88:af:
                    de:b5:a4:ea:a7:a4:ab:a9:db:ba:16:00:0a:c0:1f:
                    78:78:5a:89:fe:e6:fc:7a:4c:d9:99:36:a9:85:28:
                    b1:1f:5f:5c:3e:83:a9:4b:52:0d:1d:86:53:cd:b5:
                    9a:45:7f:64:7e:64:76:4b:30:c6:36:56:73:99:b7:
                    a8:5d:31:37:fd:9c:3b:e7:4a:22:4d:e2:6f:e4:ef:
                    fe:60:25:66:52:85:4b:b1:b3:12:db:10:92:40:3a:
                    38:20:4f:d5:ec:07:e2:88:1a:f4:a2:ce:4c:f3:f9:
                    c3:98:16:68:01:96:ac:9e:29:e3:c8:d7:ec:2f:54:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:3D:86:59:13:D8:8E:95:11:5F:17:DD:A5:D6:6D:99:7A:D5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a45e2717-4a22-3746-af5e-762468731bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:68:33:0b:7c:e7:27:8f:ff:c7:fd:a9:fd:92:ab:19:e7:37:
         05:aa:ba:96:1b:fe:32:26:94:3e:b3:34:e5:e8:aa:26:a8:3f:
         30:3c:83:f8:45:17:2d:49:48:64:be:68:26:2b:02:a2:41:e5:
         ec:ac:92:9e:ec:cd:b5:40:98:f7:f1:c1:01:fa:be:8d:86:c4:
         3c:6b:c3:e8:a2:bb:fe:08:87:14:0f:f8:fd:33:c2:dd:19:51:
         38:0f:48:99:3d:8f:d2:12:16:bc:e7:1a:5e:d5:48:03:6a:ba:
         e2:1b:ef:cb:22:4a:a7:20:af:f5:5a:bb:d8:9e:a2:ea:bd:40:
         03:fc:cb:41:c2:91:7a:5c:99:4c:15:4c:39:21:51:c5:2a:9d:
         0e:1b:ba:74:af:6d:14:3b:0a:c2:7a:74:31:8d:fe:d8:f3:a4:
         c7:58:e0:57:38:16:23:99:ab:44:94:f2:5d:52:58:b6:c3:57:
         76:3b:ec:e9:18:b3:30:d5:8a:49:f0:9a:b7:06:d4:ac:22:59:
         dc:b1:70:10:30:f4:35:bf:ff:ee:45:ee:d7:13:01:6d:bb:ac:
         cd:db:56:7f:7b:a2:d8:3c:e3:dd:d7:7f:46:f9:0a:21:d0:a1:
         0a:a2:4e:36:6e:04:97:7b:95:2e:bd:9a:8b:0b:54:53:e7:e9:
         78:2a:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----