Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5df25af-3e42-3535-91be-25f44030fde5.roa
File:                     c5df25af-3e42-3535-91be-25f44030fde5.roa (raw, json)
Hash identifier:          OafvADLp/1ip1JfQbLZQQSmU4OXVz8GzUHwm1sb+ADI=
Subject key identifier:   DF:07:D1:B7:2B:E0:2D:5E:3E:1A:B5:51:8A:D7:83:12:B9:91:60:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858422FEAC81613FC04AE81895480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5df25af-3e42-3535-91be-25f44030fde5.roa
Signing time:             Sun 11 Jun 2023 19:21:19 +0000
ROA not before:           Sun 11 Jun 2023 19:21:19 +0000
ROA not after:            Sat 09 Sep 2023 19:21:19 +0000
asID:                     15731
IP address blocks:        23.230.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2f:ea:c8:16:13:fc:04:ae:81:89:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 11 19:21:19 2023 GMT
            Not After : Sep  9 19:21:19 2023 GMT
        Subject: CN=c667a6d3-484d-4eb2-883e-4f7c1ed0431d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e8:4c:8e:c9:1a:0c:bd:5c:01:c0:21:2b:6b:
                    ad:22:f0:26:a5:20:6c:eb:c4:7b:a5:1c:35:af:82:
                    57:02:b9:a4:cf:c4:e3:a8:c0:ac:a4:c4:ac:ba:d9:
                    f9:d0:db:85:37:11:c2:e6:67:c7:8e:e6:78:2c:c5:
                    8e:e9:9d:30:63:cf:c4:96:5a:9a:80:ab:23:56:6d:
                    90:6e:bd:c1:6c:0f:89:86:da:dc:d3:ef:1f:8d:fc:
                    6d:31:25:f2:46:8e:2c:0b:53:ce:69:94:b6:f8:16:
                    8d:93:15:0e:64:f7:5c:11:23:6d:06:c2:17:b8:d2:
                    ef:e2:e1:a0:8f:51:55:c0:bd:1e:85:0a:8f:3a:30:
                    bc:c9:80:f4:2a:87:91:24:64:09:e1:f5:ef:a4:61:
                    dd:40:c8:1e:c5:e0:72:22:7a:52:f3:3a:90:c8:ab:
                    3b:e6:95:2f:7b:0b:fd:5d:36:a9:7e:b3:31:28:18:
                    3a:cd:e3:3d:99:3a:e4:b5:00:22:86:a0:1d:0d:7c:
                    8a:4a:aa:b5:f2:f3:70:78:55:7d:55:1b:8d:14:b6:
                    3a:59:b6:66:3c:f6:ae:0a:cf:0b:88:eb:c0:84:14:
                    50:b6:62:fb:27:22:5b:dd:40:ea:c7:7c:be:12:5d:
                    6d:ed:08:47:25:b6:64:c3:a5:e9:e9:1a:32:fc:d6:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:D1:B7:2B:E0:2D:5E:3E:1A:B5:51:8A:D7:83:12:B9:91:60:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5df25af-3e42-3535-91be-25f44030fde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:74:00:88:09:c4:3e:32:8f:bc:d4:59:8d:11:76:c3:5a:48:
         d4:9a:fd:7a:f2:8e:f8:15:30:cc:7f:2b:1c:4e:96:49:6c:50:
         97:db:d6:60:fe:d8:91:e3:4b:93:a5:02:46:67:fa:92:4b:93:
         56:b9:86:6c:5d:76:9e:0a:b7:56:a2:e1:64:bf:84:17:74:8a:
         73:c0:b2:06:f0:6a:2c:38:78:1a:65:a2:98:6b:97:f2:dd:4b:
         ca:16:8c:37:15:a9:48:fe:db:e1:6a:ab:8d:00:22:f1:98:0b:
         c2:04:38:e9:b4:ab:ed:bb:1e:5e:17:ea:f9:91:2b:f0:3d:4d:
         07:a9:fd:f2:b8:7d:cb:49:5b:1a:b3:b2:5a:50:74:b4:0a:73:
         2d:8e:16:f8:47:95:05:14:a6:eb:f6:3a:40:1c:76:3f:a7:5b:
         17:1d:ed:3f:71:fb:bb:cb:98:88:44:bd:c4:b2:06:ce:4c:95:
         eb:18:10:c3:7b:d7:e9:f8:1a:09:19:3f:c8:b0:02:22:98:29:
         92:a1:aa:32:c1:4a:69:49:74:64:de:e1:ea:66:60:35:b3:62:
         20:b8:37:f0:51:f3:60:bb:24:49:68:35:19:c8:65:02:3a:ba:
         66:0a:70:d6:db:18:2b:8a:66:97:dc:0d:dc:97:35:09:27:54:
         00:a7:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----