Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d5acbe47-1092-31ab-80dc-782a90762dc2.roa
File:                     d5acbe47-1092-31ab-80dc-782a90762dc2.roa (raw, json)
Hash identifier:          0pJOkyNn3XclXS5TqZ51jgvn0Hh7XQTmH9jHhOLUfWw=
Subject key identifier:   0A:27:EB:A0:E4:58:91:3F:66:6B:2E:06:9A:74:C3:A5:92:0B:F2:AA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858418854C0958D5880D353842300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d5acbe47-1092-31ab-80dc-782a90762dc2.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Tue 15 Jul 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        23.230.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 May 2023 15:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:88:54:c0:95:8d:58:80:d3:53:84:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 15 04:00:00 2025 GMT
        Subject: CN=6ac61626-3b2c-40db-8e87-0fda3acbba87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:15:0a:d8:8b:aa:2b:8a:02:36:58:73:ba:
                    6c:32:58:53:86:80:7e:62:76:1d:20:68:b8:b0:23:
                    bd:35:c8:9d:69:a7:bd:16:e2:54:90:89:a4:fb:0c:
                    bc:c9:0d:8c:b9:e1:60:71:4e:f8:e5:64:ad:4d:e2:
                    5d:eb:67:d7:e9:cd:bd:13:14:9b:43:3b:4f:cf:85:
                    a8:97:ce:54:24:fc:3a:d8:b5:f1:48:3d:a8:4e:11:
                    79:88:27:96:3f:ed:f1:68:ba:b5:cc:e9:76:94:53:
                    a2:cc:60:3c:eb:ad:0a:6a:a9:7e:11:41:fc:88:2a:
                    0b:03:1f:86:4d:d2:01:ee:ec:aa:16:9e:c4:04:01:
                    d9:35:b3:e9:df:8b:7e:49:8e:ef:9e:e6:38:3b:fd:
                    75:a0:51:2d:86:73:da:1a:dc:ce:27:d4:78:e7:40:
                    15:b0:79:e4:0e:14:53:f8:e7:f5:d7:2f:73:f2:50:
                    18:a1:2c:57:88:1c:f0:8b:69:1f:b7:0c:6c:04:e6:
                    c8:44:32:88:58:c7:4c:82:20:31:ed:58:dc:f8:13:
                    89:91:a5:0e:30:f2:bd:c5:7b:dc:81:f7:91:58:55:
                    07:c8:98:86:17:0a:e9:f3:db:9f:00:3a:bc:8d:e3:
                    d5:6e:27:ff:7a:8a:3e:67:97:a7:b1:b4:ef:ed:56:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:27:EB:A0:E4:58:91:3F:66:6B:2E:06:9A:74:C3:A5:92:0B:F2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d5acbe47-1092-31ab-80dc-782a90762dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:2f:ba:07:44:5e:ec:bd:a2:8b:0c:73:94:ad:77:c3:4a:
         dd:50:0b:3f:4a:94:00:d7:e7:9e:a3:b1:cd:e1:f8:02:84:f4:
         7e:6a:14:05:1c:8e:d1:70:4e:d2:a2:07:d0:bf:cd:d2:dc:f9:
         56:5b:a0:ba:b3:08:5a:b5:f1:32:2b:3b:0f:54:7d:da:ea:73:
         70:6f:fa:01:d7:0e:59:39:a3:fa:71:4c:b5:76:c9:98:e7:c2:
         65:43:d8:a6:8b:36:23:2a:2d:be:77:ed:40:ef:a5:47:5b:fe:
         f6:34:43:1e:d8:66:92:0c:48:99:c3:09:b7:10:70:a6:29:f4:
         e2:cc:fb:65:5b:f9:53:aa:99:2b:4a:7b:bf:a2:d2:fb:f7:db:
         0c:fc:84:e0:f0:6f:61:5d:7a:d0:59:27:fb:8f:09:42:50:01:
         01:33:55:a5:1d:7e:2d:25:d2:43:28:3a:2a:ee:ac:75:69:d2:
         c0:49:b3:9b:e3:3a:bb:48:b4:d2:21:96:47:c4:4e:a4:41:9e:
         fe:3c:eb:77:30:ea:1b:bf:da:d6:f6:7d:e3:2f:a8:79:78:9c:
         23:72:71:04:b0:41:a7:7b:79:8f:c7:b3:0a:7b:01:47:3c:88:
         56:52:2f:29:9c:bb:2d:c3:a5:2b:71:4c:a7:3c:8f:1a:c4:1f:
         7a:e9:6e:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGIVMCVjViA01OEIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDcxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NmFjNjE2MjYtM2IyYy00MGRiLThlODctMGZkYTNhY2JiYTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGwVCtiLqiuKAjZYc7psMlhThoB+YnYdIGi4
sCO9Ncidaae9FuJUkImk+wy8yQ2MueFgcU745WStTeJd62fX6c29ExSbQztPz4Wo
l85UJPw62LXxSD2oThF5iCeWP+3xaLq1zOl2lFOizGA8660Kaql+EUH8iCoLAx+G
TdIB7uyqFp7EBAHZNbPp34t+SY7vnuY4O/11oFEthnPaGtzOJ9R450AVsHnkDhRT
+Of11y9z8lAYoSxXiBzwi2kftwxsBObIRDKIWMdMgiAx7Vjc+BOJkaUOMPK9xXvc
gfeRWFUHyJiGFwrp89ufADq8jePVbif/eoo+Z5ensbTv7VYwXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAon66DkWJE/ZmsuBpp0w6WSC/KqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDVhY2JlNDctMTA5Mi0z
MWFiLTgwZGMtNzgyYTkwNzYyZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+b7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAi7L7oHRF7svaKLDHOUrXfDSt1QCz9KlADX556jsc3h+AKE9H5qFAUc
jtFwTtKiB9C/zdLc+VZboLqzCFq18TIrOw9Ufdrqc3Bv+gHXDlk5o/pxTLV2yZjn
wmVD2KaLNiMqLb537UDvpUdb/vY0Qx7YZpIMSJnDCbcQcKYp9OLM+2Vb+VOqmStK
e7+i0vv32wz8hODwb2FdetBZJ/uPCUJQAQEzVaUdfi0l0kMoOirurHVp0sBJs5vj
OrtItNIhlkfETqRBnv4863cw6hu/2tb2feMvqHl4nCNycQSwQad7eY/Hswp7AUc8
iFZSLymcuy3DpStxTKc8jxrEH3rpbu8=
-----END CERTIFICATE-----