Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc918c67-c1d6-39db-aaef-d36df95fbb1d.roa
File:                     dc918c67-c1d6-39db-aaef-d36df95fbb1d.roa (raw, json)
Hash identifier:          oJds0A8f28227NfuGwpIemsKCXUdQgidkBByw+HF9BI=
Subject key identifier:   20:6E:4F:14:5C:21:2B:95:C3:51:1B:EE:81:2A:DE:14:3F:F6:2F:9E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840C2CD171FF7B298245091AF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc918c67-c1d6-39db-aaef-d36df95fbb1d.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sun 25 May 2025 04:00:00 +0000
asID:                     7922
IP address blocks:        23.230.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 Feb 2023 17:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c2:cd:17:1f:f7:b2:98:24:50:91:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : May 25 04:00:00 2025 GMT
        Subject: CN=5a77c211-68f1-4184-95e0-7c121a25e785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:a3:47:a6:29:77:bc:7a:78:5b:ac:ea:69:
                    7b:a3:22:9f:91:fe:86:61:7f:f5:76:56:ce:41:7b:
                    3f:f0:da:ce:56:9d:82:4f:f2:b8:de:18:4d:8b:23:
                    7b:ca:29:eb:5f:e6:60:5b:87:10:e4:24:43:83:60:
                    77:13:64:50:07:3e:a7:ae:3b:a8:f6:81:3e:21:44:
                    8d:e4:83:b7:3f:9c:8c:24:1a:30:5a:6c:b5:0f:fe:
                    dd:f1:96:30:86:8d:f3:f9:e5:d9:56:92:27:63:14:
                    c5:15:eb:f4:77:71:e1:35:fa:d8:ea:0e:e5:35:99:
                    b1:67:a5:98:15:1d:ef:97:a5:61:fd:1d:29:24:8d:
                    97:f0:2f:20:14:ee:c3:b3:07:cd:b3:f0:8d:1d:e3:
                    6f:37:58:da:f2:0b:e0:60:15:78:81:4c:11:79:3a:
                    65:60:52:af:cf:98:33:ac:26:6d:3d:c0:04:7d:ff:
                    04:b2:5f:f8:d5:64:f1:ff:3d:6f:bc:b6:7c:05:40:
                    b3:6d:ff:2f:a4:ad:25:9e:77:3e:dd:97:71:ad:7f:
                    6e:73:3a:85:cd:33:f2:a8:92:ba:37:08:36:b6:98:
                    f6:ac:7b:25:51:4d:0c:dc:12:c0:f8:c4:08:4f:d6:
                    ad:6d:cf:9b:50:5e:50:6c:47:b7:07:08:03:6e:0f:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6E:4F:14:5C:21:2B:95:C3:51:1B:EE:81:2A:DE:14:3F:F6:2F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc918c67-c1d6-39db-aaef-d36df95fbb1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:fd:bf:1b:22:fd:6b:7c:f8:63:ae:dd:ba:86:d1:30:01:
         c5:24:f2:8b:50:0d:d9:dc:55:1d:95:7f:a3:17:2d:3e:46:28:
         99:d9:ec:6e:a8:9f:ec:17:78:4b:8d:19:72:79:2f:69:b6:3e:
         f3:ca:17:41:9a:46:10:be:3d:50:5d:6a:99:88:40:95:2d:eb:
         b9:55:d7:90:e7:60:3a:07:b5:16:41:bd:7b:f9:07:5a:b2:4d:
         55:5e:67:2e:73:86:15:db:45:fa:7c:fe:4c:ce:46:0c:49:0c:
         05:33:49:8b:b6:19:0f:21:77:05:8b:c3:6d:be:97:6b:35:63:
         a4:17:af:a8:00:26:79:6e:44:fe:47:23:e5:7a:26:76:e7:41:
         88:45:a5:56:0d:34:84:88:76:f3:59:1f:14:5b:0a:67:18:a1:
         68:5a:5c:ec:2d:de:91:56:bb:2e:94:6d:02:3a:1e:4d:b8:25:
         da:fe:09:38:52:f1:71:a7:9b:56:41:9e:22:04:b8:4f:da:c8:
         68:d4:77:71:0c:bb:b8:01:86:1b:96:39:9c:eb:9d:9a:c4:ca:
         2d:4e:78:03:22:56:46:56:57:9f:f3:9b:38:24:b2:c9:0b:e9:
         16:c4:5d:6a:62:c8:81:3c:b7:f6:6e:9d:ca:9d:a6:66:27:7d:
         0c:d5:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----