Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e2032ea2-2445-3972-b4e7-de7c225f659c.roa
File:                     e2032ea2-2445-3972-b4e7-de7c225f659c.roa (raw, json)
Hash identifier:          kxIFaPg+Orfb1hz3ic5vkH6VoM4RR2m02gRYoKHB6/I=
Subject key identifier:   C1:11:1C:77:09:42:91:97:0F:0F:8E:84:D3:AA:13:86:A4:6B:63:83
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843D63E26CBA7AEA67B7920FF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e2032ea2-2445-3972-b4e7-de7c225f659c.roa
Signing time:             Fri 10 Nov 2023 02:00:15 +0000
ROA not before:           Fri 10 Nov 2023 02:00:15 +0000
ROA not after:            Thu 08 Feb 2024 02:00:15 +0000
asID:                     26548
IP address blocks:        23.230.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:3e:26:cb:a7:ae:a6:7b:79:20:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 10 02:00:15 2023 GMT
            Not After : Feb  8 02:00:15 2024 GMT
        Subject: CN=e71d51c9-c8ba-4070-b1ac-bb2a84a3dd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:2e:bc:5a:00:12:ec:11:5f:1e:9d:47:d2:
                    3c:80:df:7e:af:92:7f:63:10:ce:eb:2d:71:de:d5:
                    7c:58:25:3f:51:b5:4f:a6:98:0f:54:6f:ca:47:69:
                    0a:97:e2:b7:0d:ea:6b:bc:76:49:fb:c3:28:ff:dd:
                    88:ef:1a:99:14:59:54:8b:a2:bb:81:59:51:d0:65:
                    b8:2b:e6:79:3a:b2:a2:77:14:42:e4:a5:11:00:e3:
                    9a:b5:47:83:01:28:3a:c9:1b:74:4f:df:24:d2:10:
                    83:0d:46:8c:c5:ad:e4:b9:6a:54:ae:ae:3a:ec:6d:
                    56:f1:56:4c:09:18:e5:34:91:4a:8c:94:10:63:6c:
                    7b:aa:8a:e2:f5:5b:aa:f8:f7:b5:d7:48:3c:e2:bf:
                    89:2c:df:88:ad:40:36:04:08:c5:50:ad:dc:05:24:
                    48:48:78:60:72:b2:6f:b1:fd:bb:b2:0f:c9:9d:0b:
                    f3:60:63:60:07:07:37:e4:a3:4d:6d:82:37:87:52:
                    e4:e8:ae:a7:31:7a:0c:4b:d0:a4:fd:a1:6b:0b:60:
                    6e:cd:31:14:c1:8b:2a:ed:4c:cf:24:49:cb:47:40:
                    e0:db:fd:68:bf:56:a5:68:ba:c1:36:c1:83:f5:e2:
                    c3:09:41:39:5f:64:6b:ec:c4:ff:7d:f8:36:b1:47:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:1C:77:09:42:91:97:0F:0F:8E:84:D3:AA:13:86:A4:6B:63:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e2032ea2-2445-3972-b4e7-de7c225f659c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:41:da:93:83:47:49:93:0e:c5:bc:2c:52:21:e2:f9:2c:
         6d:e7:ab:5a:5e:30:a0:17:c4:48:34:94:09:20:2e:7c:94:95:
         35:49:07:ed:28:a9:bd:af:0c:f7:86:ac:de:45:0f:75:bd:f2:
         dc:2d:78:a2:18:95:74:05:63:a0:fb:4b:aa:43:1a:6b:4e:a4:
         21:4f:de:16:f7:83:1b:09:4b:fc:90:2e:51:42:d2:cc:d7:bc:
         d6:87:e5:90:3b:4d:ce:b2:17:85:d9:fa:28:90:b2:08:a9:f2:
         36:ca:72:d8:0f:ce:1c:ae:0f:79:cf:b0:13:f5:6a:ab:e0:6b:
         53:2c:40:e0:61:48:02:52:80:6b:bf:fa:0c:c4:cf:87:f5:b5:
         5c:8a:21:3b:5c:78:1e:b1:1d:03:57:91:8d:44:ea:34:e6:ca:
         4a:30:0e:ae:9d:78:58:82:2e:c8:45:fc:47:1c:7c:5b:0e:09:
         24:aa:f6:e0:8d:f2:bf:8a:42:01:94:8b:79:07:d6:d0:b3:8c:
         bd:11:4a:ec:b4:91:8e:fd:3b:1c:8f:50:24:70:82:ff:2f:5a:
         b3:41:2b:e7:1e:f7:54:12:af:30:14:ac:13:60:2c:7e:75:03:
         00:91:d0:90:f1:86:1f:2c:db:e6:8e:2c:ca:81:50:8f:50:32:
         9b:62:5b:4a
-----BEGIN CERTIFICATE-----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