Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e42fdf91-ad7b-3947-bdad-7c97db796d96.roa
File:                     e42fdf91-ad7b-3947-bdad-7c97db796d96.roa (raw, json)
Hash identifier:          Dkzp22yL+fA7RsleBRYOWx7UOBmArWB3TfsagtEwzdg=
Subject key identifier:   BC:67:F3:70:95:03:7C:91:3C:1F:74:06:64:C3:3B:6E:47:FE:77:AB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AD3A15226CBC2876892EC780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e42fdf91-ad7b-3947-bdad-7c97db796d96.roa
Signing time:             Fri 26 Apr 2024 18:57:57 +0000
ROA not before:           Fri 26 Apr 2024 18:57:57 +0000
ROA not after:            Thu 25 Jul 2024 18:57:57 +0000
asID:                     209854
IP address blocks:        23.230.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:3a:15:22:6c:bc:28:76:89:2e:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 26 18:57:57 2024 GMT
            Not After : Jul 25 18:57:57 2024 GMT
        Subject: CN=391429d3-a2b5-41dc-a64b-8cb3a929e3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:aa:69:7a:ce:29:33:d5:ce:de:a7:e6:e5:58:
                    2f:37:c9:89:6b:80:80:18:bf:0d:82:6a:b2:04:d8:
                    8d:92:4f:4d:11:b8:b0:ed:74:26:78:ae:79:78:f1:
                    f3:6d:e0:c3:e1:da:92:f7:02:f0:85:96:06:a1:fa:
                    b1:48:1e:50:94:ad:96:34:3b:af:6b:07:f4:cb:ef:
                    ab:48:cf:cf:9b:1a:2f:08:1c:e7:a8:51:4c:42:81:
                    ef:f4:f3:1c:ef:b3:f7:69:d2:52:ae:3f:cd:22:bb:
                    d1:91:32:39:d2:45:c7:19:87:f6:eb:8d:4a:fd:97:
                    34:73:4c:b8:59:2d:c1:d6:89:ec:4d:ed:2d:78:ad:
                    f8:02:57:ab:3f:fe:b5:73:4f:29:ed:56:79:73:ca:
                    7c:24:7a:69:58:b2:98:ef:1e:97:dc:fc:1b:77:a2:
                    14:f0:6f:5d:93:03:ba:8d:77:ce:f7:2e:c6:a4:b4:
                    2e:79:fe:78:a9:6f:a5:25:cc:f2:0c:b1:cd:ba:2a:
                    9f:79:5d:84:7a:d0:7f:59:ed:e4:6b:bb:87:0c:65:
                    14:07:d1:f2:98:30:d2:3b:3e:a6:bd:c3:ec:b7:b5:
                    d6:9e:a7:a7:0a:ff:5a:07:93:75:84:9a:1e:f4:26:
                    3b:8c:4d:1f:5f:a2:11:bc:de:b7:a3:b9:78:a4:92:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:F3:70:95:03:7C:91:3C:1F:74:06:64:C3:3B:6E:47:FE:77:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e42fdf91-ad7b-3947-bdad-7c97db796d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:a4:69:29:1e:cc:da:12:de:5e:39:5e:1b:6f:81:a3:09:
         3c:49:dd:ad:11:cf:a2:c5:8f:7d:9c:8f:4b:21:d8:b3:59:f3:
         83:ec:1c:aa:11:38:8f:83:66:b9:a9:ce:02:a8:c3:cb:83:48:
         76:07:29:96:3d:30:92:89:dc:1c:43:a3:f5:38:8b:2e:12:f4:
         84:46:15:b5:50:4a:3a:e1:65:69:f6:b7:7d:79:25:aa:f2:d5:
         09:64:45:08:0c:21:60:61:13:49:c8:1b:a0:1d:a5:42:a2:76:
         8f:e2:03:41:1e:f9:f2:be:50:11:a3:6f:23:74:78:e0:4a:a4:
         b2:9a:c0:4c:84:0c:6f:01:55:0c:d9:c3:28:f3:03:1b:61:6a:
         93:64:e5:d6:1a:c6:a3:ef:4a:e8:56:3e:d1:7c:9d:8d:17:86:
         72:e4:ff:3c:ee:a1:14:37:a8:5d:e7:cc:1f:cc:a1:15:07:f8:
         ec:53:31:a9:8e:b9:2f:31:a5:70:b0:20:db:a3:17:a5:fb:d1:
         51:b6:74:a5:6c:77:11:02:f5:5b:d8:25:33:79:84:53:49:02:
         92:2c:a6:5e:c2:41:33:1b:77:42:25:7e:2c:e9:87:b7:4e:93:
         6d:c9:55:f8:fa:75:6a:f7:c1:6a:c3:7a:28:87:21:10:2d:fd:
         81:eb:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----