Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/83c17c67-7b44-32ad-a410-3efc5d19fa2f.roa
File:                     83c17c67-7b44-32ad-a410-3efc5d19fa2f.roa (raw, json)
Hash identifier:          HF1tAOPYDAt/zcNXyazylJ0lFqguCApInfX1KRFrH5A=
Subject key identifier:   C5:06:10:A8:5A:6A:E7:AB:B5:56:FB:68:D3:E3:B9:27:FF:51:2E:CE
Certificate issuer:       /CN=4980f97d-060c-4860-8029-ca0d97082203
Certificate serial:       010D0C9F43285845E45E6EC8D0D75221CA518D80
Authority key identifier: 1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/83c17c67-7b44-32ad-a410-3efc5d19fa2f.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     204844
IP address blocks:        23.146.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Jul 2024 19:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:6e:c8:d0:d7:52:21:ca:51:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4980f97d-060c-4860-8029-ca0d97082203
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=cc93b5c3-97ae-4651-8484-135302bef618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:b3:1e:8a:99:1e:fd:8f:f5:73:db:3f:cd:
                    7c:a7:38:1b:33:21:f1:9b:86:fc:c9:e3:18:ee:4a:
                    8b:c2:59:14:2d:dc:72:e4:25:1b:0d:08:2f:71:65:
                    be:b8:32:15:50:7e:ef:b6:35:37:3a:ed:db:f4:fa:
                    9d:e7:46:34:7c:1c:da:42:8c:83:31:b4:cf:27:18:
                    0a:4b:e8:16:2d:e4:22:ed:fb:ff:d3:b1:70:19:3f:
                    f9:ac:2e:20:2a:68:0f:e5:58:a0:52:18:11:e4:4e:
                    77:b5:d1:03:fd:e2:d3:b9:96:e1:cb:8e:32:6b:98:
                    50:cc:3f:67:d1:66:eb:2e:e6:d9:2a:85:ad:d6:a3:
                    4a:d5:b0:c9:45:75:fe:0d:1b:87:3a:3c:31:3f:46:
                    7f:dc:c9:68:ed:04:f2:22:08:72:47:fa:8e:dd:26:
                    14:b1:a5:c6:5b:79:93:a5:df:49:84:d8:cc:8b:3d:
                    33:23:e0:74:6f:52:60:4c:25:2b:fe:71:f0:18:e7:
                    e6:d0:3e:1f:8a:65:b2:fb:e9:90:26:41:f3:7f:1a:
                    0f:fa:3f:69:3b:07:e5:e0:59:c8:8d:7b:4d:ac:9f:
                    6d:8b:f2:e6:e9:af:e6:e8:84:c9:d9:94:75:82:fb:
                    60:f6:45:37:b6:4b:70:95:30:a8:1e:59:92:52:92:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:10:A8:5A:6A:E7:AB:B5:56:FB:68:D3:E3:B9:27:FF:51:2E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/83c17c67-7b44-32ad-a410-3efc5d19fa2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl

            X509v3 Authority Key Identifier:
                keyid:1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2d:56:04:3e:d1:ec:05:eb:42:f9:0a:8f:93:8f:c9:2f:80:
         16:59:42:5d:be:82:e2:46:d4:22:f9:56:bc:f7:72:2d:f9:e4:
         4f:af:44:05:88:a1:ee:13:37:2f:33:db:8b:95:cb:c2:da:eb:
         84:7b:bf:61:f6:03:09:37:86:3c:20:03:31:30:60:c8:4d:fe:
         1b:4b:90:58:c8:8e:4f:8d:22:75:08:f6:72:d0:15:e7:dc:a1:
         1c:5d:1e:93:ca:df:b4:7e:02:d0:fd:39:ba:73:86:20:5e:7f:
         c4:20:65:31:96:80:59:f2:f5:57:fd:2d:20:a8:41:d2:a0:77:
         1a:dd:04:c1:8c:f3:d7:44:85:e9:01:16:34:fb:3e:3c:a1:af:
         8c:6b:5d:09:cd:70:50:7c:aa:a4:ed:dd:45:5d:8d:40:75:bc:
         0b:b5:f8:fb:fa:1a:47:d9:25:e8:42:40:7f:1f:18:fc:14:98:
         39:50:ff:3e:dd:c5:8c:fe:6d:bc:52:45:50:5b:0c:ee:7f:d9:
         0e:68:a3:b9:cd:18:bb:57:63:69:2b:af:2c:d4:09:4c:b5:a6:
         f5:d8:41:b1:a8:c6:50:16:0d:6e:a3:79:04:a3:4c:58:dd:2f:
         58:04:56:80:03:ac:52:ed:be:ab:90:3a:a0:9c:54:50:46:af:
         fc:09:ea:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----