Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/237e84b1-2acf-3959-bd6e-48f2b4f9b810.roa
File:                     237e84b1-2acf-3959-bd6e-48f2b4f9b810.roa (raw, json)
Hash identifier:          VhybIKV3zfBylS52Od3t4R8iAiJv9wIAIyEWto2kzIk=
Subject key identifier:   3F:EA:10:84:A3:EF:0C:85:FD:40:F9:F2:76:DD:DB:6F:0E:E9:7E:C6
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F43285841E46E11A28E3FA2CA1F1D1F80
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/237e84b1-2acf-3959-bd6e-48f2b4f9b810.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 22 Jul 2023 12:02:48 +0000
asID:                     149020
IP address blocks:        23.131.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:11:a2:8e:3f:a2:ca:1f:1d:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 22 12:02:48 2023 GMT
        Subject: CN=5f72e4a9-c59d-46ce-9c84-09253b0cadcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:fd:0b:a2:6a:f1:7b:38:83:15:2a:6c:bb:
                    66:0f:91:7e:44:d7:c2:a7:e1:89:d9:78:8e:0a:83:
                    e5:65:40:9f:cf:46:cc:7e:bb:fa:e8:4c:90:b2:2d:
                    9f:96:4c:ad:11:64:58:ae:d5:33:82:6e:53:3a:77:
                    90:5e:d8:0f:11:6c:95:33:9f:f8:85:94:8f:78:af:
                    9b:b1:d7:6b:ab:47:cb:89:b3:76:d1:6a:cc:10:b4:
                    9a:26:a0:f7:31:ec:9c:6c:d0:a5:98:19:fa:7c:e5:
                    40:ec:c2:9e:31:02:75:4d:f1:d5:43:6a:09:04:e4:
                    29:12:0b:59:1b:1b:25:19:d0:b5:fd:71:75:ad:66:
                    93:76:7c:e1:ba:13:ba:a0:f4:aa:61:93:55:a4:90:
                    d8:9f:da:b7:63:83:dc:5e:17:6b:22:ba:55:72:a9:
                    70:d7:53:c2:93:95:1f:47:9b:0a:4b:43:a1:75:92:
                    b3:ea:6f:b4:97:18:e6:c3:e2:cb:af:3d:f9:e4:69:
                    45:08:2b:9d:39:8d:c7:4a:45:da:08:b7:8b:b2:ce:
                    c1:43:b6:4c:68:9b:4f:13:74:33:f9:94:3a:69:d6:
                    fa:82:5c:cd:9a:6c:43:c3:f2:59:ed:46:ac:78:82:
                    99:1c:3d:d0:60:06:3a:f2:73:f6:a2:20:b9:20:28:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EA:10:84:A3:EF:0C:85:FD:40:F9:F2:76:DD:DB:6F:0E:E9:7E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/237e84b1-2acf-3959-bd6e-48f2b4f9b810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ec:6b:95:5e:cd:88:c2:d3:2f:5d:2f:13:00:e6:7f:83:69:
         c8:e3:80:28:13:a1:78:57:54:48:4b:39:d5:e5:c8:4a:de:a5:
         cf:ae:45:76:48:44:a4:56:e1:22:b6:a1:a1:4b:ae:d6:7c:ce:
         8b:e0:fb:4e:45:e4:0b:0a:6c:a8:fe:ca:9a:6e:ae:f2:ee:bc:
         bc:2f:f5:19:42:32:4f:21:f7:86:cb:8d:69:e2:da:67:ee:3c:
         05:43:b4:86:95:e7:d3:4a:a8:8f:b7:2f:df:9b:26:bd:02:0e:
         18:c0:a6:3c:e4:3b:ab:49:b7:12:bf:b3:07:af:ff:67:7c:1e:
         eb:e9:c7:ab:2b:2b:6b:53:3c:fa:e0:a9:52:77:ed:80:9a:92:
         cf:dc:41:ad:c6:03:a6:36:e1:16:4d:ed:d9:d3:fc:20:0e:b9:
         b5:4b:ee:4a:4f:3d:a8:89:38:1c:fb:0d:d9:af:58:8d:5a:08:
         5e:59:09:69:13:5c:2a:ff:f1:3d:da:d5:a1:34:e6:49:63:40:
         2f:18:e3:30:9c:20:08:e3:c1:25:66:a2:be:d9:46:23:16:fe:
         04:d5:21:ee:a3:b6:dd:31:1f:3e:42:72:e3:04:91:a1:0a:f5:
         47:fb:53:79:37:65:90:bf:de:99:60:36:e9:6f:a0:31:69:f5:
         01:9e:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----