Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/73d0fddf-0907-3177-bcbd-89fc7103d8ac.roa
File:                     73d0fddf-0907-3177-bcbd-89fc7103d8ac.roa (raw, json)
Hash identifier:          PiZ8UEW6vhtCVXXOf2cviTGl3FhP6mp/Wrx7SF2kvlw=
Subject key identifier:   35:B5:F9:90:73:80:0F:1F:13:6E:66:1F:91:20:57:66:D4:CF:1D:87
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F432858468D44CEAAAF96F1A035785580
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/73d0fddf-0907-3177-bcbd-89fc7103d8ac.roa
Signing time:             Tue 16 Jul 2024 01:00:24 +0000
ROA not before:           Tue 16 Jul 2024 01:00:24 +0000
ROA not after:            Mon 14 Oct 2024 01:00:24 +0000
asID:                     209428
IP address blocks:        23.131.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 12:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8d:44:ce:aa:af:96:f1:a0:35:78:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Jul 16 01:00:24 2024 GMT
            Not After : Oct 14 01:00:24 2024 GMT
        Subject: CN=d3f7483f-bd78-46ab-a7ed-57f8eb7e24be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:42:0c:eb:1c:75:20:5c:78:03:d3:8f:cc:
                    97:78:d8:08:89:5b:6b:97:7d:6c:d9:be:3e:0f:b9:
                    0c:cf:3b:4b:d6:b0:28:13:fb:3b:09:13:3e:4d:7a:
                    62:6e:5b:57:62:7d:eb:e0:1c:02:cf:6d:d9:70:d8:
                    59:a1:10:fd:97:f6:64:51:63:36:12:17:35:74:90:
                    79:5a:9a:f6:66:3b:c7:3a:36:6c:f8:2b:8e:37:be:
                    f6:f8:ef:21:06:99:07:74:15:45:9b:af:fe:8c:29:
                    79:78:3d:94:d6:b5:95:62:ad:fb:43:c1:2b:66:fa:
                    d1:af:15:02:e7:6c:91:fe:f9:74:e4:ef:55:12:b3:
                    64:7f:05:a2:b3:cd:be:2c:58:9b:a3:f2:af:76:a9:
                    ed:dd:e8:cb:14:1c:7f:64:c2:ae:d8:19:93:f7:57:
                    4f:9f:64:e1:a6:84:6b:31:8a:d9:84:fc:91:83:40:
                    48:35:07:ec:0f:2a:56:03:f0:b1:0d:27:d0:f2:bd:
                    dc:f8:ab:d7:44:26:6e:23:64:41:61:44:c3:d2:a3:
                    55:7d:58:33:cd:af:3e:43:4c:97:cf:66:63:52:02:
                    a5:90:77:83:9b:d1:ab:77:db:14:4e:3e:67:e0:ab:
                    ac:fe:62:ee:e7:8f:d1:bf:db:7e:0a:4d:91:6c:bd:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B5:F9:90:73:80:0F:1F:13:6E:66:1F:91:20:57:66:D4:CF:1D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/73d0fddf-0907-3177-bcbd-89fc7103d8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:26:ce:a1:64:37:9c:75:0f:b3:e5:26:78:ef:ec:1e:62:22:
         c0:f8:d2:96:c9:5b:4b:74:30:e8:ed:54:dd:29:b6:a5:ac:1c:
         a1:2d:88:a1:bb:73:79:8c:ae:47:b1:da:68:0b:64:c2:5e:28:
         de:fc:db:62:85:d4:99:ed:54:c8:d9:e8:c3:02:7c:29:d9:ea:
         30:3d:91:f4:f9:10:13:ab:7f:94:bb:b3:1b:12:13:17:dd:dd:
         de:f8:5d:d6:f8:c0:c6:25:69:12:9e:30:ee:b3:57:91:4f:de:
         07:c3:31:71:d5:15:a0:c6:32:cc:bb:95:0f:e0:90:7d:c0:7a:
         4c:57:52:6b:73:05:d6:c3:4c:7d:02:2d:83:81:e2:39:b1:79:
         94:51:25:24:db:be:02:d8:81:08:7e:4b:b2:a9:d5:60:58:ef:
         2b:00:72:3d:a3:1e:70:5e:59:57:e3:66:12:54:67:e9:6b:83:
         b4:ec:ff:1a:61:9e:6d:f9:74:9b:12:02:5e:64:69:3b:be:1f:
         3b:0c:e7:d3:f3:08:3f:27:8b:cf:bf:a5:e3:cd:36:da:52:6c:
         20:6d:3d:b2:38:56:0e:0f:24:62:08:6c:01:47:14:b5:9c:53:
         f3:c7:96:e4:4d:56:71:dc:d0:23:da:fd:2d:c6:84:4c:01:d2:
         e2:30:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----