Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ee02c3ee-f294-3372-ac06-ada0c0cc0e8c.roa
File:                     ee02c3ee-f294-3372-ac06-ada0c0cc0e8c.roa (raw, json)
Hash identifier:          WGUhAmi/LBfeVwE12ib9Y2D+morIhaWlX6KW4VlhBeM=
Subject key identifier:   27:6C:32:DC:D1:AE:FE:93:39:DD:12:EB:40:B2:71:14:DA:B1:95:1E
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584250ADF05F93E56610CA780E80
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ee02c3ee-f294-3372-ac06-ada0c0cc0e8c.roa
Signing time:             Fri 23 Jun 2023 13:00:19 +0000
ROA not before:           Fri 23 Jun 2023 13:00:19 +0000
ROA not after:            Thu 21 Sep 2023 13:00:19 +0000
asID:                     1239
IP address blocks:        23.234.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:50:ad:f0:5f:93:e5:66:10:ca:78:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jun 23 13:00:19 2023 GMT
            Not After : Sep 21 13:00:19 2023 GMT
        Subject: CN=a4af504f-73d8-4298-aaac-20d937ba0f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:57:18:2b:9c:fa:91:91:57:67:31:ff:d5:
                    a3:86:bb:ab:c7:6a:e4:ef:7e:8a:f5:57:2f:5a:3c:
                    73:e4:86:17:4c:45:5d:4b:ca:aa:a8:e6:c0:5b:ce:
                    d9:f1:46:09:62:8b:70:43:16:36:3d:47:5a:f4:34:
                    74:97:22:6c:a2:c7:85:79:9f:43:f0:4e:ba:4c:0f:
                    70:63:62:42:c8:05:98:d6:4d:9c:be:ca:bc:7d:67:
                    37:ae:a8:2f:74:ab:92:7d:0f:e8:0a:f7:d8:e3:f1:
                    4b:ee:c8:75:6f:ac:82:9f:8b:f9:e8:7f:dc:e8:05:
                    e0:87:6f:a1:f6:ef:3e:d1:bc:d8:98:d6:b8:87:30:
                    05:c2:b7:0c:09:db:05:3b:1c:04:7d:dd:b4:f9:60:
                    56:ae:26:70:e5:8f:c6:b2:19:cf:62:1a:20:8d:46:
                    7b:b8:da:b2:95:59:7a:c1:b6:e7:a0:fb:d7:70:d8:
                    30:8c:27:44:f2:0f:4e:34:66:da:39:41:b6:67:e3:
                    a1:e5:96:70:cc:f2:da:9f:6c:59:9a:4a:42:32:ad:
                    ce:3b:d8:48:a9:58:b0:9c:79:ff:d4:fa:6a:16:d9:
                    56:26:cd:27:96:f2:ae:30:d6:af:d1:92:46:d8:9e:
                    ae:ba:8e:15:2e:d0:3f:f9:b6:a4:2a:2b:a7:3e:68:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:32:DC:D1:AE:FE:93:39:DD:12:EB:40:B2:71:14:DA:B1:95:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ee02c3ee-f294-3372-ac06-ada0c0cc0e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:46:6f:67:81:94:12:04:ed:30:ba:79:2d:a3:b5:b0:32:7b:
         09:2f:4c:6d:b4:15:08:4e:a1:99:ff:da:00:07:06:25:09:ad:
         93:ea:f0:0b:95:68:db:31:5e:b3:90:3a:0f:14:69:a1:a7:5b:
         85:ff:d4:f0:64:66:5e:3a:37:fb:dc:00:78:aa:7d:dc:57:63:
         64:dd:3c:3c:45:21:11:6d:cb:f5:84:18:0d:aa:41:31:c0:10:
         e2:c6:24:cc:e0:05:b9:1b:71:45:bc:19:3b:00:57:9f:16:28:
         78:52:8b:c9:cb:fa:6a:ee:42:0b:30:8e:58:aa:a5:f5:ac:9c:
         70:ae:4c:52:39:b3:58:b0:81:5e:b2:16:dc:38:32:83:7a:05:
         3c:6b:2b:3f:c1:68:54:8c:76:e8:b9:fa:3b:3e:c5:55:90:cb:
         8a:1c:de:c3:9a:6d:c4:f0:63:ea:9d:f3:ec:2d:98:f9:ef:2b:
         2e:22:be:33:a1:e3:72:8d:64:5a:e9:95:60:f8:17:ac:d6:70:
         21:f9:8b:b6:55:92:71:35:2e:aa:07:56:a0:a9:2f:d3:7b:88:
         af:6b:0c:43:2a:dc:17:bd:c1:57:4b:14:5c:90:3c:4d:19:24:
         6f:21:a7:a7:66:58:2e:33:78:08:c7:92:e2:99:dd:5c:bc:13:
         5a:f7:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----