Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/fd33b2fa-fd5a-3b5e-bb54-34fc09a019aa.roa
File:                     fd33b2fa-fd5a-3b5e-bb54-34fc09a019aa.roa (raw, json)
Hash identifier:          IYX3gXHn4NABbOGvNmdJXnQzgstfrcs0HP4xLurWs0c=
Subject key identifier:   46:2E:53:38:94:77:C8:23:4D:F3:80:BD:7E:D9:BB:B9:D3:C7:29:60
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328583DCDF04CAED67F586C10206D00
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/fd33b2fa-fd5a-3b5e-bb54-34fc09a019aa.roa
Signing time:             Fri 31 Dec 2021 12:00:00 +0000
ROA not before:           Fri 31 Dec 2021 12:00:00 +0000
ROA not after:            Sun 31 Dec 2023 05:00:00 +0000
asID:                     398712
IP address blocks:        23.234.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cd:f0:4c:ae:d6:7f:58:6c:10:20:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Dec 31 12:00:00 2021 GMT
            Not After : Dec 31 05:00:00 2023 GMT
        Subject: CN=3b5d1c8e-c20b-4702-a037-7c17322537b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:00:2e:9a:37:29:ea:85:dc:a2:40:60:42:bc:
                    d9:e9:19:f7:11:fb:d1:21:01:aa:28:1c:59:38:ab:
                    9f:9f:69:79:fa:3e:36:17:3a:e0:0e:84:bc:8a:88:
                    b0:18:e9:ac:39:c0:71:cb:55:da:cc:7c:fc:79:55:
                    8a:87:e2:34:be:e3:39:06:53:77:57:62:a8:ad:7e:
                    11:d9:4f:40:12:ac:7a:43:44:73:42:2f:92:33:e6:
                    ec:eb:2d:5d:fb:58:77:b6:54:78:8a:4b:d9:e7:b2:
                    9c:a8:2c:37:37:f3:18:95:3c:46:43:f1:93:68:1a:
                    ad:f1:ad:39:01:c8:f9:73:2b:59:73:4c:54:c3:35:
                    e8:98:dd:56:4e:f7:08:da:5b:bb:ad:86:c3:c1:ef:
                    c6:59:f6:cf:4b:5c:87:2d:24:9d:a1:ae:f1:55:a7:
                    e1:83:d4:dc:41:0c:62:d6:fb:38:85:be:bf:34:16:
                    ee:16:2b:63:c1:06:50:46:ab:37:4c:7a:b6:f2:4d:
                    0c:83:a3:94:15:39:7f:ab:68:95:ed:7c:46:75:9b:
                    8b:a9:83:60:2a:72:ff:f5:fc:bf:ea:32:04:dd:33:
                    2c:ab:10:e5:ea:c2:8f:b3:c1:2c:0f:b1:0e:a1:98:
                    a5:d1:38:d1:8f:5a:04:34:12:71:f4:0d:85:55:df:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:53:38:94:77:C8:23:4D:F3:80:BD:7E:D9:BB:B9:D3:C7:29:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/fd33b2fa-fd5a-3b5e-bb54-34fc09a019aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:f8:ad:82:b4:b3:31:53:fb:15:0d:99:ef:98:cf:dd:8b:
         2c:1a:33:54:c5:4a:04:7a:05:21:7f:15:3c:0d:e7:2c:95:ab:
         fe:d7:a8:91:2b:56:81:93:e4:97:3b:a9:36:ca:cf:60:7b:94:
         19:4f:1c:ac:71:d7:23:b7:00:0f:4f:61:05:fd:58:e4:3c:99:
         4b:47:88:1c:62:b2:e5:90:bd:86:e1:cf:73:18:1a:d3:ca:b8:
         00:7b:10:ec:2b:e0:09:22:9b:86:2e:fb:99:de:f0:78:be:18:
         50:d0:88:b8:64:13:f2:7c:07:04:74:b8:f9:c6:0f:c0:68:1f:
         71:53:77:ab:c2:ee:93:a3:76:0b:d1:50:24:ba:3b:ab:3d:3a:
         20:8e:b4:c8:8e:bb:bb:77:9d:db:12:bb:6d:6f:14:5a:2f:c0:
         6e:31:0e:77:39:cd:9e:72:30:11:ff:e2:be:cb:f5:10:38:b2:
         39:82:57:d0:f0:d9:20:2a:72:5e:ab:8f:a2:b1:f8:c5:98:9b:
         d3:90:c6:42:85:98:5f:b3:0c:3c:b6:52:6a:7e:31:a5:05:24:
         e6:43:d4:78:c4:7b:c7:0d:99:1d:32:20:33:ea:23:36:29:77:
         d3:4d:33:75:32:d9:70:77:ba:6f:5e:0a:9c:da:92:b8:22:18:
         b0:a5:75:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3N8Eyu1n9YbBAgbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTIxMTIzMTEyMDAwMFoXDTIzMTIzMTA1MDAwMFowLzEtMCsGA1UEAxMk
M2I1ZDFjOGUtYzIwYi00NzAyLWEwMzctN2MxNzMyMjUzN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigAumjcp6oXcokBgQrzZ6Rn3EfvRIQGqKBxZ
OKufn2l5+j42FzrgDoS8ioiwGOmsOcBxy1XazHz8eVWKh+I0vuM5BlN3V2KorX4R
2U9AEqx6Q0RzQi+SM+bs6y1d+1h3tlR4ikvZ57KcqCw3N/MYlTxGQ/GTaBqt8a05
Acj5cytZc0xUwzXomN1WTvcI2lu7rYbDwe/GWfbPS1yHLSSdoa7xVafhg9TcQQxi
1vs4hb6/NBbuFitjwQZQRqs3THq28k0Mg6OUFTl/q2iV7XxGdZuLqYNgKnL/9fy/
6jIE3TMsqxDl6sKPs8EsD7EOoZil0TjRj1oENBJx9A2FVd/0xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEYuUziUd8gjTfOAvX7Zu7nTxylgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZmQzM2IyZmEtZmQ1YS0z
YjVlLWJiNTQtMzRmYzA5YTAxOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyP+K2CtLMxU/sVDZnvmM/diywaM1TFSgR6BSF/FTwN5yyVq/7XqJEr
VoGT5Jc7qTbKz2B7lBlPHKxx1yO3AA9PYQX9WOQ8mUtHiBxisuWQvYbhz3MYGtPK
uAB7EOwr4Akim4Yu+5ne8Hi+GFDQiLhkE/J8BwR0uPnGD8BoH3FTd6vC7pOjdgvR
UCS6O6s9OiCOtMiOu7t3ndsSu21vFFovwG4xDnc5zZ5yMBH/4r7L9RA4sjmCV9Dw
2SAqcl6rj6Kx+MWYm9OQxkKFmF+zDDy2Ump+MaUFJOZD1HjEe8cNmR0yIDPqIzYp
d9NNM3Uy2XB3um9eCpzakrgiGLCldW4=
-----END CERTIFICATE-----