Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/d3c34cbe-2d8d-3a7e-af77-8c0051029f4e.roa
File:                     d3c34cbe-2d8d-3a7e-af77-8c0051029f4e.roa (raw, json)
Hash identifier:          T+nKho/xdjWEQGtVyPtpmswguwEhL1Tw1VmLBxAEMvU=
Subject key identifier:   C6:EF:37:BB:03:9C:4F:5C:9B:AC:2E:4A:C6:6B:9E:38:0B:AB:D8:C8
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F43285840FF58AE717DD6FDDBD0BA42E0
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/d3c34cbe-2d8d-3a7e-af77-8c0051029f4e.roa
Signing time:             Fri 30 Apr 2021 18:38:05 +0000
ROA not before:           Fri 30 Apr 2021 18:38:05 +0000
ROA not after:            Tue 27 May 2025 04:00:00 +0000
asID:                     22773
IP address blocks:        23.142.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 Feb 2023 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ff:58:ae:71:7d:d6:fd:db:d0:ba:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Apr 30 18:38:05 2021 GMT
            Not After : May 27 04:00:00 2025 GMT
        Subject: CN=cddeb1e1-48f7-4de9-843f-d7765a4a51c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1a:ff:68:cf:cc:51:a6:6e:3e:54:47:54:09:
                    f3:ee:13:76:a0:ce:2a:b4:ce:6f:d5:50:f3:da:5a:
                    71:01:4c:44:a3:82:e8:0d:b2:cc:e8:a3:96:7b:04:
                    c5:16:cb:79:a2:17:e7:75:32:de:3f:ad:5b:cc:7a:
                    84:1b:ca:98:cf:f4:54:f9:55:ec:bd:90:fb:fe:98:
                    93:27:b3:91:66:e4:d4:23:dd:1d:17:b7:6d:f7:79:
                    7e:e3:18:77:bb:81:94:62:7b:ad:5f:1f:a6:c0:b7:
                    62:91:a5:75:da:e4:ea:e4:55:29:8b:ff:06:39:6d:
                    73:63:b7:82:af:88:81:6e:e8:7e:30:08:c5:aa:b4:
                    49:e9:b6:e6:27:1e:68:af:1d:ab:ed:6c:69:ba:d5:
                    3a:38:41:7c:b5:d2:f3:be:51:e7:5b:5b:15:96:aa:
                    a5:e1:a0:90:46:bc:fb:cc:a0:58:16:6d:24:73:ef:
                    32:db:f4:ab:df:99:25:e8:25:2f:70:dd:f5:6e:cc:
                    60:0d:59:25:69:ae:17:a3:16:35:a8:32:6c:92:d7:
                    2b:3a:63:4d:c3:29:97:ee:18:a3:bd:56:8e:f6:dc:
                    00:fe:aa:f2:f8:42:41:20:b2:e6:4d:f1:65:e8:bf:
                    cf:d6:83:00:df:87:4c:a3:02:c1:b4:21:7b:b1:38:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:37:BB:03:9C:4F:5C:9B:AC:2E:4A:C6:6B:9E:38:0B:AB:D8:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/d3c34cbe-2d8d-3a7e-af77-8c0051029f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2d:a7:86:05:b3:a8:06:84:a4:92:6c:86:90:8e:ff:cc:21:
         1a:26:82:21:9d:91:c1:de:db:c0:04:1e:21:9b:84:37:b5:24:
         55:40:bd:ad:92:b8:13:67:7e:77:fb:e7:0c:32:07:77:20:76:
         1e:3b:5f:3a:24:e1:91:0a:e9:42:2c:4d:54:95:5d:d0:5f:57:
         ff:ce:85:1b:8b:84:0d:e8:7b:2c:14:62:5e:3d:3b:95:45:d2:
         fb:c7:c9:e5:64:0f:bc:9b:34:f9:d0:20:36:6c:5a:52:26:a1:
         cc:c1:aa:e9:de:ef:ab:23:1a:3d:fb:7b:2f:7c:b7:16:b7:86:
         69:d2:fd:9e:0d:b2:f2:17:94:3b:c4:63:1b:3f:af:f3:41:57:
         1e:3c:62:ee:32:6a:88:8d:03:31:77:7c:3e:c1:ce:80:e2:b8:
         f3:fe:7f:b2:e3:60:80:9a:28:31:77:63:ae:c4:19:c8:bd:53:
         e3:37:ec:90:b9:ee:89:c1:48:c1:7a:48:af:76:57:1e:07:28:
         89:50:12:1c:6a:4b:64:51:3f:09:d1:ea:80:1b:a4:d8:5d:20:
         98:94:b4:de:e1:c7:d4:cc:47:82:33:83:8b:68:95:0d:02:46:
         8a:b8:3b:49:67:d2:c8:eb:f2:97:4e:42:99:91:ce:36:4c:58:
         1a:fb:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----