Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/1de53277-903b-3286-ad2a-4514ae71a2fa.roa
File:                     1de53277-903b-3286-ad2a-4514ae71a2fa.roa (raw, json)
Hash identifier:          w7035O7ldxu7KXIBTvTWrhKFXug5/JTAzyoJ9P/ymwI=
Subject key identifier:   CE:7A:54:BD:5B:06:44:18:70:BC:EC:F2:D9:3B:73:0E:20:30:83:2D
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F4328583ABAAEE20141D916750B31EB00
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/1de53277-903b-3286-ad2a-4514ae71a2fa.roa
Signing time:             Tue 27 Jul 2021 04:00:00 +0000
ROA not before:           Tue 27 Jul 2021 04:00:00 +0000
ROA not after:            Mon 30 Oct 2023 04:00:00 +0000
asID:                     206607
IP address blocks:        23.184.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:ba:ae:e2:01:41:d9:16:75:0b:31:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Jul 27 04:00:00 2021 GMT
            Not After : Oct 30 04:00:00 2023 GMT
        Subject: CN=7e1abde6-9dff-4066-b9ab-3dfef8df3c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:dc:9f:5b:63:b5:23:e4:49:af:49:ea:08:
                    e1:67:26:d1:be:aa:a4:c7:3b:c8:4d:34:14:c9:1f:
                    b8:13:8a:2b:b0:f3:a1:1b:08:f7:a2:37:c5:a9:d0:
                    7e:ca:35:97:8d:60:20:43:46:4a:dd:cd:35:52:a8:
                    5d:1f:fc:c7:30:f7:e6:2f:4e:f3:9e:5b:6a:3a:31:
                    31:b5:ac:3e:a6:00:12:c1:ae:b2:b0:2e:68:67:a7:
                    7f:0f:de:b6:a0:9b:9b:62:c4:3e:db:03:c1:58:46:
                    46:40:c2:6f:a1:e4:cb:52:59:eb:39:b1:81:bd:93:
                    10:95:43:a5:b3:35:7a:7c:2a:08:0d:34:00:aa:6e:
                    31:d7:80:07:d2:0b:d7:cf:24:08:b0:77:6d:05:1b:
                    50:b4:aa:94:dd:9c:ae:a2:09:16:b6:d8:f3:db:cc:
                    0f:91:90:a8:f5:66:95:8b:a0:48:37:a1:d8:ed:50:
                    8f:7d:98:59:e9:80:4f:5c:de:34:c3:e9:de:08:ed:
                    86:48:f4:6c:a5:d6:3e:1f:71:6e:2b:0b:ec:ae:b2:
                    44:0c:a4:38:30:b8:a5:81:b0:ab:f6:bf:2e:d8:bd:
                    cc:44:4a:e1:2c:96:7c:51:6a:21:41:93:0b:46:73:
                    4e:90:57:2a:03:a7:4e:93:53:24:1f:94:13:45:c5:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7A:54:BD:5B:06:44:18:70:BC:EC:F2:D9:3B:73:0E:20:30:83:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/1de53277-903b-3286-ad2a-4514ae71a2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:8f:1c:2d:e3:be:13:55:8c:ed:69:63:bd:17:87:39:a1:
         2f:99:c1:74:ba:28:30:4a:58:c1:be:b4:ca:30:15:78:fd:87:
         82:9d:99:99:d3:76:9c:b4:07:7e:cc:53:a2:a3:50:3e:d4:2e:
         3c:f9:9f:2f:6c:25:f5:6f:a7:8c:30:04:b3:8b:dc:05:59:c2:
         ab:a8:57:e4:1d:66:05:2b:8a:31:6a:f6:df:38:9a:bc:2c:3a:
         8b:fc:ae:9e:e9:43:0e:5f:69:3e:1f:a3:07:60:c9:8e:4b:2c:
         48:65:47:8d:06:87:30:1b:a0:08:41:5d:ed:1a:c8:a7:55:2c:
         11:43:1c:08:90:5f:0c:06:b0:48:d3:91:b4:62:ab:5a:b7:03:
         aa:40:f8:3d:9c:62:8b:10:a9:13:dd:cf:ba:da:af:16:c4:bc:
         ff:6b:0e:6c:54:21:ac:ac:6a:fb:b6:00:8c:50:37:5f:08:7e:
         9f:bb:1f:7e:ba:10:4f:e4:bd:54:4e:fe:34:b3:5b:fc:51:e5:
         31:27:ed:6a:32:0b:ef:26:33:3f:35:1d:94:cb:38:86:83:08:
         fe:28:8c:5e:4b:04:a2:4c:6f:25:34:9b:16:cb:7d:9b:bb:0c:
         7a:1f:6d:79:12:05:4a:cd:45:b3:aa:a7:04:7f:40:20:a8:ec:
         48:b9:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----