Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/dcdba1f6-c8eb-3e9b-85a5-6cc4795469e0.roa
File:                     dcdba1f6-c8eb-3e9b-85a5-6cc4795469e0.roa (raw, json)
Hash identifier:          hkgpggQltioktmNkoraZoFQnp4QfyRn/BXTuIr7YOYE=
Subject key identifier:   3E:91:A2:7B:EE:81:59:CE:8C:DC:0A:A9:DE:A9:77:B2:55:F3:42:97
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F43285842F3F6893E623D5E0BCB6DB8E8
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/dcdba1f6-c8eb-3e9b-85a5-6cc4795469e0.roa
Signing time:             Mon 21 Aug 2023 00:43:26 +0000
ROA not before:           Mon 21 Aug 2023 00:43:26 +0000
ROA not after:            Sun 19 Nov 2023 01:43:26 +0000
asID:                     0
IP address blocks:        23.134.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f3:f6:89:3e:62:3d:5e:0b:cb:6d:b8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Aug 21 00:43:26 2023 GMT
            Not After : Nov 19 01:43:26 2023 GMT
        Subject: CN=a3cdc562-016f-42bc-9735-a9466af28921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:19:07:ce:ac:f5:39:0a:72:aa:ba:34:b4:
                    9e:d0:b2:e9:37:a7:73:83:fc:31:50:bb:a9:19:26:
                    9b:2a:91:c4:87:6a:a5:22:c0:35:ea:63:31:44:d5:
                    7d:50:5c:a3:b4:8a:d0:03:9a:0b:e8:d6:f2:0e:7b:
                    33:22:28:c5:aa:aa:ba:26:d6:3b:c5:00:56:b1:78:
                    7c:a4:ec:7c:7e:c3:0f:37:4f:d0:3c:d0:e1:cc:eb:
                    b0:a4:ba:e1:96:bf:4a:b8:27:7e:7b:1a:e4:63:03:
                    38:ef:aa:8e:fd:12:4d:a3:cd:4f:fa:70:cf:fc:76:
                    d4:db:d4:f0:a6:c7:64:19:a4:2e:8a:1a:f7:52:32:
                    22:9f:ea:d8:c9:48:56:3c:60:51:64:09:f8:c1:a8:
                    57:49:ac:73:e5:bc:04:75:fc:06:ff:f0:39:7a:c3:
                    0a:98:cf:04:46:04:f2:c2:68:c9:e2:a1:72:c7:7b:
                    20:2f:55:c7:de:6f:27:d2:9c:67:41:b5:c4:0d:da:
                    2d:8c:30:a6:24:82:d6:e6:fe:2f:7c:77:a8:25:35:
                    89:17:26:d9:e6:b0:b0:e4:b5:5b:33:5e:30:c3:79:
                    1e:03:24:f6:58:5d:0a:68:16:00:4b:f7:a2:24:3b:
                    9b:35:a8:2b:ca:76:39:65:50:4d:53:f5:04:51:18:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:91:A2:7B:EE:81:59:CE:8C:DC:0A:A9:DE:A9:77:B2:55:F3:42:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/dcdba1f6-c8eb-3e9b-85a5-6cc4795469e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:b2:0e:bf:0e:eb:84:c3:60:a8:e2:27:80:a7:30:86:81:
         d2:5b:11:07:1a:c0:9c:e5:6f:4b:58:54:07:d9:da:be:29:9a:
         3c:07:df:c3:3a:0b:d2:60:e6:8e:59:49:32:0b:b1:b3:2e:b7:
         e2:9d:c3:39:8e:00:65:98:70:33:34:4f:bc:bd:9e:fc:af:54:
         55:4d:76:af:41:ec:cc:5f:76:3f:b1:ad:9f:00:6a:67:33:61:
         19:ab:a7:55:82:eb:47:50:fa:0a:1c:0f:a1:29:15:c1:37:e9:
         cd:5a:4a:04:2e:0b:a6:87:a9:35:98:48:47:9e:53:a5:53:54:
         99:76:ef:40:ba:1d:dd:c8:6d:26:e1:46:57:23:c4:72:82:19:
         7f:59:5e:8c:a8:ae:9b:1b:51:65:51:e9:46:b7:c8:40:67:ae:
         ed:92:fa:0f:84:70:d8:2d:a0:c9:41:fb:92:47:ed:57:25:79:
         00:b6:d4:76:16:9f:01:b5:b1:b1:e7:e6:c2:33:39:c4:d4:96:
         72:fa:ad:6a:fa:7f:a7:65:83:ad:19:69:bb:49:61:a4:4e:84:
         d9:14:74:45:7f:91:94:ce:20:20:ec:e3:90:5f:bd:ed:e5:6f:
         79:6b:fc:dc:64:4b:f9:a4:9d:f7:5e:20:09:04:0b:d3:9f:b8:
         d3:48:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----