Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/9df0e22f-405d-3bbc-b3aa-7f6ac50c26ca.roa
File:                     9df0e22f-405d-3bbc-b3aa-7f6ac50c26ca.roa (raw, json)
Hash identifier:          cT3u/ARcp/5damL4h9gjwoHYuw6VRp9N/GTBZwtqfWs=
Subject key identifier:   6A:F3:24:13:25:CD:6D:77:FB:C3:93:82:09:34:E6:C6:A3:39:74:D4
Certificate issuer:       /CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
Certificate serial:       010D0C9F43285845E60A13D69E41EEE7318CA400
Authority key identifier: 6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/9df0e22f-405d-3bbc-b3aa-7f6ac50c26ca.roa
Signing time:             Fri 17 May 2024 03:22:18 +0000
ROA not before:           Fri 17 May 2024 03:22:18 +0000
ROA not after:            Thu 15 Aug 2024 03:22:18 +0000
asID:                     834
IP address blocks:        23.151.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 17:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e6:0a:13:d6:9e:41:ee:e7:31:8c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
        Validity
            Not Before: May 17 03:22:18 2024 GMT
            Not After : Aug 15 03:22:18 2024 GMT
        Subject: CN=b9b52f64-2d3e-41aa-b325-e1eb8b3c219e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:1e:31:8d:50:94:2d:f4:d8:1b:32:cb:1c:
                    1d:fe:c1:48:05:75:f6:40:d1:70:64:1a:3b:8b:88:
                    90:b1:f9:66:47:fc:f5:36:94:15:f8:0a:cd:2f:0a:
                    61:eb:67:16:88:4a:0f:14:23:05:0c:94:c1:57:f4:
                    96:91:e8:9b:f0:4e:55:47:08:de:c4:15:30:c2:7e:
                    46:2d:1e:03:24:99:76:fd:d2:d4:fc:85:1a:92:45:
                    b0:09:ac:c3:db:df:bc:73:3a:02:19:25:5b:c6:26:
                    8c:64:9b:8b:8c:84:52:16:70:11:1b:1b:b4:b3:3f:
                    f5:e9:7d:37:55:b8:a8:c3:64:71:9f:2a:de:91:09:
                    3f:08:10:2a:ea:95:5a:05:62:33:fb:d6:f9:b8:75:
                    cd:15:97:3f:36:d3:eb:6f:47:3e:7c:f9:cc:94:af:
                    1e:dd:90:fe:32:84:f4:6d:84:b8:12:82:09:86:e8:
                    eb:46:43:e6:c7:8f:01:0a:a8:81:31:e6:b0:17:dd:
                    af:ca:0d:fc:8f:ed:77:2a:12:d8:53:43:76:e8:7b:
                    e5:e2:2d:5f:31:9b:b6:3b:79:9b:ad:1d:79:9c:f5:
                    43:fe:54:d2:0d:d1:0e:20:9b:b9:b0:53:d1:a5:30:
                    71:4e:05:b9:a4:58:cf:0a:26:47:11:f3:b1:33:ad:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F3:24:13:25:CD:6D:77:FB:C3:93:82:09:34:E6:C6:A3:39:74:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/9df0e22f-405d-3bbc-b3aa-7f6ac50c26ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:7e:9f:43:ee:e9:19:b0:25:06:a7:f4:ad:ea:5c:09:a6:53:
         1a:c9:5f:d4:97:7a:42:74:4b:89:58:f9:81:9c:96:b7:b7:11:
         49:5d:74:72:e0:80:c3:eb:98:23:3b:b3:20:33:5a:80:33:1b:
         30:5d:73:25:08:bf:e8:a5:a2:34:cd:f7:11:ae:92:84:3f:aa:
         2d:3b:72:df:a3:12:26:57:48:05:f6:e0:58:17:0a:e0:74:dd:
         75:c6:03:aa:50:f7:cc:5b:2a:6f:08:17:be:49:f5:4b:f2:ea:
         c0:e9:26:fc:dc:ae:ce:31:26:d3:09:0f:2f:90:05:9b:3c:31:
         d1:fb:a0:93:df:8d:26:04:e6:8e:07:2e:0f:e3:d5:1b:47:de:
         6f:e4:b0:a9:cf:2a:38:9f:07:18:41:11:aa:62:0c:2d:6a:f3:
         3a:30:d8:3f:d8:6d:6e:f7:a9:d6:27:18:97:0c:f2:43:f7:38:
         94:ff:7b:ef:79:fe:0d:25:b8:61:cd:75:7f:5d:49:2e:76:92:
         c7:c8:40:4b:30:f5:4e:06:40:1a:29:2b:ee:98:d7:04:51:6f:
         ad:2c:dc:db:3e:e5:9a:19:75:e4:ff:75:44:41:aa:aa:78:e7:
         a0:5b:8b:8c:15:54:cd:dd:ab:27:88:82:07:f9:3f:12:6d:94:
         33:e8:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----