Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/04db2917-1140-3a18-bfd0-34ff97740d02.roa
File:                     04db2917-1140-3a18-bfd0-34ff97740d02.roa (raw, json)
Hash identifier:          KpI9UMYkTWMtiVfIQ45h+Vk3JPgUMItDlNLrW64innE=
Subject key identifier:   7B:E2:69:FB:A9:F5:C4:33:DC:81:C3:77:9C:7D:5A:2B:87:77:B4:00
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842A77F7553565FFBE4E2CAF900
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/04db2917-1140-3a18-bfd0-34ff97740d02.roa
Signing time:             Mon 24 Jul 2023 15:22:04 +0000
ROA not before:           Mon 24 Jul 2023 15:22:04 +0000
ROA not after:            Sun 22 Oct 2023 15:22:04 +0000
asID:                     834
IP address blocks:        200.229.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a7:7f:75:53:56:5f:fb:e4:e2:ca:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 24 15:22:04 2023 GMT
            Not After : Oct 22 15:22:04 2023 GMT
        Subject: CN=e624ab64-c638-4da1-9b5d-7ee669462996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:65:8f:12:d7:0d:3e:47:a3:ac:0c:2c:b8:
                    f4:65:72:3c:4e:b3:1b:ff:37:93:95:85:72:b1:57:
                    7f:fc:4d:7b:44:6d:6d:40:ea:6e:eb:e9:7b:85:dc:
                    8e:cc:1a:fe:ad:c9:77:23:7c:85:4c:86:f1:73:c2:
                    e4:07:c9:a1:ab:e0:e9:96:5f:73:42:70:07:19:b7:
                    72:c5:5b:42:98:47:58:ec:34:fa:2e:42:85:c9:c5:
                    37:1f:2b:29:93:a6:b3:88:25:fb:d9:6d:fe:71:1e:
                    85:2e:b4:70:e8:c6:65:20:0c:9f:9a:aa:6e:98:c0:
                    5c:59:4e:3f:e1:f5:33:5a:47:18:28:0b:97:cd:8c:
                    a0:52:4b:07:05:0b:f5:7f:6a:23:1d:1a:93:67:4c:
                    72:54:ee:7f:46:11:07:7f:8a:4c:a1:3e:99:83:4a:
                    38:7a:0d:0d:08:fa:9f:62:a1:d8:62:d3:3c:90:a6:
                    80:e1:65:c6:76:e3:8d:b0:3a:25:d4:b7:77:53:89:
                    d5:02:ca:01:8f:05:e2:26:15:e6:ba:ff:8c:a2:04:
                    47:4b:12:d0:3b:72:b0:09:c5:72:6b:4c:c1:76:d0:
                    24:fb:83:21:0d:95:77:c6:f4:fd:5f:6d:2d:00:c6:
                    2e:46:e6:e5:12:b3:77:80:af:5d:c9:a0:2b:a4:53:
                    7e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E2:69:FB:A9:F5:C4:33:DC:81:C3:77:9C:7D:5A:2B:87:77:B4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/04db2917-1140-3a18-bfd0-34ff97740d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:31:e2:36:cf:73:77:cd:a0:b0:10:b8:7f:dc:99:d5:b5:92:
         30:cc:0a:8b:ea:ba:89:08:90:d0:75:e1:94:e1:2e:a1:df:69:
         c2:a3:d7:96:b7:e2:d0:8c:6b:1b:ee:f2:72:67:0c:bc:ee:5e:
         3f:1f:68:00:13:44:e7:26:d8:ef:1c:6f:65:dc:eb:04:e4:c4:
         72:76:58:f6:e2:96:b0:f3:c8:89:a1:6f:5a:06:f9:74:00:46:
         97:b8:91:32:aa:45:3e:36:35:58:59:b4:04:8f:bc:b0:29:66:
         06:f0:6f:fb:45:bc:42:d8:32:48:3d:b3:37:1a:5c:48:7c:64:
         6b:b2:b3:aa:da:11:18:04:76:0b:16:24:fa:fe:78:1d:60:5f:
         af:b1:db:29:55:6b:2f:76:5c:a2:5c:3b:d1:18:ff:03:23:25:
         51:2d:80:d6:3d:84:3a:68:f3:73:0b:34:8d:04:18:e3:f6:dc:
         ab:8d:41:13:ee:a0:60:7e:af:b3:19:df:4f:69:bb:c3:78:d1:
         be:56:2d:6a:46:af:37:11:e8:b0:7b:65:74:4c:67:8a:f8:f1:
         c7:90:5c:df:9c:a1:79:bd:b2:f7:38:d3:eb:06:0c:be:ba:47:
         b8:76:96:16:4f:8f:a9:ac:d4:60:2f:d8:f8:fe:f4:3a:a1:0f:
         15:f7:09:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKnf3VTVl/75OLK+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDcyNDE1MjIwNFoXDTIzMTAyMjE1MjIwNFowLzEtMCsGA1UEAxMk
ZTYyNGFiNjQtYzYzOC00ZGExLTliNWQtN2VlNjY5NDYyOTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW1ljxLXDT5Ho6wMLLj0ZXI8TrMb/zeTlYVy
sVd//E17RG1tQOpu6+l7hdyOzBr+rcl3I3yFTIbxc8LkB8mhq+Dpll9zQnAHGbdy
xVtCmEdY7DT6LkKFycU3Hyspk6aziCX72W3+cR6FLrRw6MZlIAyfmqpumMBcWU4/
4fUzWkcYKAuXzYygUksHBQv1f2ojHRqTZ0xyVO5/RhEHf4pMoT6Zg0o4eg0NCPqf
YqHYYtM8kKaA4WXGduONsDol1Ld3U4nVAsoBjwXiJhXmuv+MogRHSxLQO3KwCcVy
a0zBdtAk+4MhDZV3xvT9X20tAMYuRublErN3gK9dyaArpFN+TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHviafup9cQz3IHDd5x9WiuHd7QAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMDRkYjI5MTctMTE0MC0z
YTE4LWJmZDAtMzRmZjk3NzQwZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgx4jbPc3fNoLAQuH/cmdW1kjDMCovquokIkNB14ZThLqHfacKj15a3
4tCMaxvu8nJnDLzuXj8faAATROcm2O8cb2Xc6wTkxHJ2WPbilrDzyImhb1oG+XQA
Rpe4kTKqRT42NVhZtASPvLApZgbwb/tFvELYMkg9szcaXEh8ZGuys6raERgEdgsW
JPr+eB1gX6+x2ylVay92XKJcO9EY/wMjJVEtgNY9hDpo83MLNI0EGOP23KuNQRPu
oGB+r7MZ309pu8N40b5WLWpGrzcR6LB7ZXRMZ4r48ceQXN+coXm9svc40+sGDL66
R7h2lhZPj6ms1GAv2Pj+9DqhDxX3Cas=
-----END CERTIFICATE-----