Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1eeffd2d-deb3-3472-b0b8-081143702116.roa
File:                     1eeffd2d-deb3-3472-b0b8-081143702116.roa (raw, json)
Hash identifier:          vZfNHB/jbkp+3oaHzpaYhnMKE2VzbUUyU40AejtdP0M=
Subject key identifier:   C0:7C:B6:40:7E:8F:4E:D2:68:4F:18:04:32:99:12:6C:00:1D:C9:F8
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285841FB1699A82BFB2F60773169C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1eeffd2d-deb3-3472-b0b8-081143702116.roa
Signing time:             Tue 23 May 2023 21:11:45 +0000
ROA not before:           Tue 23 May 2023 21:11:45 +0000
ROA not after:            Mon 21 Aug 2023 21:11:45 +0000
asID:                     397563
IP address blocks:        140.228.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fb:16:99:a8:2b:fb:2f:60:77:31:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 23 21:11:45 2023 GMT
            Not After : Aug 21 21:11:45 2023 GMT
        Subject: CN=d792c35d-58bb-40f9-95cc-5437eedff1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:35:05:eb:72:0e:04:e7:e2:ff:7d:01:53:
                    ec:6f:df:64:20:71:15:82:95:05:3a:23:3d:d7:06:
                    64:b5:27:8c:f6:af:d9:34:a7:8f:41:ec:6a:9d:b5:
                    64:58:af:e8:4a:d9:18:39:82:90:65:20:35:7d:ae:
                    2b:2d:94:bb:0b:b6:76:2c:5d:76:a7:e5:bc:54:46:
                    c5:39:09:d6:11:e6:14:dd:a9:a1:2d:26:aa:4a:67:
                    1a:54:16:ee:41:97:73:f2:f3:63:bc:df:6c:4e:8c:
                    37:1d:94:5d:df:c2:c8:20:0c:30:bf:5d:93:e8:4f:
                    1b:ad:34:ed:1b:d4:5a:48:33:3c:ad:9f:56:0f:6a:
                    ba:28:e1:bb:91:62:1f:0d:2e:05:32:82:05:ce:11:
                    ee:df:1f:50:8c:67:fe:06:9d:ca:ad:7d:b4:53:18:
                    93:03:ea:37:1d:73:06:28:97:d2:83:17:3a:b3:15:
                    0d:1b:e1:ef:95:b1:40:2d:84:af:36:90:df:f7:3b:
                    05:a5:4b:3d:ae:a6:55:9d:66:94:0e:73:fa:8d:7a:
                    17:45:c5:3b:dd:57:3b:9b:4c:c3:38:d9:f6:79:d9:
                    41:ba:78:35:9c:1d:00:19:fe:ce:d6:31:64:8a:ff:
                    f3:19:dd:d2:0f:f5:7d:53:71:7d:69:81:99:4a:f7:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7C:B6:40:7E:8F:4E:D2:68:4F:18:04:32:99:12:6C:00:1D:C9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1eeffd2d-deb3-3472-b0b8-081143702116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:22:9e:2d:50:bf:24:39:2b:2a:d1:bc:9e:96:28:8e:09:9d:
         5d:69:00:08:7c:81:4d:39:20:f6:f7:33:24:e5:4e:f8:32:58:
         aa:4b:ba:e0:e4:d9:3c:2c:8d:dc:14:ca:d7:bf:50:35:1b:fa:
         d9:52:41:9b:9d:57:b6:28:c2:71:13:59:ec:5f:57:41:95:15:
         8d:4f:83:1d:7c:46:62:3a:78:bb:88:75:e2:dc:c0:b0:0b:6c:
         4b:eb:43:d3:53:ef:00:6a:66:df:80:f0:c4:d2:f2:bf:05:23:
         22:97:1f:20:fd:02:03:cc:f8:6f:b1:29:e5:3b:12:63:6b:b4:
         10:8b:b6:58:c3:66:0b:1f:24:a3:aa:0e:1c:f0:64:7e:af:16:
         06:9c:b7:e8:50:00:07:1a:b6:31:bb:a9:87:8b:c0:18:72:15:
         f1:66:0c:2f:9f:99:e6:ba:3f:cc:88:f1:58:33:df:af:81:c9:
         f5:da:ab:6c:d7:b1:38:02:e3:4e:82:2f:56:fc:22:b0:4b:80:
         23:a5:9d:83:8b:a5:c5:26:19:fa:ec:b8:bd:2c:d4:4b:a7:45:
         9a:24:da:a3:5a:d3:03:4f:d2:72:f0:a2:d4:b0:d7:f5:b4:df:
         f9:fb:b0:d6:2c:33:ab:0d:90:8e:ec:fc:d7:d8:cf:99:66:e4:
         a7:d4:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----