Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2224ef34-ff63-3877-be98-9c2cf4332b18.roa
File:                     2224ef34-ff63-3877-be98-9c2cf4332b18.roa (raw, json)
Hash identifier:          x5n3DQnzKWesJ9qMfrQGTPvZaswJKyh933zf/a0igWs=
Subject key identifier:   18:E5:C1:7A:5C:89:77:B6:9A:52:ED:B2:76:4B:52:A9:13:F1:D2:F2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842F5BE2D0CC10478AABC935940
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2224ef34-ff63-3877-be98-9c2cf4332b18.roa
Signing time:             Mon 21 Aug 2023 16:01:29 +0000
ROA not before:           Mon 21 Aug 2023 16:01:29 +0000
ROA not after:            Sun 19 Nov 2023 17:01:29 +0000
asID:                     834
IP address blocks:        162.33.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f5:be:2d:0c:c1:04:78:aa:bc:93:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 21 16:01:29 2023 GMT
            Not After : Nov 19 17:01:29 2023 GMT
        Subject: CN=f8641a41-97e1-48ac-a6f7-64df6f0c6e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:32:a8:c8:0a:ed:75:34:67:11:fa:19:90:
                    8d:e4:51:3c:fa:a7:70:10:04:db:b7:72:48:6e:d7:
                    03:ca:d6:a1:e0:d4:3a:07:5e:fe:94:4c:3c:69:06:
                    8e:c5:1a:74:3a:70:d8:a3:27:60:be:5f:d1:ff:e8:
                    8f:c4:da:25:1c:65:54:fe:c9:a3:65:f4:b8:3d:b9:
                    7a:9b:67:96:09:e4:73:16:56:cc:50:d7:3f:02:e1:
                    1f:d6:fe:15:79:9a:57:d9:ba:42:49:11:1b:87:dd:
                    2b:1c:ff:a8:4c:db:fb:55:91:05:1a:f4:3f:b4:14:
                    bc:2d:88:e5:dc:83:a5:04:0a:f5:0c:b8:87:96:c4:
                    35:c1:8e:b7:06:d2:81:11:14:ce:aa:fb:a2:a9:4a:
                    93:18:60:7a:6e:3d:8f:b7:36:36:b0:05:04:e7:58:
                    be:4b:b4:e5:84:4b:b6:3e:ed:a3:bb:9a:5f:ba:e4:
                    97:3e:7c:df:06:66:6b:ef:2c:50:05:b5:96:a4:ee:
                    ea:a9:57:c8:28:fd:28:f8:ec:14:ee:7a:77:92:34:
                    ae:1d:12:8c:ae:7f:d3:74:e0:58:37:f7:34:e2:2c:
                    6e:fd:d3:ef:2a:ab:65:34:bb:85:64:87:3c:23:d7:
                    a2:6f:e6:f4:cb:f5:cb:96:16:a9:ae:4b:50:09:19:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:C1:7A:5C:89:77:B6:9A:52:ED:B2:76:4B:52:A9:13:F1:D2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2224ef34-ff63-3877-be98-9c2cf4332b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:53:8a:fa:f1:52:42:15:32:c4:94:2d:70:b8:2e:c9:ae:15:
         d6:29:e2:80:f1:cd:4a:48:c8:3a:b3:4e:a8:f9:b3:7e:37:13:
         08:ec:85:50:9b:ca:b3:e8:44:0f:43:de:30:f4:e1:20:48:82:
         c6:b8:ce:0a:d0:7d:31:6d:1e:a7:96:98:17:41:3f:70:b2:05:
         fb:2d:b9:20:bb:c6:5b:6f:15:41:c8:a8:d1:51:a1:e8:f9:c9:
         ef:92:53:7d:8f:e4:3b:21:02:4b:e3:db:82:5c:d5:cc:2e:12:
         23:6f:5a:0f:f9:5a:6c:dd:30:9a:c7:82:de:20:df:3b:46:c3:
         f3:c6:74:12:c2:b5:12:e4:93:fc:2c:a3:ef:70:6c:b9:b2:dd:
         08:63:be:93:e4:49:d6:3d:16:a9:f9:f2:19:9b:a5:d3:7a:aa:
         2d:60:0e:e3:88:df:ea:20:ff:4a:66:c4:e2:91:41:49:37:3c:
         fa:ba:85:38:db:0f:b9:e5:76:1a:5b:bc:14:3d:99:fa:7e:0e:
         07:27:fa:08:c2:63:e5:ad:2c:f5:95:47:ad:8d:67:5d:ae:08:
         c6:37:f3:11:41:c6:a5:01:28:5b:2b:ec:89:ea:5f:96:3d:53:
         80:2e:6e:6c:41:50:ae:cb:5e:fd:ec:e0:18:7d:32:a9:34:a1:
         0f:ce:b6:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEL1vi0MwQR4qryTWUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDgyMTE2MDEyOVoXDTIzMTExOTE3MDEyOVowLzEtMCsGA1UEAxMk
Zjg2NDFhNDEtOTdlMS00OGFjLWE2ZjctNjRkZjZmMGM2ZTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplUyqMgK7XU0ZxH6GZCN5FE8+qdwEATbt3JI
btcDytah4NQ6B17+lEw8aQaOxRp0OnDYoydgvl/R/+iPxNolHGVU/smjZfS4Pbl6
m2eWCeRzFlbMUNc/AuEf1v4VeZpX2bpCSREbh90rHP+oTNv7VZEFGvQ/tBS8LYjl
3IOlBAr1DLiHlsQ1wY63BtKBERTOqvuiqUqTGGB6bj2PtzY2sAUE51i+S7TlhEu2
Pu2ju5pfuuSXPnzfBmZr7yxQBbWWpO7qqVfIKP0o+OwU7np3kjSuHRKMrn/TdOBY
N/c04ixu/dPvKqtlNLuFZIc8I9eib+b0y/XLlhaprktQCRnPUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjlwXpciXe2mlLtsnZLUqkT8dLyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMjIyNGVmMzQtZmY2My0z
ODc3LWJlOTgtOWMyY2Y0MzMyYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiGgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJTivrxUkIVMsSULXC4LsmuFdYp4oDxzUpIyDqzTqj5s343EwjshVCb
yrPoRA9D3jD04SBIgsa4zgrQfTFtHqeWmBdBP3CyBfstuSC7xltvFUHIqNFRoej5
ye+SU32P5DshAkvj24Jc1cwuEiNvWg/5WmzdMJrHgt4g3ztGw/PGdBLCtRLkk/ws
o+9wbLmy3QhjvpPkSdY9Fqn58hmbpdN6qi1gDuOI3+og/0pmxOKRQUk3PPq6hTjb
D7nldhpbvBQ9mfp+Dgcn+gjCY+WtLPWVR62NZ12uCMY38xFBxqUBKFsr7InqX5Y9
U4AubmxBUK7LXv3s4Bh9Mqk0oQ/OthM=
-----END CERTIFICATE-----