Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/33cdf437-9ca7-36ef-9077-714d2f316eee.roa
File:                     33cdf437-9ca7-36ef-9077-714d2f316eee.roa (raw, json)
Hash identifier:          nwCJN1a0yqVO2UaEro9jlfPF18HajfS+w6lt/+bZlvw=
Subject key identifier:   8D:77:B1:1F:0F:3F:7B:F0:06:27:EA:BE:C3:24:B7:2D:EE:DA:EA:F5
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584235111D7B5CD1246AA0BDE6C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/33cdf437-9ca7-36ef-9077-714d2f316eee.roa
Signing time:             Tue 13 Jun 2023 15:37:35 +0000
ROA not before:           Tue 13 Jun 2023 15:37:35 +0000
ROA not after:            Mon 11 Sep 2023 15:37:35 +0000
asID:                     834
IP address blocks:        167.94.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:11:1d:7b:5c:d1:24:6a:a0:bd:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 13 15:37:35 2023 GMT
            Not After : Sep 11 15:37:35 2023 GMT
        Subject: CN=b7b8f942-6d2b-4884-a40d-b5e7dca71854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:94:3a:eb:31:1c:09:47:ff:9b:4f:ec:22:
                    f9:f0:18:32:e9:be:f8:df:05:37:1e:39:28:0c:bd:
                    b2:5e:da:a7:0f:4f:be:88:fb:3a:5a:fb:61:6a:a9:
                    8a:0b:c8:1c:0c:89:77:95:11:0b:1c:ae:eb:17:e5:
                    3a:f0:09:89:aa:8c:e4:6a:8f:33:6b:ca:ab:fa:60:
                    d0:5b:c8:8d:e4:57:b5:7e:12:3d:4a:77:c3:06:82:
                    b2:d0:88:57:c0:a6:d0:0e:70:df:10:35:d2:07:ab:
                    7a:70:fd:0d:e1:6f:cf:09:22:39:58:ba:5a:c1:7e:
                    97:50:af:cc:26:e3:d9:52:40:d2:fc:2d:5b:43:91:
                    f9:c9:42:56:70:ec:1a:00:87:0b:8b:c2:8d:6d:0a:
                    51:2d:ce:3b:aa:b5:4d:59:17:4c:49:38:a7:9c:02:
                    e6:4d:33:ca:4e:f0:8b:62:50:12:cd:d0:ba:a6:84:
                    5c:25:8e:d7:33:29:30:14:7c:78:95:9b:cd:42:02:
                    d9:2a:2b:5f:a9:3f:c2:fa:8f:10:5b:ba:ef:aa:b3:
                    dc:79:a3:22:ad:a0:42:2f:1a:60:1b:3d:b1:9f:7d:
                    65:09:92:ee:08:d6:ec:5a:33:2e:a6:4c:b9:fd:dd:
                    13:82:6d:c0:f2:02:0b:d8:f6:88:c6:bc:ff:7d:93:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:77:B1:1F:0F:3F:7B:F0:06:27:EA:BE:C3:24:B7:2D:EE:DA:EA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/33cdf437-9ca7-36ef-9077-714d2f316eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:23:49:4d:d9:26:8c:5c:06:af:06:87:2e:65:19:2f:53:70:
         e8:00:dc:3a:33:26:34:7b:42:24:b0:e0:64:36:26:f8:20:cb:
         29:dc:44:37:2b:12:72:f1:10:b2:4a:15:2f:38:d6:8f:c1:f7:
         58:ce:a2:9d:e3:26:6a:2e:f5:3e:66:5e:c0:d3:1e:97:27:ef:
         55:0d:64:4b:2a:bb:e8:e6:bc:76:3d:30:44:72:0b:2b:24:d6:
         06:90:14:ca:d6:d1:db:3f:ae:ab:ca:b3:5f:77:5d:4e:05:c7:
         6e:48:8b:5d:0e:ba:b7:44:79:04:74:24:1d:de:73:51:54:1f:
         e6:7d:c0:ee:94:e6:a1:90:bc:06:de:2f:b4:44:ec:0e:3f:2c:
         f8:fc:2b:c6:8b:b1:2e:45:20:af:97:bb:01:06:eb:b6:72:71:
         0e:d1:b8:b1:0a:35:58:ff:51:a4:84:5f:42:7f:88:20:3a:80:
         31:74:37:aa:fc:8c:1a:de:35:b7:6f:20:7b:a6:e3:8f:42:b8:
         58:4f:bc:22:bb:c8:85:22:3d:81:66:02:41:aa:c6:9c:72:b7:
         cd:3c:68:a6:57:ed:6e:36:ea:9c:55:35:73:ae:a0:3f:bd:2d:
         fe:cb:dd:78:d6:a4:ee:13:7b:53:d2:7f:07:d2:60:ca:36:83:
         6c:8b:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----