Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/37ade5e4-503d-3c5a-8ca0-a5aaa5eb397d.roa
File:                     37ade5e4-503d-3c5a-8ca0-a5aaa5eb397d.roa (raw, json)
Hash identifier:          ZHodKqZdsE6mEezAhWE/EZlINXfuAVu3B1UOez1Zi58=
Subject key identifier:   6A:C2:F5:CC:21:DA:C8:BA:F1:FF:B4:50:D6:21:B3:30:41:C7:83:B8
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858433CD63E59DFEA68D00529B640
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/37ade5e4-503d-3c5a-8ca0-a5aaa5eb397d.roa
Signing time:             Sat 16 Sep 2023 03:12:22 +0000
ROA not before:           Sat 16 Sep 2023 03:12:22 +0000
ROA not after:            Fri 15 Dec 2023 04:12:22 +0000
asID:                     834
IP address blocks:        140.228.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3c:d6:3e:59:df:ea:68:d0:05:29:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 16 03:12:22 2023 GMT
            Not After : Dec 15 04:12:22 2023 GMT
        Subject: CN=009a1382-6ab3-4367-bba0-7ad9e6a776a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:da:6b:0a:bf:53:7b:24:af:f5:53:ff:1d:
                    57:84:49:d4:e8:17:2d:94:40:b2:06:15:28:6a:76:
                    79:12:61:d3:45:56:66:11:5f:ac:d9:ee:3f:96:7a:
                    77:ce:0d:6c:cd:c1:ad:a9:c5:a6:ad:f3:5d:7a:92:
                    b5:fd:9a:8b:53:54:22:b0:85:45:7b:58:d1:19:de:
                    f0:97:0e:88:db:77:cb:62:c5:95:71:44:28:e2:43:
                    21:61:24:ed:e5:fd:4e:44:0b:f7:6d:10:13:63:84:
                    78:fb:2a:0d:7d:57:d4:cb:4f:09:77:2f:93:be:24:
                    28:63:ea:4c:fa:65:4f:3c:f1:79:16:a3:33:63:8d:
                    9a:c2:7a:ba:35:f4:06:c5:ad:58:c4:99:f9:3e:f4:
                    98:fa:2d:8b:e8:f4:a2:97:df:2c:9e:58:00:e6:09:
                    c4:3e:0d:fa:3c:8b:e6:42:a3:50:e1:63:39:59:c6:
                    7d:c8:1d:66:ae:9b:de:5b:24:f8:43:72:ea:9f:07:
                    42:54:22:d8:4f:d5:de:96:7c:30:79:2f:ee:71:9f:
                    4c:5b:36:46:29:45:aa:c7:e2:70:3f:a2:24:a6:17:
                    9d:69:f2:03:d5:ff:2c:c2:2b:e7:94:07:f7:44:65:
                    c5:b5:f6:e1:a3:b9:5c:0a:07:99:47:fc:b0:d3:c3:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C2:F5:CC:21:DA:C8:BA:F1:FF:B4:50:D6:21:B3:30:41:C7:83:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/37ade5e4-503d-3c5a-8ca0-a5aaa5eb397d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:6f:9e:0e:9b:e3:39:4d:b4:63:a8:da:36:2f:d8:08:10:
         6a:60:a4:89:cf:7b:86:e8:0d:0e:3c:01:22:59:4c:4f:9d:8e:
         bb:4a:72:23:fb:39:06:3e:97:6e:20:72:04:58:7a:be:9a:0d:
         a9:57:4b:96:4f:6b:d1:a4:ec:74:9e:ac:d8:1e:fc:4f:97:b6:
         17:bd:2d:43:05:4f:15:1d:3c:5b:b6:e3:37:79:c4:13:b5:64:
         fc:d4:99:5c:95:5c:9b:3b:85:66:83:27:52:23:66:a3:ef:74:
         5d:e5:98:51:98:a9:10:15:20:1d:ed:48:01:2c:e9:a3:55:f4:
         09:4a:15:d4:3d:69:54:85:5f:13:da:bf:cb:e6:4f:13:54:9b:
         73:9e:e2:14:18:61:8c:3d:32:b8:f1:bd:f7:b6:25:6b:a7:93:
         bd:31:68:4f:85:e9:97:bd:91:7e:56:d6:0d:81:bd:29:5f:21:
         63:1e:48:40:7a:de:1e:c5:d8:6c:89:34:3c:4f:32:a0:4d:d0:
         f2:28:4f:c1:be:a0:1c:90:44:f1:26:57:98:52:56:de:b5:35:
         dd:16:22:a7:1f:1d:99:f3:12:0e:4d:ca:87:55:00:3d:5a:57:
         58:33:56:8c:91:c5:db:67:b3:7c:ab:90:d2:35:ec:ef:8f:55:
         13:68:3d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----