Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/38492781-9350-305d-8dd6-b98f95a7b0c8.roa
File:                     38492781-9350-305d-8dd6-b98f95a7b0c8.roa (raw, json)
Hash identifier:          rAIOzEQDxZGMeyqPQj3umcY6++e76Wva/hpm49IpOU0=
Subject key identifier:   20:0B:87:E8:D9:35:EF:F4:49:23:29:10:76:E1:A3:D8:92:A3:8F:E7
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584188BFB6DB8F48D25A978EC200
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/38492781-9350-305d-8dd6-b98f95a7b0c8.roa
Signing time:             Fri 16 Sep 2022 20:27:08 +0000
ROA not before:           Fri 16 Sep 2022 20:27:08 +0000
ROA not after:            Tue 15 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        140.228.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:88:bf:b6:db:8f:48:d2:5a:97:8e:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 16 20:27:08 2022 GMT
            Not After : Jul 15 04:00:00 2025 GMT
        Subject: CN=6e13f0c1-1341-4c46-a383-eee6cb629c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:c4:a7:d7:6f:25:8d:8d:a9:74:56:db:00:
                    36:a9:33:9c:1b:f5:4a:c7:3d:da:fa:65:6a:a2:77:
                    4f:19:af:44:63:ed:70:45:8a:4d:94:27:ba:a1:36:
                    e6:d0:1e:46:7a:22:fa:8f:7f:bd:6f:3a:84:9f:61:
                    a8:76:93:7f:a9:5b:5e:e3:98:f0:01:da:8f:d7:a9:
                    54:6e:49:2c:3e:f8:b7:96:aa:e4:59:95:e0:a8:00:
                    a7:a8:1e:c1:16:f1:5c:b0:37:af:b0:a8:d0:c7:2f:
                    85:7e:b1:3c:b4:95:3a:44:ee:03:ff:aa:92:38:ab:
                    49:73:5b:02:13:8d:46:05:9d:e0:c0:77:35:3e:b2:
                    dd:10:72:fd:d0:84:09:c6:47:dc:05:92:ad:94:59:
                    d9:09:0f:33:7f:67:55:99:46:3c:38:af:ee:3c:0f:
                    9a:b5:d3:5d:c0:96:a6:59:db:3e:a3:f5:de:d6:05:
                    37:07:2b:2c:42:33:10:62:f3:fa:0b:73:e4:48:d2:
                    78:de:06:2e:b3:63:08:d8:a9:5c:68:49:84:16:3d:
                    fe:a4:72:b0:47:66:6f:73:52:59:b4:1e:50:93:9f:
                    91:59:4b:85:b0:69:96:57:ca:a0:52:c3:19:64:fa:
                    72:55:6d:12:76:2a:75:23:15:9d:a8:30:ca:d2:e7:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0B:87:E8:D9:35:EF:F4:49:23:29:10:76:E1:A3:D8:92:A3:8F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/38492781-9350-305d-8dd6-b98f95a7b0c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:08:4a:d9:af:ef:33:49:67:82:68:5e:34:65:f8:6d:f9:1d:
         fb:78:55:46:b9:da:f2:c3:4a:23:e6:0a:24:4f:99:83:d4:75:
         0f:c6:94:cc:f1:33:2f:96:50:2e:11:a5:9b:ab:d5:2c:8d:ee:
         b8:45:cc:5f:7f:d4:20:90:09:70:f6:24:89:6e:89:44:bf:fb:
         89:95:ae:e6:88:aa:d7:99:13:8b:1a:d9:5d:7b:fc:f7:78:6a:
         5b:02:1c:7d:ba:c1:39:9c:ec:b9:01:78:fc:f1:d7:6f:67:a8:
         0c:bf:ac:9e:39:9e:9b:7f:f6:3a:f6:e5:c3:0c:04:af:01:9f:
         19:59:c7:9f:3a:c8:69:5f:4c:0b:c4:d3:61:65:b6:f9:38:b5:
         fe:a0:f3:f3:dc:d2:bc:ad:97:9a:ff:97:1f:c8:a3:1f:d5:86:
         4b:92:9a:15:da:fb:4c:5f:9e:7f:49:03:c3:81:c5:3e:75:11:
         23:6c:b1:32:1c:84:a6:56:ae:36:2f:36:5a:4a:f2:ab:70:82:
         7e:92:fc:c6:84:87:62:cd:57:4b:b3:06:0c:5b:77:f0:45:fd:
         25:d9:bb:3a:0a:76:d8:7c:70:0f:d4:07:d2:bf:46:79:b1:11:
         86:d7:c2:b2:7b:68:d4:92:a2:82:b1:54:da:98:3a:0c:e9:b0:
         1a:eb:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----