Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa
File:                     3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa (raw, json)
Hash identifier:          e7Qqm3TXEdVg2pWLeYkW0X5Xoa1phYcYF74YGgHhF0k=
Subject key identifier:   80:F0:01:AA:E2:47:37:38:89:8F:75:ED:CE:2D:BB:BD:AD:62:BB:3C
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842A632774BF35CA9D143C05C00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa
Signing time:             Mon 24 Jul 2023 04:11:08 +0000
ROA not before:           Mon 24 Jul 2023 04:11:08 +0000
ROA not after:            Sun 22 Oct 2023 04:11:08 +0000
asID:                     834
IP address blocks:        200.229.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a6:32:77:4b:f3:5c:a9:d1:43:c0:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 24 04:11:08 2023 GMT
            Not After : Oct 22 04:11:08 2023 GMT
        Subject: CN=b5db0714-544c-442b-a3c0-ef24ee513dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:43:cd:cf:0d:be:00:93:43:e7:68:17:2f:
                    5f:a1:11:ed:eb:b3:6d:c1:55:65:de:ca:47:5c:f3:
                    13:d8:5f:f5:0b:5c:74:59:84:3c:13:d3:80:c3:d2:
                    d5:5d:7a:4e:3d:0e:ac:b9:c5:f8:57:bb:0f:2c:47:
                    cc:3a:4b:ac:e4:db:0a:61:0e:89:82:3c:21:9e:d4:
                    09:5e:6d:68:d2:3f:21:9e:75:e6:4f:1e:0e:90:84:
                    20:ac:29:aa:51:01:4f:28:91:01:64:8a:1f:eb:36:
                    07:0e:03:93:4f:fc:1d:f2:1b:75:a8:97:03:df:09:
                    49:bd:78:79:94:92:fb:0e:28:76:33:71:da:f3:bc:
                    86:49:03:f0:50:6a:99:d3:a1:57:25:ba:cd:ba:63:
                    15:60:cd:23:5b:00:98:cc:94:54:66:e3:72:98:56:
                    dc:73:ed:ae:0a:68:77:36:ca:3f:0c:29:3c:a1:02:
                    c0:11:f5:fc:6d:c4:e0:df:a9:6f:69:b7:8f:93:3b:
                    a0:56:d8:32:45:29:0a:69:a4:1b:69:c8:e6:03:f6:
                    e7:14:82:7e:62:1b:50:4d:ff:fe:c9:bb:67:ee:bb:
                    54:b8:58:90:dd:0d:fc:7f:ac:bd:ca:12:b3:df:5f:
                    35:a4:56:be:c5:6e:78:22:75:07:1a:fd:25:b3:93:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F0:01:AA:E2:47:37:38:89:8F:75:ED:CE:2D:BB:BD:AD:62:BB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3fb2cd2f-92e2-356b-9a04-a6e1b62d8d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:15:66:86:20:76:66:c2:3e:bc:c4:7b:bd:f5:86:00:8e:
         f6:d0:f6:81:1c:7b:2f:fc:3a:95:3c:cf:a8:bc:66:02:9c:e5:
         38:d3:a1:5b:2b:23:11:d8:9c:06:3f:0b:e5:5b:6c:5d:a2:0a:
         04:73:c5:0d:04:21:a5:05:45:f1:b8:30:71:fc:c7:db:30:e3:
         e9:74:be:9c:44:bc:50:d5:fe:b9:35:3d:ad:82:6e:57:c3:15:
         e4:17:ae:1c:3e:20:a7:27:e6:40:ac:03:0a:07:79:6f:3e:b6:
         7a:21:56:8b:3f:d4:66:e7:a8:55:71:df:42:31:aa:5a:ed:93:
         46:6d:ff:04:8d:22:d6:1b:84:13:35:fa:d3:c8:41:c9:9b:eb:
         87:12:a0:0f:4e:a5:b5:41:30:a9:82:a4:88:03:ad:9f:6e:aa:
         dc:9c:be:ac:cb:da:9f:bb:25:a8:b4:6b:69:83:92:d4:c3:10:
         c2:da:fd:3c:7d:76:18:2c:c4:1a:c2:1d:34:7d:62:ee:df:05:
         22:3f:68:c0:08:bc:ba:90:7f:d9:fd:91:38:ee:96:ef:2d:27:
         db:50:f1:d3:d7:fc:ef:01:8b:34:f4:fb:5e:c4:38:09:9b:e5:
         12:5a:ee:30:3f:69:b2:f9:08:47:f1:62:df:f7:f5:97:fe:3a:
         fd:07:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 30 03:50:31 2023 by rpki-client on console-fra.rpki-client.org