Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/95e12238-3a32-3f16-a8fa-d3884d25800a.roa
File:                     95e12238-3a32-3f16-a8fa-d3884d25800a.roa (raw, json)
Hash identifier:          FCiIok0iO4kn87srH9Sl6XN9F/zOP0jXswIJTsbsrQs=
Subject key identifier:   E6:AF:A5:E3:F6:F2:1B:60:73:97:73:D6:A7:49:72:0D:97:7F:34:6C
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858440E28DEB5061F40734A1A7280
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/95e12238-3a32-3f16-a8fa-d3884d25800a.roa
Signing time:             Thu 30 Nov 2023 02:42:48 +0000
ROA not before:           Thu 30 Nov 2023 02:42:48 +0000
ROA not after:            Wed 28 Feb 2024 02:42:48 +0000
asID:                     834
IP address blocks:        140.228.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:28:de:b5:06:1f:40:73:4a:1a:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov 30 02:42:48 2023 GMT
            Not After : Feb 28 02:42:48 2024 GMT
        Subject: CN=b8310b58-4f3c-44b1-8def-3b76b91c9bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:43:52:ed:cb:41:7e:a0:8b:4f:b1:fd:3e:
                    55:41:e7:12:90:d1:37:da:9c:34:fe:ff:bb:23:1e:
                    f4:39:19:f3:7b:1d:ab:e1:01:cb:97:84:3a:42:b6:
                    49:b4:aa:c9:03:33:f1:4a:86:d4:12:7f:2a:e7:2c:
                    4f:56:c4:15:25:07:f8:50:87:fc:d5:a3:9f:ae:05:
                    cf:79:29:0a:f4:2d:ec:a4:15:c1:20:76:32:36:3c:
                    c6:a2:22:d3:28:e0:36:8c:4b:77:91:8c:71:1d:b7:
                    47:c6:98:02:70:c7:55:e3:8a:14:82:68:f7:df:60:
                    ab:b3:17:a8:b5:16:30:51:c0:64:3f:49:52:9a:d7:
                    6c:ca:db:eb:0b:43:50:16:e8:2d:76:b4:b9:f8:4e:
                    0f:0b:c1:74:55:e9:fa:5e:7f:44:68:7a:3a:80:7b:
                    c6:c2:ff:d6:49:90:c0:69:57:c5:9b:8c:3b:32:e9:
                    68:cf:83:2b:d2:82:eb:4b:01:0d:9c:f7:51:65:85:
                    eb:36:4f:aa:01:39:f7:3f:9b:57:80:af:11:72:e0:
                    3a:2c:b0:1e:42:95:de:cb:56:e6:d0:03:32:7e:eb:
                    1e:fb:d5:d5:d3:42:2b:cc:83:9f:f2:7b:1a:ed:bf:
                    c4:4e:aa:a9:0a:11:e6:b7:21:6f:71:50:18:93:44:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AF:A5:E3:F6:F2:1B:60:73:97:73:D6:A7:49:72:0D:97:7F:34:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/95e12238-3a32-3f16-a8fa-d3884d25800a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:31:c0:76:c3:cf:00:5c:ec:d2:da:5c:ee:ff:22:e3:77:e2:
         8d:9c:da:2b:af:c4:67:8b:79:91:71:6d:f1:99:2f:08:1e:eb:
         14:b4:16:0c:85:f1:07:27:1c:88:84:ff:b7:21:22:99:94:48:
         9a:a7:ae:86:12:f9:cb:08:e3:32:ea:3e:42:fd:7b:6f:3b:61:
         aa:2b:f4:04:47:d2:1a:12:e3:ce:e0:31:c0:26:43:0e:b7:3e:
         b3:ab:c5:c4:63:a3:49:f6:8a:60:8a:29:13:6a:c9:4d:bb:92:
         1e:55:d0:92:b7:c2:28:10:8c:15:11:bd:bd:96:38:d2:82:3f:
         ec:ff:91:88:83:80:c0:58:ec:50:d1:5c:52:d4:e4:4d:8d:79:
         61:49:78:87:b7:dc:25:7a:28:d2:ff:29:fe:33:77:0a:c8:c0:
         b5:de:58:78:cd:5c:4a:97:1c:17:98:31:c4:18:0b:bf:c2:92:
         bf:70:26:51:95:8a:45:be:23:a8:96:c2:dc:6a:c2:af:ec:a2:
         37:ef:f0:8a:72:4d:37:5c:b9:83:49:14:a6:3f:ea:b5:e6:2e:
         8f:b0:5d:10:50:97:4b:dc:41:ee:ef:10:0f:e9:2a:aa:56:ce:
         7d:0c:ad:c7:27:67:de:0d:e9:45:b9:d2:4a:7c:e6:53:0c:07:
         9e:b8:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 17:17:10 2023 by rpki-client on console-fra.rpki-client.org