Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a1c840fd-bdae-3918-8b0b-e0a619877065.roa
File:                     a1c840fd-bdae-3918-8b0b-e0a619877065.roa (raw, json)
Hash identifier:          Qlz4SAGdFRgMXTuLIQcav2EajAikGrBH9Epcz2U89H8=
Subject key identifier:   1B:8D:7C:B6:D7:BC:18:02:57:04:72:FB:7A:EE:45:69:EF:48:41:1D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584304C940B5911FF14B85415F80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a1c840fd-bdae-3918-8b0b-e0a619877065.roa
Signing time:             Sun 27 Aug 2023 01:20:56 +0000
ROA not before:           Sun 27 Aug 2023 01:20:56 +0000
ROA not after:            Sat 25 Nov 2023 02:20:56 +0000
asID:                     35913
IP address blocks:        162.33.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:04:c9:40:b5:91:1f:f1:4b:85:41:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 27 01:20:56 2023 GMT
            Not After : Nov 25 02:20:56 2023 GMT
        Subject: CN=643c344e-c0cf-40dd-a446-29a37e3663f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:a0:b0:67:d1:5a:02:dc:39:d0:68:da:ad:
                    97:c6:43:c0:68:2f:81:c9:a0:3d:ce:ec:61:e7:dc:
                    06:c9:a4:68:f8:ba:c3:1f:a7:73:9f:89:ae:a0:f6:
                    a3:48:0c:8b:4f:af:fe:a7:69:15:63:a9:98:16:40:
                    08:86:dd:8b:f6:ae:82:01:f0:b6:21:85:b9:83:94:
                    e7:95:a9:fb:d8:46:0f:6c:30:a7:1e:b6:0c:9c:d7:
                    c4:84:b5:f0:3c:82:bc:1d:15:bd:7f:32:6b:ae:ee:
                    bf:45:c8:cb:55:d1:85:bb:e9:02:98:e9:f9:72:f6:
                    ab:c4:04:37:ae:54:d6:ab:70:8d:76:08:6e:e1:8e:
                    9f:81:2f:c4:21:bc:95:e0:07:af:c4:21:bc:cd:50:
                    3d:e5:ad:d4:57:28:34:7c:1f:b4:2d:f9:c2:44:db:
                    51:70:60:b1:5d:77:4b:be:0c:92:d9:fe:f5:b5:97:
                    2f:45:c6:26:5a:2d:29:0d:a7:84:14:35:6f:fe:60:
                    e7:99:9e:4e:79:17:99:25:ad:be:99:35:2d:08:d4:
                    84:dc:89:1e:ad:5f:3b:dc:f6:7e:ed:40:38:17:92:
                    ae:99:6e:58:d7:22:b6:d2:c0:32:ec:4f:73:96:55:
                    74:05:5a:bc:da:42:cb:83:df:ea:31:63:fd:00:5a:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8D:7C:B6:D7:BC:18:02:57:04:72:FB:7A:EE:45:69:EF:48:41:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a1c840fd-bdae-3918-8b0b-e0a619877065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:56:94:5a:a2:77:be:a6:66:80:b7:d6:bc:b2:04:c2:03:75:
         ac:ef:1b:fa:a2:89:07:e3:a4:d5:c8:2e:cd:9d:17:a4:1f:30:
         82:9f:0a:bd:bc:d3:60:d3:fc:84:53:49:51:fb:e5:a1:a0:65:
         c4:a8:21:dc:40:6c:fb:90:25:83:8b:af:69:55:3c:9e:25:e7:
         81:c4:a6:1c:52:0f:75:48:2e:be:34:64:a4:36:6c:b7:e0:d5:
         e5:a3:98:55:51:b4:ef:09:cf:e0:f7:87:36:fb:8a:81:91:8a:
         74:78:1f:31:6a:74:5e:bb:c3:47:ed:45:e4:ea:54:85:64:2a:
         3d:e1:52:b9:ea:41:1a:58:20:80:61:34:26:e1:d5:c1:88:6c:
         9c:86:b1:a2:33:3c:fd:f9:e3:2c:2d:8c:38:96:db:92:0e:de:
         f6:a3:7f:81:40:34:b0:d6:f4:f0:a2:b1:37:cf:2f:ab:83:70:
         5d:53:f0:c1:92:a9:aa:6d:ac:4d:64:41:fc:dc:f6:9a:ae:78:
         50:12:92:ec:2b:3b:51:4a:a3:49:c9:30:a5:ea:17:70:12:40:
         74:bc:49:3b:d6:fc:b7:57:73:84:9b:9e:03:cc:26:f2:b4:24:
         60:37:b2:e9:38:f2:49:af:d7:0f:6a:fe:d5:fd:2d:7c:c5:0f:
         23:ff:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----