Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c7da7884-a802-33c6-af9b-f68efcfca513.roa
File:                     c7da7884-a802-33c6-af9b-f68efcfca513.roa (raw, json)
Hash identifier:          WU4ORnCDG43xENJiwLEeHv/VhOJH3tfX0KVRO583Rdg=
Subject key identifier:   4D:95:35:5C:8D:15:F3:20:1C:B8:86:31:BA:B8:CC:B2:62:84:59:7D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858412BFD511308F885FCAE410AB0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c7da7884-a802-33c6-af9b-f68efcfca513.roa
Signing time:             Wed 08 Mar 2023 12:00:00 +0000
ROA not before:           Wed 08 Mar 2023 12:00:00 +0000
ROA not after:            Fri 09 Mar 2029 05:00:00 +0000
asID:                     834
IP address blocks:        149.19.197.0/24 maxlen: 24
                          200.229.25.0/24 maxlen: 24
                          200.229.26.0/24 maxlen: 24
                          200.229.27.0/24 maxlen: 24
                          200.229.28.0/24 maxlen: 24
                          200.229.29.0/24 maxlen: 24
                          200.229.30.0/24 maxlen: 24
                          200.229.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:2b:fd:51:13:08:f8:85:fc:ae:41:0a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar  8 12:00:00 2023 GMT
            Not After : Mar  9 05:00:00 2029 GMT
        Subject: CN=a3701f20-b232-4c81-8fa1-312fc09ba06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:8f:a4:a6:96:98:23:cf:7d:5c:f7:33:a4:
                    08:43:9f:44:b2:21:64:6f:34:1e:7c:34:b4:54:97:
                    37:58:e2:22:3f:db:8f:e1:bf:fd:55:ed:0e:d1:0a:
                    9d:4f:fd:b1:4b:fa:10:bd:a6:7a:71:ee:25:d7:30:
                    2e:c8:5a:08:a8:1e:ea:1d:16:58:f9:e3:70:86:92:
                    07:85:2b:58:fa:ff:e1:8c:fd:cf:20:c7:bd:65:ac:
                    57:73:7d:21:cf:a4:eb:0e:9a:c3:3d:8b:48:31:1e:
                    90:f8:fb:81:2b:45:46:19:f8:e9:92:5d:5e:96:53:
                    c1:35:a9:1f:a1:3a:22:51:05:af:b0:ef:01:6f:6c:
                    96:a2:49:39:46:7c:8d:ed:7f:9f:50:93:7c:99:a0:
                    7d:24:bc:9a:47:10:92:27:8f:6f:25:b8:34:df:19:
                    74:b1:6b:26:1c:46:26:f6:01:34:9a:b7:d8:47:2d:
                    93:8e:a6:cf:5c:e0:f1:02:37:3f:7b:dd:b3:6e:86:
                    e2:ac:74:7b:8d:7d:aa:23:d9:c4:41:73:f9:71:15:
                    43:a8:29:00:65:b1:c1:70:41:33:1b:3e:1b:ea:20:
                    87:79:d1:ff:e0:11:2d:e8:c6:73:20:13:33:80:df:
                    1e:77:f7:c8:96:a2:ae:fb:e3:98:f9:ca:ab:0c:04:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:35:5C:8D:15:F3:20:1C:B8:86:31:BA:B8:CC:B2:62:84:59:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c7da7884-a802-33c6-af9b-f68efcfca513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.197.0/24
                  200.229.25.0-200.229.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:66:ad:66:28:17:90:86:53:be:7c:60:1d:d6:f2:a0:c0:e8:
         31:ce:9e:09:f3:e6:6e:3f:81:88:e3:ca:ee:ff:13:b8:d5:26:
         15:1a:f1:de:7b:7a:b2:37:13:1e:fa:bc:95:2e:3a:2b:a4:73:
         26:98:d9:7d:c2:73:9f:37:ca:84:37:63:8e:68:c5:42:8b:3f:
         0e:31:f0:8b:65:af:e2:c6:ac:f3:2f:30:01:e0:71:83:da:71:
         06:3b:4c:e2:f4:33:c3:dc:a5:e4:ca:6d:91:00:41:32:b4:8f:
         e8:61:47:ed:13:0d:55:4a:03:0b:47:2f:e9:1a:74:42:9f:60:
         87:7a:88:6e:37:be:dd:b0:f8:7e:c1:a1:64:a5:4d:18:f5:ea:
         30:56:fa:c3:94:eb:40:ca:47:6f:12:5e:77:b9:74:65:f1:85:
         d8:4f:7e:4a:c3:c8:78:58:45:ce:46:56:7d:16:eb:5f:e2:b3:
         9d:6b:42:38:fa:04:31:9c:73:f1:1f:82:49:38:f2:00:18:3f:
         99:31:b9:dc:5f:d9:21:a4:e7:a5:9d:9f:4b:c7:10:04:7d:33:
         da:02:8e:02:1c:e5:74:01:71:22:fa:f9:95:d1:f3:38:4e:9c:
         9f:9e:e3:cc:ed:fc:1a:6e:00:df:d9:4b:e9:35:85:c4:a5:63:
         66:bf:0d:0b
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEEr/VETCPiF/K5BCrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDMwODEyMDAwMFoXDTI5MDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
YTM3MDFmMjAtYjIzMi00YzgxLThmYTEtMzEyZmMwOWJhMDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIOPpKaWmCPPfVz3M6QIQ59EsiFkbzQefDS0
VJc3WOIiP9uP4b/9Ve0O0QqdT/2xS/oQvaZ6ce4l1zAuyFoIqB7qHRZY+eNwhpIH
hStY+v/hjP3PIMe9ZaxXc30hz6TrDprDPYtIMR6Q+PuBK0VGGfjpkl1ellPBNakf
oToiUQWvsO8Bb2yWokk5RnyN7X+fUJN8maB9JLyaRxCSJ49vJbg03xl0sWsmHEYm
9gE0mrfYRy2TjqbPXODxAjc/e92zbobirHR7jX2qI9nEQXP5cRVDqCkAZbHBcEEz
Gz4b6iCHedH/4BEt6MZzIBMzgN8ed/fIlqKu++OY+cqrDAQp/wIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFE2VNVyNFfMgHLiGMbq4zLJihFl9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYzdkYTc4ODQtYTgwMi0z
M2M2LWFmOWItZjY4ZWZjZmNhNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAlRPFMAwD
BADI5RkDBAXI5QAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEARGatZigXkIZTvnxgHdbyoMDoMc6eCfPmbj+B
iOPK7v8TuNUmFRrx3nt6sjcTHvq8lS46K6RzJpjZfcJznzfKhDdjjmjFQos/DjHw
i2Wv4sas8y8wAeBxg9pxBjtM4vQzw9yl5MptkQBBMrSP6GFH7RMNVUoDC0cv6Rp0
Qp9gh3qIbje+3bD4fsGhZKVNGPXqMFb6w5TrQMpHbxJed7l0ZfGF2E9+SsPIeFhF
zkZWfRbrX+KznWtCOPoEMZxz8R+CSTjyABg/mTG53F/ZIaTnpZ2fS8cQBH0z2gKO
AhzldAFxIvr5ldHzOE6cn57jzO38Gm4A39lL6TWFxKVjZr8NCw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-ams.rpki-client.org