Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f2b73142-228a-3664-b20a-76c617aa81db.roa
File:                     f2b73142-228a-3664-b20a-76c617aa81db.roa (raw, json)
Hash identifier:          DGePlsfAJxOqNpSHMsvBhG0yz5jtVms4Rxizsl4p/wA=
Subject key identifier:   28:E0:D7:3C:2E:A6:BF:09:F1:9F:7F:F0:4B:5D:07:06:33:20:B3:CE
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285841EC8B7C4AAAF10BF395942F40
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f2b73142-228a-3664-b20a-76c617aa81db.roa
Signing time:             Thu 18 May 2023 16:10:08 +0000
ROA not before:           Thu 18 May 2023 16:10:08 +0000
ROA not after:            Wed 16 Aug 2023 16:10:08 +0000
asID:                     834
IP address blocks:        217.20.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ec:8b:7c:4a:aa:f1:0b:f3:95:94:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 18 16:10:08 2023 GMT
            Not After : Aug 16 16:10:08 2023 GMT
        Subject: CN=08bcce0a-5079-492f-808e-a7b7d0c02893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:46:e1:7c:74:6a:a3:5f:8a:38:f9:2f:0f:
                    d3:53:a6:fe:42:8e:07:45:08:40:c7:b2:b6:a8:d7:
                    18:9a:87:f5:9c:56:21:63:07:4d:57:1d:57:13:af:
                    47:82:60:5a:46:f7:a3:95:bc:62:b0:14:1a:55:d8:
                    78:6e:dc:ab:97:c8:0f:91:e0:45:98:4b:9b:b6:7a:
                    44:dd:6f:0f:39:b3:f0:17:b0:a1:f4:fc:af:15:54:
                    bb:be:da:29:93:8b:7c:a1:22:c1:15:ad:01:48:ef:
                    5f:52:19:2b:fd:9d:4a:b9:bc:23:06:8f:1f:91:3d:
                    79:0c:e1:25:f0:69:53:cd:22:f2:ee:f3:71:96:88:
                    a2:e3:8b:7b:2b:c3:a3:8d:18:63:03:e0:0b:39:03:
                    47:68:9f:ff:c8:a8:74:96:ac:31:02:5c:84:bc:ab:
                    64:23:c3:3c:2a:5e:c1:7d:2f:b1:7b:3e:4a:29:31:
                    38:48:e9:17:57:8c:97:01:c5:2e:66:26:16:1a:4a:
                    68:0b:07:5a:c3:5f:5f:87:bd:fa:22:3f:9d:60:2d:
                    36:c1:35:e6:ef:4f:25:1e:77:6e:1b:a5:ca:c5:14:
                    23:93:91:37:e7:f0:f3:76:1e:de:9c:9b:08:f4:b3:
                    03:a2:f3:c7:08:f8:a6:e5:10:d3:b7:2a:d0:03:ac:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E0:D7:3C:2E:A6:BF:09:F1:9F:7F:F0:4B:5D:07:06:33:20:B3:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f2b73142-228a-3664-b20a-76c617aa81db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.20.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:0d:fd:b5:19:6a:38:4b:de:61:c3:a9:8f:ca:9f:55:7e:
         05:91:ec:06:40:52:61:40:74:81:ee:f4:b2:ca:06:88:64:f7:
         2b:a8:76:4a:3f:36:7a:cf:ff:7f:16:98:d9:1c:42:93:3c:5a:
         b6:97:40:ae:dd:62:7f:fc:55:a8:24:c7:84:ff:de:1d:63:72:
         95:56:f0:53:11:06:04:1b:7a:83:6a:b2:24:78:08:b5:be:fa:
         57:d0:3e:0a:8a:76:b0:1d:d4:7a:68:b5:8a:06:4e:f0:ae:0e:
         56:1d:8e:2b:aa:7a:20:b1:97:cd:02:27:f8:a2:d8:a0:0f:49:
         69:e8:65:6e:46:ab:d4:be:1c:eb:92:23:73:65:ee:2f:53:42:
         92:40:5a:4e:e1:6a:dd:55:81:ee:71:94:36:1a:50:90:51:0c:
         2b:16:fb:99:41:c6:6c:35:ce:57:bf:6e:48:8f:94:a6:dc:36:
         c1:66:c6:f9:20:3d:a4:e1:54:7b:1e:c2:f5:f8:8a:5a:5f:b1:
         74:91:76:97:94:bc:04:52:b3:0e:d1:b5:d7:8c:e6:39:5c:2c:
         14:d8:36:52:7e:d8:3d:66:12:0a:31:eb:c4:0c:fb:e7:e7:fa:
         d7:99:ff:2e:91:76:ce:d0:4d:19:1d:4c:92:a3:61:ce:16:52:
         e3:2f:57:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHsi3xKqvEL85WUL0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDUxODE2MTAwOFoXDTIzMDgxNjE2MTAwOFowLzEtMCsGA1UEAxMk
MDhiY2NlMGEtNTA3OS00OTJmLTgwOGUtYTdiN2QwYzAyODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYNG4Xx0aqNfijj5Lw/TU6b+Qo4HRQhAx7K2
qNcYmof1nFYhYwdNVx1XE69HgmBaRvejlbxisBQaVdh4btyrl8gPkeBFmEubtnpE
3W8PObPwF7Ch9PyvFVS7vtopk4t8oSLBFa0BSO9fUhkr/Z1KubwjBo8fkT15DOEl
8GlTzSLy7vNxloii44t7K8OjjRhjA+ALOQNHaJ//yKh0lqwxAlyEvKtkI8M8Kl7B
fS+xez5KKTE4SOkXV4yXAcUuZiYWGkpoCwdaw19fh736Ij+dYC02wTXm708lHndu
G6XKxRQjk5E35/Dzdh7enJsI9LMDovPHCPim5RDTtyrQA6xk9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjg1zwupr8J8Z9/8EtdBwYzILPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZjJiNzMxNDItMjI4YS0z
NjY0LWIyMGEtNzZjNjE3YWE4MWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RTxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGG5Df21GWo4S95hw6mPyp9VfgWR7AZAUmFAdIHu9LLKBohk9yuodko/
NnrP/38WmNkcQpM8WraXQK7dYn/8Vagkx4T/3h1jcpVW8FMRBgQbeoNqsiR4CLW+
+lfQPgqKdrAd1HpotYoGTvCuDlYdjiuqeiCxl80CJ/ii2KAPSWnoZW5Gq9S+HOuS
I3Nl7i9TQpJAWk7hat1Vge5xlDYaUJBRDCsW+5lBxmw1zle/bkiPlKbcNsFmxvkg
PaThVHsewvX4ilpfsXSRdpeUvARSsw7RtdeM5jlcLBTYNlJ+2D1mEgox68QM++fn
+teZ/y6Rds7QTRkdTJKjYc4WUuMvV5Q=
-----END CERTIFICATE-----