Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f3cd0e7b-3925-3461-8e68-2b7be7ae672a.roa
File:                     f3cd0e7b-3925-3461-8e68-2b7be7ae672a.roa (raw, json)
Hash identifier:          JbRQ9JQg+pCuXsZS+6s+9udlUcYKcHCED49hZH72bl8=
Subject key identifier:   60:3D:56:47:88:04:48:1D:1C:72:0B:1C:BC:34:76:C8:86:54:EE:88
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285842F8E9994E0EA2B49B1E6B2300
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f3cd0e7b-3925-3461-8e68-2b7be7ae672a.roa
Signing time:             Tue 22 Aug 2023 19:16:24 +0000
ROA not before:           Tue 22 Aug 2023 19:16:24 +0000
ROA not after:            Mon 20 Nov 2023 20:16:24 +0000
asID:                     13741
IP address blocks:        140.228.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f8:e9:99:4e:0e:a2:b4:9b:1e:6b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 22 19:16:24 2023 GMT
            Not After : Nov 20 20:16:24 2023 GMT
        Subject: CN=1d975d25-1aa3-4eb5-b74c-7b39243e6565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b2:fd:cc:fb:5a:e6:8b:76:6e:d9:43:66:d4:
                    91:40:cc:c2:89:b2:7a:72:36:b6:fb:0c:a1:76:60:
                    7a:94:cd:de:43:0a:ee:3f:b3:38:a1:a0:56:88:4b:
                    ab:a4:5e:96:00:e8:37:b7:40:8e:d2:57:03:45:f3:
                    ae:ae:08:d5:70:1d:9e:64:c9:b2:e1:17:a5:db:9d:
                    6f:f9:61:1b:b1:db:31:ad:fc:c9:61:10:ab:7a:d7:
                    f4:4d:ca:2b:1f:9a:5c:7a:73:28:11:75:ba:d7:b6:
                    75:70:c6:dd:c8:ec:e8:7b:00:db:2f:3b:9a:a0:67:
                    07:7d:d5:e2:db:54:f5:52:0c:2e:68:66:f2:7a:9e:
                    46:86:97:38:aa:8c:f3:f4:c1:30:d2:5f:ac:c8:75:
                    d3:e4:2c:32:87:f5:9e:9f:36:57:53:80:77:1d:fb:
                    24:1d:f6:b7:62:67:c1:56:75:88:f1:42:ed:63:4c:
                    07:49:a5:a6:b3:7b:6a:10:1f:9a:dd:5b:49:6b:bd:
                    0c:a6:a5:51:c8:3e:77:25:ef:41:30:ef:62:51:72:
                    72:59:55:88:b0:fc:d8:95:6e:fc:97:1b:31:37:fb:
                    8e:98:6e:18:64:f6:96:74:d2:ee:38:d6:8e:81:91:
                    76:b0:67:d7:71:4f:78:a2:4a:e4:90:f9:5c:2b:cf:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:56:47:88:04:48:1D:1C:72:0B:1C:BC:34:76:C8:86:54:EE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f3cd0e7b-3925-3461-8e68-2b7be7ae672a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e4:f4:7a:de:57:c7:1b:95:24:ad:fa:a2:43:b9:85:fa:51:
         d3:cc:6c:9a:c5:2b:51:6e:16:21:18:c5:33:22:e0:dd:7a:7c:
         2f:49:f1:da:6a:39:5d:f0:fb:d8:ab:45:b7:45:42:b7:d7:d5:
         2e:e7:2b:6d:e8:4a:23:03:76:6f:07:85:3f:ec:18:54:c7:83:
         b2:92:80:b0:45:e1:22:19:a5:33:ba:14:f3:be:49:a5:68:25:
         39:1d:7c:73:73:33:cd:df:56:a5:8d:b8:a9:34:f1:7b:78:1b:
         8c:ac:b1:3f:e4:c0:48:bc:46:24:d1:59:07:12:e5:f3:68:54:
         03:91:46:26:25:5f:cc:e2:f3:ca:54:19:6a:3b:05:a2:d8:54:
         b0:51:fd:78:f9:a1:0c:eb:49:1c:dd:9c:08:56:3a:b3:4d:44:
         ed:f6:ad:02:c0:6e:47:85:69:a0:51:42:75:2e:2e:87:ef:8e:
         d9:ad:6a:2d:9e:1e:4c:24:c8:0e:7e:45:ef:f4:9a:5e:0f:c2:
         ee:b2:90:d7:e3:ab:e1:18:f5:e8:ed:80:54:62:41:15:ac:77:
         03:13:42:24:1a:59:56:0b:2f:a5:f5:b4:9f:a3:30:a0:1d:fb:
         b6:c7:9d:a9:24:de:fe:15:08:31:1f:72:7f:09:ed:0e:e7:70:
         b5:8e:14:a1
-----BEGIN CERTIFICATE-----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