Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/02b58d45-ceb1-38e1-a441-5f83ac5944f3.roa
File:                     02b58d45-ceb1-38e1-a441-5f83ac5944f3.roa (raw, json)
Hash identifier:          xVqRCPjwZHXXL2OW2eN6iFnqshjyge+VFrjQfsAzg8c=
Subject key identifier:   AA:6D:95:FD:B9:BE:6A:92:A8:9A:35:4F:CF:CC:2D:8E:D7:0F:05:FA
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858429D73BDA483B3A2287E169EF0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/02b58d45-ceb1-38e1-a441-5f83ac5944f3.roa
Signing time:             Fri 21 Jul 2023 01:00:17 +0000
ROA not before:           Fri 21 Jul 2023 01:00:17 +0000
ROA not after:            Thu 19 Oct 2023 01:00:17 +0000
asID:                     33696
IP address blocks:        200.229.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9d:73:bd:a4:83:b3:a2:28:7e:16:9e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 21 01:00:17 2023 GMT
            Not After : Oct 19 01:00:17 2023 GMT
        Subject: CN=b5a8ce4e-1bd8-45d6-b554-616abe08d9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:44:c1:50:70:15:b6:7c:74:de:c0:ab:cc:
                    de:69:13:10:8a:bb:51:74:14:81:9b:6c:08:61:49:
                    33:9d:82:97:f1:31:2d:5e:c7:1f:0a:49:29:cd:e0:
                    13:b6:85:78:b3:3a:7a:c0:24:37:7f:d9:11:9b:93:
                    54:bd:14:97:3f:20:76:53:84:e8:67:b4:7a:97:0c:
                    53:a5:ca:c2:ca:eb:15:c7:6b:f9:13:9f:c2:84:01:
                    cf:4f:81:75:06:45:e0:a7:dc:1d:87:e0:b2:df:ae:
                    14:7e:2f:c5:30:a4:31:ba:0b:61:b7:9b:38:f9:eb:
                    21:1a:68:bd:28:1a:28:ec:b2:43:c6:52:24:55:9c:
                    9d:e8:6d:4f:b3:90:39:6d:d8:a3:02:d5:e3:0c:fd:
                    3f:bb:48:9c:8a:5f:1b:3d:9d:7c:63:ee:c8:5c:61:
                    62:90:54:62:ae:87:28:62:5c:75:5e:35:ee:9c:0f:
                    9f:67:3a:9e:62:6a:38:a4:c5:d1:2f:2c:01:78:f8:
                    bc:41:15:76:35:c9:e3:40:35:52:d1:d9:a3:b9:2e:
                    91:25:6a:85:bb:5b:26:ec:f7:aa:15:2b:f8:5e:98:
                    d2:74:a0:ac:47:93:f1:c7:11:c2:9c:d3:ed:a6:20:
                    e8:87:a4:4b:3f:91:96:24:26:2f:0c:46:1d:1e:eb:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6D:95:FD:B9:BE:6A:92:A8:9A:35:4F:CF:CC:2D:8E:D7:0F:05:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/02b58d45-ceb1-38e1-a441-5f83ac5944f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:09:f0:e3:98:e5:d8:fd:5c:bb:ee:39:d0:5e:c9:c9:37:2e:
         8e:d4:bf:34:75:41:a8:37:9c:95:6d:b3:c7:9f:ce:14:f0:67:
         37:68:34:81:ef:f3:a3:b0:18:37:43:22:27:9c:6f:81:b8:fd:
         93:d1:a0:05:41:c7:c6:4c:08:d9:46:2b:9f:bf:84:cd:0a:fd:
         87:ac:fc:73:20:4b:7b:ac:6d:49:dc:36:4d:a2:43:15:78:6b:
         29:a4:59:dd:79:5d:e3:95:fd:eb:e8:d6:d2:b8:f4:65:7f:7f:
         41:62:e9:05:c8:a0:c9:b8:bb:6c:ab:2c:75:7c:b3:78:3a:aa:
         b2:a1:7f:05:39:92:50:65:ec:af:47:a6:e4:4b:0a:6b:82:5f:
         d9:dd:c5:ee:4b:99:ee:8f:e4:b5:a3:b3:b3:50:3d:80:4f:02:
         fd:a6:dc:dd:79:5a:bf:12:37:3a:e8:10:ce:e7:5c:8f:bd:6e:
         b1:f5:26:fb:3f:d8:f7:c7:ea:10:a2:8e:8f:bd:11:9c:bb:98:
         70:76:3b:49:ee:8e:9f:73:83:86:aa:42:a1:84:28:11:ca:33:
         f6:dc:91:0a:73:af:9c:bf:50:3b:c1:b6:30:9b:37:ec:9a:69:
         a6:2c:0b:06:52:61:4b:0d:4a:33:2f:f8:4b:6d:7e:a8:98:5f:
         8a:e5:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----