Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/65374bc5-8717-3369-8d32-d2787045d74e.roa
File:                     65374bc5-8717-3369-8d32-d2787045d74e.roa (raw, json)
Hash identifier:          7r6GGUjbLsfNJ/bZBYsknWF+1K9zQRyeNS1Tme4eC9A=
Subject key identifier:   B6:E3:8D:86:20:DD:BF:58:59:69:53:A9:D8:F3:C3:96:D5:16:C9:3B
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328583FF3860A708FA675063AD3C300
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/65374bc5-8717-3369-8d32-d2787045d74e.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Sat 17 Nov 2029 05:00:00 +0000
asID:                     212238
IP address blocks:        200.229.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:86:0a:70:8f:a6:75:06:3a:d3:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2029 GMT
        Subject: CN=33a6a95d-01b0-4ca3-9584-d842e81ff69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:0d:97:cb:42:4e:da:c9:3b:6f:16:e3:88:
                    c3:0e:76:35:fe:32:97:c1:77:d4:17:8d:cf:93:c6:
                    d5:4a:49:5f:38:ad:b2:8e:74:1e:ef:e8:9b:64:9a:
                    8b:d9:2f:dd:ac:ce:ba:0f:f3:ce:73:cd:72:f2:e9:
                    81:be:8f:a7:5a:19:56:65:14:e0:14:46:28:fc:52:
                    ff:f4:50:2a:86:97:36:54:58:95:eb:bf:b3:fe:84:
                    cf:0c:ad:e5:21:5e:05:57:6b:b4:42:8e:72:0a:08:
                    03:72:32:4f:b0:b5:f5:d0:f7:1b:5d:dd:17:6b:2f:
                    94:9f:70:45:dd:7a:2d:78:64:4c:e2:d1:21:ba:a7:
                    dd:56:12:6a:16:ce:2b:8c:1f:01:aa:85:31:a4:b3:
                    4f:ae:99:ec:2d:bc:cd:0e:e7:cb:bd:2c:88:61:a8:
                    a9:2c:22:5c:f7:dc:a9:01:c8:2d:9b:61:c7:b0:ca:
                    9f:a1:20:d2:00:19:11:4e:e9:13:b4:26:07:c2:93:
                    42:d1:ef:1e:7d:61:c3:76:44:41:1a:12:e3:c8:5d:
                    86:e2:08:dc:5f:b3:b5:06:ec:bc:a2:75:3c:37:a2:
                    8b:9c:cf:6a:de:bf:07:1a:ca:c2:ba:48:91:f6:ec:
                    49:00:0b:18:57:3c:b3:25:68:e2:25:bd:86:95:aa:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E3:8D:86:20:DD:BF:58:59:69:53:A9:D8:F3:C3:96:D5:16:C9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/65374bc5-8717-3369-8d32-d2787045d74e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:a6:ce:48:34:76:66:a1:f3:93:05:1b:89:6e:b2:b7:72:
         09:2e:53:5c:d4:a9:fe:59:93:a8:cd:62:c3:bc:32:63:3b:2f:
         5c:e9:db:4d:20:16:6a:21:d3:18:0b:61:29:61:e5:a7:11:3f:
         1d:70:48:5e:88:98:5a:5a:9d:6d:39:27:f9:ff:3d:1e:9a:14:
         c8:4c:36:86:48:ec:f0:09:b8:5f:af:63:35:6d:75:76:89:93:
         f9:d1:c4:8f:d6:a9:e5:bc:c9:f7:0a:f9:6f:d4:6a:f9:f7:e6:
         8a:39:90:15:45:87:1c:a6:bc:79:51:64:77:6f:48:29:0c:00:
         ab:40:b9:dd:23:63:36:9f:ca:56:18:e4:d9:a7:5b:ec:8d:4b:
         b7:8e:57:15:6b:74:60:b2:4b:e9:a0:2f:8e:c4:ee:32:71:20:
         ba:ce:d5:ac:b3:b9:a5:4e:b6:30:0f:b5:2d:c6:5f:6e:5f:ce:
         82:5f:02:6a:0d:30:4d:23:9d:e7:21:7b:cb:92:04:f1:cc:72:
         0d:37:21:75:25:b5:f8:07:ef:bc:07:3d:89:62:82:68:e5:ee:
         9b:39:97:06:dd:09:91:06:ad:59:2b:4e:5d:b2:33:70:f1:35:
         04:a1:a7:60:8b:94:47:bd:74:cd:33:9e:ff:f6:eb:56:03:cc:
         15:74:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----