Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/439ef372-5871-38e3-86ec-2f494fab8b37.roa
File:                     439ef372-5871-38e3-86ec-2f494fab8b37.roa (raw, json)
Hash identifier:          gna/pUxYXC18vw6FYcMzWUwEl1P9LdLrsxNkSH/18DA=
Subject key identifier:   FB:CA:FB:80:7B:9B:C6:FE:AB:D5:71:55:23:F5:64:B5:CE:B7:FC:4F
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F432858440D47BA4F5C9C44534B5440C0
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/439ef372-5871-38e3-86ec-2f494fab8b37.roa
Signing time:             Wed 29 Nov 2023 19:09:10 +0000
ROA not before:           Wed 29 Nov 2023 19:09:10 +0000
ROA not after:            Tue 27 Feb 2024 19:09:10 +0000
asID:                     400384
IP address blocks:        66.245.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0d:47:ba:4f:5c:9c:44:53:4b:54:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Nov 29 19:09:10 2023 GMT
            Not After : Feb 27 19:09:10 2024 GMT
        Subject: CN=4013e9e8-b09b-4573-a475-7b23887a8eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:91:fd:fd:83:74:6a:0f:46:02:a5:01:08:
                    14:74:26:86:39:6e:9a:69:b8:c5:10:8e:96:bb:e5:
                    fd:71:a5:56:8b:6d:8c:bf:ef:d7:6f:1e:45:40:96:
                    d2:21:47:a2:9b:15:2d:f3:06:0c:ca:b1:e8:57:50:
                    de:60:ac:7e:04:ee:42:9a:61:01:c7:5d:13:a9:83:
                    88:67:47:89:3e:96:b8:70:1f:b0:8a:33:e5:da:7c:
                    55:4b:da:e9:a9:93:53:c4:b5:3b:94:3f:2c:6a:de:
                    b5:fe:cf:e2:f3:98:ae:c8:2e:58:38:8c:f2:55:43:
                    6c:48:fa:d1:e9:65:31:64:4a:3c:19:4e:18:5e:be:
                    85:39:a8:ee:ec:b6:8f:08:c0:20:1c:b9:64:f5:de:
                    7d:4e:ad:c8:6d:b3:04:55:30:08:74:52:4b:6e:68:
                    c3:54:a3:5d:ae:c1:ac:c3:94:bf:4c:42:f9:6a:7e:
                    02:69:0b:41:83:d2:80:7a:3e:67:d9:a9:11:d4:da:
                    29:76:14:8e:c3:b4:27:82:be:1e:6f:0d:04:39:be:
                    33:69:4e:2d:92:30:2d:91:e8:e6:1f:c2:6f:2c:c1:
                    86:19:91:6f:23:81:1a:8e:07:a8:5d:dc:c0:f7:5f:
                    eb:96:9a:59:7d:a9:f1:a3:ed:11:49:ad:5a:18:2b:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CA:FB:80:7B:9B:C6:FE:AB:D5:71:55:23:F5:64:B5:CE:B7:FC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/439ef372-5871-38e3-86ec-2f494fab8b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:2e:f3:d9:d9:25:38:96:63:b6:6a:bc:99:57:74:35:7e:
         94:90:c9:d5:d1:c1:a1:51:84:2e:ed:51:77:ed:ee:ef:47:93:
         bb:29:7a:d2:0e:8f:c5:dc:70:dc:7c:a3:c7:0d:04:2b:76:c3:
         55:23:16:4f:6a:ed:c5:44:7b:21:87:e8:66:44:2c:d5:69:06:
         e3:ef:a5:20:cf:17:0a:6d:ec:9a:08:61:b0:a2:d4:1b:f8:75:
         a9:43:fb:a2:1b:71:b3:18:b4:47:d2:d3:7b:d7:e2:7f:a1:6f:
         24:42:77:b1:7f:32:2a:c3:95:d5:e5:ce:d9:9e:b5:f2:cb:38:
         85:74:23:17:a4:69:39:b0:9a:fa:f5:25:c0:6a:23:f2:e0:63:
         1f:e7:6b:9c:4c:ff:50:c8:14:4f:4d:0a:74:cf:32:34:f0:6c:
         ef:85:46:97:d4:48:9b:da:17:99:75:3e:dc:20:6c:30:de:4a:
         1a:48:56:84:1d:66:08:f3:b4:9c:61:cf:58:27:dd:d6:84:2e:
         57:0f:48:bb:29:fb:90:70:bd:0d:2b:37:d6:1d:e6:1f:2f:6e:
         bc:4f:7d:21:64:80:43:c4:c0:7e:8c:ba:c1:ca:e1:fc:bd:f9:
         25:2b:63:0c:b6:af:6b:23:12:d8:5f:cd:e2:4f:df:40:27:c1:
         d8:0c:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----