Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00ce7358-5af5-3038-99d3-9be9900af04d.roa
File:                     00ce7358-5af5-3038-99d3-9be9900af04d.roa (raw, json)
Hash identifier:          GhS+vvd9iARideSa8V0DtD5j1Pdl9/C3igUnu6RRNuw=
Subject key identifier:   7D:F7:16:3E:0A:51:14:1B:AF:DC:C3:8A:F8:CB:E0:28:50:BE:4F:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842FB65E8BFF8EAC4A0C188C2D0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00ce7358-5af5-3038-99d3-9be9900af04d.roa
Signing time:             Wed 23 Aug 2023 16:38:30 +0000
ROA not before:           Wed 23 Aug 2023 16:38:30 +0000
ROA not after:            Tue 21 Nov 2023 17:38:30 +0000
asID:                     11798
IP address blocks:        166.1.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fb:65:e8:bf:f8:ea:c4:a0:c1:88:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 23 16:38:30 2023 GMT
            Not After : Nov 21 17:38:30 2023 GMT
        Subject: CN=54c2723e-e357-41da-834c-b254b4da9369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:ad:e1:1f:d4:ab:30:c3:34:15:e5:93:2d:
                    8e:bd:64:bd:32:8a:71:e2:dd:44:0b:ff:83:54:21:
                    c9:1d:a4:a7:f7:fc:4f:88:e8:ce:23:6a:33:6b:57:
                    e9:4d:e1:a4:59:40:69:9c:10:11:fe:21:08:41:b3:
                    26:b5:25:a6:dc:13:b2:5d:8a:f6:47:46:b5:d3:27:
                    70:34:28:f9:00:a8:5b:f2:e6:31:38:05:e6:b5:74:
                    42:68:ab:f8:fe:bb:30:b4:a8:52:c4:ab:05:17:d8:
                    43:cf:12:17:d2:43:cc:0d:ca:dd:81:60:87:03:58:
                    c7:d4:11:c1:27:aa:d5:05:80:f6:de:05:5a:f8:b9:
                    c1:31:8e:1d:d0:40:32:6e:d5:dd:00:44:f9:34:0e:
                    c6:58:86:1e:c5:e6:37:ab:eb:60:27:24:0c:8e:e8:
                    60:cd:56:a5:cd:9a:1a:b2:fc:c2:28:d9:b8:b6:78:
                    74:c5:ce:61:cb:45:32:33:61:32:b3:9d:6a:1b:c3:
                    cc:09:1b:ec:04:2c:45:03:96:ee:62:42:fb:98:0f:
                    2d:a6:4b:b1:e1:21:17:cf:8a:4f:5e:b9:68:fc:e4:
                    5d:2a:b8:65:32:18:52:0a:a9:13:73:57:9d:9d:2b:
                    b0:76:4e:87:97:db:0b:a7:8f:a4:96:f7:79:ca:a6:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F7:16:3E:0A:51:14:1B:AF:DC:C3:8A:F8:CB:E0:28:50:BE:4F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00ce7358-5af5-3038-99d3-9be9900af04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9f:8a:87:fa:2f:78:75:d4:1d:47:8b:e5:54:96:61:39:4d:
         2f:66:ad:00:70:9c:00:b5:61:14:4f:15:28:0f:75:87:0b:55:
         1d:3f:a2:fc:b1:b1:ec:fa:93:af:a6:e4:22:76:64:fb:85:6b:
         d6:2d:11:ee:98:c0:2b:8b:8d:c1:96:1e:60:84:45:4f:7e:9e:
         eb:c7:d6:02:d8:24:16:ac:0c:ec:97:e8:3b:cd:15:dd:e8:3e:
         6f:6a:fc:e4:d5:2f:e4:9a:68:f6:ce:56:6c:e5:82:be:90:13:
         9d:5e:91:bd:1b:df:c9:77:3a:e2:cb:e0:e5:b2:84:a5:f7:7d:
         70:b2:bf:cf:2b:2e:ee:9f:47:63:3c:42:bb:a9:0f:ed:5f:21:
         e3:45:2e:21:76:ce:ad:fd:d9:a4:79:75:9d:2c:48:db:fe:10:
         77:5f:47:e6:c8:8c:41:f5:5a:21:30:7c:1c:64:32:22:e9:6e:
         1d:43:df:d5:10:1e:f5:8f:90:44:fa:81:9d:7c:84:de:db:6c:
         da:ef:07:7a:22:43:c9:35:fc:a8:cb:41:df:a8:f3:e2:98:02:
         27:d7:80:ab:78:33:b4:9d:f4:ef:e8:42:bf:fe:73:b1:bd:bf:
         f9:92:ab:85:1c:3a:5a:76:e4:58:db:07:04:60:0e:84:97:b1:
         c1:17:58:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEL7Zei/+OrEoMGIwtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgyMzE2MzgzMFoXDTIzMTEyMTE3MzgzMFowLzEtMCsGA1UEAxMk
NTRjMjcyM2UtZTM1Ny00MWRhLTgzNGMtYjI1NGI0ZGE5MzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQGt4R/UqzDDNBXlky2OvWS9Mopx4t1EC/+D
VCHJHaSn9/xPiOjOI2oza1fpTeGkWUBpnBAR/iEIQbMmtSWm3BOyXYr2R0a10ydw
NCj5AKhb8uYxOAXmtXRCaKv4/rswtKhSxKsFF9hDzxIX0kPMDcrdgWCHA1jH1BHB
J6rVBYD23gVa+LnBMY4d0EAybtXdAET5NA7GWIYexeY3q+tgJyQMjuhgzValzZoa
svzCKNm4tnh0xc5hy0UyM2Eys51qG8PMCRvsBCxFA5buYkL7mA8tpkux4SEXz4pP
Xrlo/ORdKrhlMhhSCqkTc1ednSuwdk6Hl9sLp4+klvd5yqbTHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH33Fj4KURQbr9zDivjL4ChQvk/xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDBjZTczNTgtNWFmNS0z
MDM4LTk5ZDMtOWJlOTkwMGFmMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2fiof6L3h11B1Hi+VUlmE5TS9mrQBwnAC1YRRPFSgPdYcLVR0/ovyx
sez6k6+m5CJ2ZPuFa9YtEe6YwCuLjcGWHmCERU9+nuvH1gLYJBasDOyX6DvNFd3o
Pm9q/OTVL+SaaPbOVmzlgr6QE51ekb0b38l3OuLL4OWyhKX3fXCyv88rLu6fR2M8
QrupD+1fIeNFLiF2zq392aR5dZ0sSNv+EHdfR+bIjEH1WiEwfBxkMiLpbh1D39UQ
HvWPkET6gZ18hN7bbNrvB3oiQ8k1/KjLQd+o8+KYAifXgKt4M7Sd9O/oQr/+c7G9
v/mSq4UcOlp25FjbBwRgDoSXscEXWC4=
-----END CERTIFICATE-----
Generated at Fri Aug 25 18:20:32 2023 by rpki-client on console-fra.rpki-client.org