Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03aba5f3-2c2d-3358-a92f-e4e50b969248.roa
File:                     03aba5f3-2c2d-3358-a92f-e4e50b969248.roa (raw, json)
Hash identifier:          qRu06tGgUQn98C7kv+nRYkAEFZbNW5wn1tpPQRJnEBk=
Subject key identifier:   E6:DF:42:51:B4:5F:3C:A8:3B:48:BE:B1:01:85:C1:74:51:50:E0:17
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842CEDB76A86A41C4F3E1F2BB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03aba5f3-2c2d-3358-a92f-e4e50b969248.roa
Signing time:             Mon 07 Aug 2023 17:43:58 +0000
ROA not before:           Mon 07 Aug 2023 17:43:58 +0000
ROA not after:            Sun 05 Nov 2023 18:43:58 +0000
asID:                     33696
IP address blocks:        108.165.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:db:76:a8:6a:41:c4:f3:e1:f2:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  7 17:43:58 2023 GMT
            Not After : Nov  5 18:43:58 2023 GMT
        Subject: CN=113635d4-2b54-4730-a49d-acadec1c032d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:53:d9:b0:6b:b5:63:83:46:8d:26:7e:7a:
                    1f:5d:a3:89:32:e6:62:0b:da:a1:5b:93:bd:4a:39:
                    24:ba:65:fc:78:29:51:44:89:5f:28:e2:f4:0a:c3:
                    81:97:71:c8:9f:f4:c1:b6:2f:14:04:0b:d9:2f:7c:
                    65:80:1d:c9:66:45:1c:01:d0:de:39:65:ba:74:b2:
                    03:45:6c:e8:87:42:64:51:6c:7a:ac:bb:ed:53:39:
                    f6:82:c6:93:80:2d:21:2c:c5:4f:fc:f1:ae:b8:b1:
                    33:7f:1b:ff:a2:4d:5c:fd:13:d8:c3:f8:e7:37:46:
                    e1:39:77:8e:ab:33:32:43:34:f3:8b:11:7d:b5:73:
                    61:67:5a:5c:3d:62:ed:04:2c:3f:81:ad:9e:63:05:
                    d2:a0:12:4d:e6:b0:3a:ab:7d:a1:ab:20:a2:73:77:
                    57:e1:f3:66:f9:25:a7:0c:de:f6:c5:aa:a9:40:ed:
                    c9:80:5b:61:74:30:d2:72:f0:96:65:0b:0d:75:83:
                    8b:1a:98:7d:59:41:a4:7e:b6:2e:03:11:f2:76:54:
                    3d:52:87:e4:e3:fb:8c:fb:84:1b:1b:6a:f9:d4:8e:
                    b1:4b:c7:51:7d:61:70:c4:ce:1b:a0:40:a0:ef:f9:
                    f2:f1:ed:ab:7a:f4:72:f6:bf:e9:7d:3f:d5:4b:52:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DF:42:51:B4:5F:3C:A8:3B:48:BE:B1:01:85:C1:74:51:50:E0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03aba5f3-2c2d-3358-a92f-e4e50b969248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:91:55:61:35:18:15:4d:7f:c5:4d:2c:19:75:cb:3c:11:
         42:76:1a:6f:b8:5a:45:29:63:d0:eb:0d:5d:8b:26:e8:8a:b0:
         ea:e3:18:37:27:29:f8:88:24:3e:cb:a5:85:8e:4f:3a:ea:57:
         7d:8c:19:1b:b6:99:86:ef:57:85:14:11:aa:fb:c4:1e:ba:cf:
         c4:60:cf:c5:fb:33:29:9b:67:d4:6b:e9:53:ba:a7:33:cf:82:
         e4:a7:44:66:41:ab:b9:ed:b5:63:5f:6c:d7:9c:27:89:24:a4:
         b6:bb:a9:dc:cc:bc:d8:90:29:e1:62:fa:05:a6:54:2b:65:f3:
         d8:08:74:70:1a:e4:f5:97:4e:d0:e5:f0:56:72:82:d0:ad:c6:
         fd:b2:4c:ee:53:c4:45:34:32:91:ad:ea:a8:3e:de:bd:98:0c:
         69:a3:a6:82:9b:85:66:b8:8c:1f:52:30:fd:d3:82:f1:60:5f:
         d5:02:44:67:6a:81:83:30:cc:fd:72:b4:94:3e:95:b2:f3:d7:
         39:ed:2f:aa:62:c1:fb:d8:7e:c0:ab:55:08:87:2c:9f:eb:09:
         e5:c3:21:c6:2a:5c:c0:c6:ef:26:d3:d7:49:3d:7d:07:3f:14:
         21:a8:d5:11:48:ed:08:13:ae:70:fe:62:97:26:62:1c:64:62:
         79:a9:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----