Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/07c94bdf-6d3d-3103-9ed1-48de7b4eb39b.roa
File:                     07c94bdf-6d3d-3103-9ed1-48de7b4eb39b.roa (raw, json)
Hash identifier:          /oAuL+0iarcR4GtMG+Ng76N/agkyV86hTJwyDCjECW8=
Subject key identifier:   FB:AA:84:60:A6:D0:5E:54:DA:1C:DB:50:6A:6D:9C:C3:99:5A:B3:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858437EAEC3E41842F988CB85D8E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/07c94bdf-6d3d-3103-9ed1-48de7b4eb39b.roa
Signing time:             Mon 09 Oct 2023 17:16:11 +0000
ROA not before:           Mon 09 Oct 2023 17:16:11 +0000
ROA not after:            Sun 07 Jan 2024 18:16:11 +0000
asID:                     834
IP address blocks:        166.0.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7e:ae:c3:e4:18:42:f9:88:cb:85:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 17:16:11 2023 GMT
            Not After : Jan  7 18:16:11 2024 GMT
        Subject: CN=ec07fb25-6cf6-4d4e-ba58-1a7d85b8103e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:ef:11:11:69:89:25:e5:21:87:81:3d:bf:
                    5e:99:be:f9:86:cb:76:c4:03:e7:c7:5f:19:b2:d6:
                    48:90:31:0d:bc:f1:49:45:c3:96:21:b5:b4:d4:0d:
                    03:7f:43:a5:d7:47:4e:b4:06:73:fe:1a:df:42:1e:
                    ee:01:6a:7a:30:5c:a2:5c:20:27:78:4d:6b:84:fd:
                    6b:45:3d:3c:f8:f2:76:22:95:51:10:8a:4b:ea:f7:
                    2f:3f:26:69:69:4e:41:a6:f3:71:68:59:0d:70:80:
                    41:c3:7f:29:25:73:12:59:b4:60:94:ae:f3:74:b1:
                    3d:86:09:f9:8d:3d:3d:97:a4:8f:ad:fe:4d:c6:23:
                    31:58:a0:44:dd:3f:1f:49:e1:6e:24:f7:9b:c3:69:
                    c2:a8:3c:81:a2:9c:8f:4b:0d:1c:a6:d9:c1:b4:ea:
                    01:4f:e8:8b:45:9c:fd:51:a1:f7:c2:0e:a5:ee:e3:
                    54:dd:3e:28:b6:30:16:3d:46:56:8d:0d:94:05:78:
                    8a:f2:33:39:9f:25:30:01:59:98:0c:ca:fb:77:ac:
                    6d:7a:fd:5b:32:74:b4:95:90:5a:de:9f:bc:90:51:
                    1b:79:2f:b6:dd:69:e7:8b:17:d5:98:5c:1f:88:18:
                    85:a8:58:47:d4:48:f5:e2:74:ca:3e:8b:dd:3d:7d:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AA:84:60:A6:D0:5E:54:DA:1C:DB:50:6A:6D:9C:C3:99:5A:B3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/07c94bdf-6d3d-3103-9ed1-48de7b4eb39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:54:2d:79:5d:c3:cc:92:8e:f2:03:7c:34:81:a6:43:6f:54:
         1b:9e:65:1e:94:54:ea:17:60:18:13:c8:7d:7c:b4:f0:8c:2c:
         12:94:09:77:e7:5b:79:d5:4e:d7:93:84:eb:c4:6a:2b:c4:38:
         fd:ea:f5:ad:ad:78:29:67:87:3e:80:68:b6:74:5f:9e:75:c2:
         10:d4:8f:b2:51:59:75:a4:cf:8e:2b:08:de:84:b7:30:93:3b:
         e1:c8:02:2b:3c:6e:ee:5a:aa:9d:6d:a6:03:d1:70:c2:41:74:
         fa:98:e1:bd:b0:e3:49:af:a3:8c:0a:39:6f:f4:28:6b:3b:db:
         46:24:e8:53:d2:17:0c:43:6e:25:9d:89:da:30:d1:42:b5:8b:
         6e:e6:9b:f7:2b:6f:58:46:68:7c:c0:a2:40:12:a9:38:a7:05:
         62:ba:8c:79:89:a5:64:62:c4:86:f8:52:79:42:9d:ba:99:d1:
         b8:0d:3c:20:93:61:31:e9:db:0e:8e:1b:4a:6a:92:ae:af:22:
         5a:70:75:b2:01:b2:15:a4:90:ac:54:2d:43:63:17:6e:4d:e6:
         64:09:1c:2f:4d:a4:0a:3b:82:19:55:d6:80:c3:0c:fb:a7:c3:
         1d:24:b6:aa:9c:24:35:dc:39:f6:9f:15:8e:09:9a:47:f9:9b:
         5c:0a:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 18:35:41 2023 by rpki-client on console-fra.rpki-client.org