Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a9794e0-faf6-3673-a5d2-7166b89dc6ed.roa
File:                     0a9794e0-faf6-3673-a5d2-7166b89dc6ed.roa (raw, json)
Hash identifier:          68AbizbhEOLxk02JJceubG1Vb8dakWvRzPHnfNVM5MQ=
Subject key identifier:   EB:C6:57:FC:5F:4B:25:27:4F:BD:9C:59:1A:43:4B:B9:41:C6:83:D7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858439ABDD779DA2D4B123A64C2B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a9794e0-faf6-3673-a5d2-7166b89dc6ed.roa
Signing time:             Thu 19 Oct 2023 18:29:12 +0000
ROA not before:           Thu 19 Oct 2023 18:29:12 +0000
ROA not after:            Wed 17 Jan 2024 19:29:12 +0000
asID:                     834
IP address blocks:        108.165.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:bd:d7:79:da:2d:4b:12:3a:64:c2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 18:29:12 2023 GMT
            Not After : Jan 17 19:29:12 2024 GMT
        Subject: CN=068ad39f-af30-454c-9741-77a0d2b1e2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:90:8d:48:d1:e7:0a:8e:96:cd:a5:c4:50:
                    6b:ee:77:0c:14:e5:dc:8e:91:f5:d8:f2:26:fa:af:
                    7c:c0:a7:2a:e2:74:4a:c1:8a:98:73:59:4d:7a:98:
                    c3:af:ca:68:39:01:9a:e1:5b:8c:a3:b9:01:00:3a:
                    b1:f9:8e:31:2f:7e:21:f0:f5:08:06:c3:8b:5c:16:
                    22:0c:8c:fb:eb:97:eb:b8:2d:fe:ff:a0:bd:57:aa:
                    36:96:72:5f:ad:fa:33:0a:42:a2:3a:44:f5:8d:47:
                    ad:58:3d:df:d3:1c:59:b1:23:13:ad:2c:65:44:a0:
                    7a:71:d2:8e:8c:3e:c0:a5:6f:18:d5:9b:4f:62:33:
                    3f:af:d2:1e:76:dd:f3:e3:95:8f:44:8a:d8:6f:1d:
                    27:50:e6:f4:4d:9e:71:46:07:11:8b:75:b7:57:68:
                    34:ff:b6:92:7e:7d:6d:76:c5:f8:95:91:67:4c:d7:
                    43:39:59:a2:28:95:98:9e:a9:40:ab:75:a1:ac:4c:
                    55:64:d9:cb:f6:99:09:b0:e3:d4:6d:f0:92:75:d9:
                    59:d4:4a:7a:07:1a:01:9e:40:5c:c1:dc:b1:e9:ae:
                    18:bc:a1:1a:1d:8d:ea:86:47:76:66:2f:59:35:63:
                    15:1a:28:90:bb:49:a2:b8:20:37:13:22:f4:fd:86:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C6:57:FC:5F:4B:25:27:4F:BD:9C:59:1A:43:4B:B9:41:C6:83:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a9794e0-faf6-3673-a5d2-7166b89dc6ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:19:66:6e:62:d1:60:88:8f:46:0c:ba:66:ef:d3:bf:66:9c:
         07:25:16:9b:90:b2:9d:a0:f4:fe:80:ed:b7:ba:92:69:c9:fb:
         e0:84:14:90:b3:96:8d:d1:c9:2e:b8:5c:ef:4f:55:61:cd:f8:
         ef:57:e7:1b:61:47:09:94:77:1d:b5:a7:2c:a3:37:f1:bd:8d:
         34:8a:8f:c2:7c:5f:f2:38:c2:9c:e0:a6:27:0f:3d:fa:3d:58:
         d1:e9:f4:1e:67:ab:be:61:1f:24:cc:e3:53:14:dc:53:c2:d1:
         ec:6c:bf:bd:df:fa:a5:f6:d6:3a:a2:43:5b:41:d4:b5:30:c0:
         74:3e:d0:0d:7e:a0:a8:08:5d:cf:ae:8e:2c:40:10:a9:ae:d7:
         06:26:83:1d:24:63:eb:f8:ee:81:8f:50:6c:dc:5d:a7:34:d3:
         28:e9:0b:dc:16:6c:99:e8:1d:39:64:ca:d3:0e:fc:16:5f:aa:
         4b:4c:53:a6:8a:6b:7a:bf:65:40:82:92:a1:08:54:e8:a3:89:
         55:a0:c9:a9:be:b8:53:d6:f3:54:f1:77:41:02:6f:a9:ff:c8:
         00:83:e1:71:ee:35:d8:32:df:2a:31:d1:f1:cb:c8:90:d7:7d:
         41:1b:9d:b8:b8:8a:03:81:98:42:91:e3:5c:c1:f0:2d:bb:22:
         ca:3a:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----