Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ae1c536-94c4-396e-b00c-43ebd9088cd7.roa
File:                     0ae1c536-94c4-396e-b00c-43ebd9088cd7.roa (raw, json)
Hash identifier:          udkS+rIJGeE7mTishSTU9pXsfjem3+1U5M2q6UemIpw=
Subject key identifier:   D8:48:FC:80:0D:95:D6:F3:67:80:3F:42:1D:0E:A6:F4:5F:B8:58:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584245FD9E9622C5CD0DA8441380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ae1c536-94c4-396e-b00c-43ebd9088cd7.roa
Signing time:             Mon 19 Jun 2023 17:07:03 +0000
ROA not before:           Mon 19 Jun 2023 17:07:03 +0000
ROA not after:            Sun 17 Sep 2023 17:07:03 +0000
asID:                     834
IP address blocks:        166.0.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:45:fd:9e:96:22:c5:cd:0d:a8:44:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 19 17:07:03 2023 GMT
            Not After : Sep 17 17:07:03 2023 GMT
        Subject: CN=c0beab9a-ceab-433a-8f70-35d1dd6d69cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:70:1a:33:ea:e4:e4:ed:ac:81:0b:86:a7:
                    b0:32:8f:f5:45:5b:30:f5:4a:fb:1d:fa:73:67:ad:
                    fc:ed:31:2c:1f:12:ab:70:49:f8:01:a5:81:cb:e7:
                    a6:2b:61:ec:d8:0d:ac:27:3d:90:d2:12:b9:92:65:
                    b8:e6:e7:dc:a9:a7:d7:7e:d1:67:61:ef:4b:db:76:
                    f0:21:31:86:e9:34:d3:9d:91:94:49:53:3e:a3:75:
                    50:f8:c7:3f:23:13:9c:07:65:dc:b4:f7:79:66:a7:
                    f2:52:9d:81:91:80:4a:02:95:5f:8d:f3:63:f5:c4:
                    ad:87:92:4a:fc:32:af:a6:e5:30:8f:7d:4f:8c:f8:
                    8b:c3:7e:ad:69:04:c5:2b:b4:6d:2c:20:6a:62:ce:
                    65:f4:a7:86:91:88:71:e2:b6:89:93:4e:17:05:37:
                    2e:db:07:73:99:15:d2:d6:7a:89:a6:54:53:4f:ec:
                    7f:53:bb:02:44:f8:8a:2a:e8:d3:68:df:cf:41:2c:
                    cd:32:96:84:1a:b6:48:2b:23:a6:be:0d:0c:cf:33:
                    e4:c6:3a:ad:8b:37:d5:ee:b6:00:67:35:59:7e:e3:
                    3e:bd:3d:c5:59:fa:4f:dd:3b:d1:00:d0:9b:87:8c:
                    62:95:1d:99:f7:80:99:92:96:15:ce:58:d7:22:b1:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:48:FC:80:0D:95:D6:F3:67:80:3F:42:1D:0E:A6:F4:5F:B8:58:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ae1c536-94c4-396e-b00c-43ebd9088cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:82:af:ad:78:4d:80:ff:80:d9:2b:4d:65:2e:ad:fc:f9:
         d7:10:c0:31:1e:ad:17:b0:52:91:10:18:f9:3f:e8:15:f1:85:
         6e:dd:a9:b1:9f:ed:48:3e:1a:fd:d9:4e:82:09:7a:30:c1:84:
         82:20:10:78:df:41:42:85:3f:82:e1:11:9d:2c:ae:d3:80:41:
         2e:48:58:69:3f:d7:09:46:2e:33:1b:a3:b1:56:04:37:9e:b0:
         3e:25:8c:db:dd:41:ff:a6:13:c8:c0:4e:24:0c:25:7d:01:9f:
         93:84:cf:ef:7f:d8:38:39:9f:0d:15:fe:6a:76:06:7d:90:c2:
         d8:c6:95:b4:2a:f9:e9:7c:59:51:03:3e:e2:22:3f:ee:6c:f4:
         1a:16:db:1d:80:a5:24:c7:4a:8a:23:94:4a:c3:51:14:00:eb:
         09:cf:2b:8e:9d:c2:8d:3b:8d:9b:c3:de:27:5a:f4:1f:39:d8:
         fc:dd:ac:44:c5:d7:9e:12:b3:5e:67:25:a9:93:e3:f5:3c:cf:
         f0:e0:97:e8:47:ba:44:42:8f:89:ba:a0:5e:e5:4b:cc:f1:40:
         33:7e:54:0f:c5:a8:4e:95:32:37:9d:08:a5:bc:b2:bc:67:ca:
         93:ba:1e:e1:a4:6f:da:b1:a1:08:64:c7:19:6b:f7:a0:97:0a:
         b2:0d:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----