Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0cb9d542-0dab-31a8-bb87-248b81cb6388.roa
File:                     0cb9d542-0dab-31a8-bb87-248b81cb6388.roa (raw, json)
Hash identifier:          uv8PvfmUsEnAMrVJbwmqDRIF5ZRtnuD4Zjr+WXxWaAk=
Subject key identifier:   A9:4F:3D:61:C4:7A:5D:67:CE:F0:6B:DC:FA:3E:45:13:36:98:C1:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584210EF5E6FDE9D615878F92800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0cb9d542-0dab-31a8-bb87-248b81cb6388.roa
Signing time:             Wed 31 May 2023 17:00:30 +0000
ROA not before:           Wed 31 May 2023 17:00:30 +0000
ROA not after:            Tue 29 Aug 2023 17:00:30 +0000
asID:                     398343
IP address blocks:        166.1.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:10:ef:5e:6f:de:9d:61:58:78:f9:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 31 17:00:30 2023 GMT
            Not After : Aug 29 17:00:30 2023 GMT
        Subject: CN=0c8f4985-8bed-482a-806b-759d496cf07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:5a:d0:9c:1a:43:bb:5f:0a:2e:cb:de:e0:
                    85:5e:cb:94:81:42:d0:6f:27:c0:05:6b:cd:3d:50:
                    04:7a:ae:62:a8:c3:06:5c:0d:e5:fb:51:ca:3b:a4:
                    fb:4c:30:9f:cf:a2:0e:66:69:06:dd:97:15:13:26:
                    22:f2:f1:1b:60:94:c5:9e:fb:30:db:8e:b8:88:72:
                    54:fc:90:c4:85:7b:d5:b6:bc:dc:4a:59:2f:06:e4:
                    96:75:aa:f8:cc:76:79:dc:18:f0:16:07:c7:02:86:
                    c6:4d:39:91:dc:cf:0e:a4:79:13:23:e8:c9:a3:b2:
                    e6:73:91:81:5e:6e:fa:89:8c:e6:35:7e:83:19:9b:
                    4b:19:b8:15:aa:57:a3:96:51:2d:85:f5:f9:68:d4:
                    24:73:9e:1c:6d:c0:65:a4:43:8f:da:f1:aa:c1:dc:
                    4e:35:60:45:a3:32:4b:a6:12:d3:ca:14:64:77:86:
                    b4:3d:be:06:98:3a:18:28:54:8a:ab:c1:08:c4:a4:
                    96:8a:aa:1c:2c:62:af:80:dc:17:4d:f1:dd:54:29:
                    6e:a2:52:91:17:62:50:b2:b0:53:bc:73:bb:aa:df:
                    d2:e5:62:9a:66:17:3c:82:6a:c2:9d:59:f9:ff:6a:
                    4a:79:8b:06:fd:de:cf:b5:82:23:8a:62:c6:69:67:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4F:3D:61:C4:7A:5D:67:CE:F0:6B:DC:FA:3E:45:13:36:98:C1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0cb9d542-0dab-31a8-bb87-248b81cb6388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:15:2b:57:e9:e3:cf:4a:80:0a:9c:e8:88:82:bf:93:21:8a:
         48:3c:ef:bf:3c:6b:27:af:14:d1:9c:ce:58:82:e5:13:f8:09:
         58:82:97:24:46:f8:64:b4:5d:e0:55:4e:c7:85:b6:d9:fd:97:
         e6:da:ca:10:78:df:33:66:1f:fe:2c:08:6b:e4:b5:7e:db:ec:
         ff:1c:c4:6d:27:29:ed:e3:62:4a:d1:01:9b:cc:39:bf:36:51:
         83:68:88:95:91:e9:04:99:16:df:6b:06:1f:c0:7a:e8:ba:71:
         24:5e:1f:db:e8:99:5a:54:74:d4:85:9d:2d:0e:a2:32:29:cc:
         b6:85:dd:5d:85:25:e5:4f:6f:9e:f8:c6:95:49:c2:51:b4:e2:
         9c:e6:8d:7d:80:f7:3c:00:62:8c:09:39:27:ce:9a:89:64:cb:
         a9:1c:47:c3:5d:17:5a:f9:fb:ab:05:c6:88:ba:1e:c8:47:30:
         8e:85:5a:bc:86:da:af:82:94:11:3a:06:23:30:e2:fb:ac:fe:
         01:71:52:11:46:4d:ec:f6:d0:2c:22:c2:77:3f:e6:37:8f:e5:
         ed:41:8d:c8:71:dc:4d:a3:2a:92:13:e3:df:47:99:54:64:06:
         c9:aa:70:30:bb:2c:e6:86:22:cc:f2:38:54:f9:b4:84:fc:1d:
         41:6f:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----