Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f432ef2-68e2-304f-b6b8-82484d5b38bd.roa
File:                     0f432ef2-68e2-304f-b6b8-82484d5b38bd.roa (raw, json)
Hash identifier:          ETkmccyKbC4eCV1Q7IN45WsWIq3DI2E64/Og9uG9+kk=
Subject key identifier:   4A:71:B1:CB:E7:B0:A3:26:1F:78:EF:54:EB:CA:F8:50:2C:F5:D8:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842AE33D3A5D4E19D7DF6BBA300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f432ef2-68e2-304f-b6b8-82484d5b38bd.roa
Signing time:             Thu 27 Jul 2023 01:00:17 +0000
ROA not before:           Thu 27 Jul 2023 01:00:17 +0000
ROA not after:            Wed 25 Oct 2023 01:00:17 +0000
asID:                     60721
IP address blocks:        108.165.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ae:33:d3:a5:d4:e1:9d:7d:f6:bb:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 27 01:00:17 2023 GMT
            Not After : Oct 25 01:00:17 2023 GMT
        Subject: CN=72857aef-ff0d-4027-a999-8de52ce12ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:8e:ab:67:22:bf:0d:65:3f:d6:37:bb:4b:
                    e3:71:bf:01:79:4a:99:32:56:bb:ba:3f:13:7d:06:
                    4f:99:35:f8:e3:a8:ad:8d:da:e1:e7:07:af:de:c3:
                    06:a8:40:0c:0e:3a:44:fb:76:43:cb:ef:24:91:db:
                    98:20:e2:1b:eb:cc:ce:bf:e9:a4:41:a9:c3:a4:e4:
                    ac:a1:71:d7:f8:d4:98:40:b0:ed:01:ff:6b:3a:01:
                    dc:33:bc:6c:e4:30:e0:94:45:4a:ac:47:6e:f9:3f:
                    78:9f:85:7e:fd:3a:7e:19:23:2e:03:a0:c0:20:07:
                    87:b5:22:cb:dd:40:c2:eb:c4:de:bf:c9:60:35:c5:
                    43:c8:d9:d4:69:af:2c:0b:8e:ba:f8:83:b5:a7:73:
                    25:6f:0f:d3:c3:7f:7f:ae:9f:6e:e3:ca:d6:f5:ec:
                    75:7e:39:df:23:ef:90:4b:cf:4b:5a:1e:49:bf:ab:
                    90:5b:75:4a:57:77:86:b5:22:46:29:6a:f3:b5:1d:
                    dc:04:26:cc:96:8c:7d:5b:81:9a:a6:a6:b2:3f:cc:
                    fd:fa:c3:48:70:27:9d:4a:3f:1e:41:a3:e5:cb:3e:
                    d5:93:e7:98:56:bb:73:59:8f:d1:36:bc:42:9a:67:
                    05:ae:f2:e0:b7:12:9f:58:40:5d:b8:a8:3b:68:cc:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:71:B1:CB:E7:B0:A3:26:1F:78:EF:54:EB:CA:F8:50:2C:F5:D8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f432ef2-68e2-304f-b6b8-82484d5b38bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:31:5c:9f:de:ae:64:10:e6:f0:62:18:fa:5c:72:ed:c8:b8:
         bc:b3:9f:82:20:33:bd:12:3c:0e:4f:19:5b:59:c1:27:bd:b5:
         f8:9e:ac:56:18:ba:a5:f4:b2:83:a0:db:03:7d:ac:f7:03:c2:
         14:25:5b:28:11:ed:29:5f:1c:dd:1d:4a:8f:02:01:24:e4:d8:
         87:d3:c3:8e:a9:bd:98:24:05:61:af:99:68:8a:f5:91:eb:db:
         12:89:27:1c:b9:5f:38:79:e7:86:ed:99:68:19:48:ed:2a:06:
         bd:3b:23:fa:46:54:49:89:0f:32:36:a0:c9:24:64:49:64:0a:
         51:4c:11:f4:80:0a:57:c6:8e:0b:b8:ce:2b:e4:cc:da:00:a6:
         33:96:38:3b:4b:8f:6c:e2:35:de:30:ea:f3:16:f7:12:b5:69:
         a4:91:2f:ae:50:91:0c:a9:59:21:3b:5f:a8:35:dd:08:15:90:
         23:45:40:92:bb:73:40:bd:c7:a8:45:b7:6c:ac:60:3b:dc:ba:
         d8:be:5a:c7:43:b3:4f:6f:70:a6:67:77:8b:2b:0f:2f:e9:73:
         8d:d2:82:47:d6:93:c3:13:c1:3e:64:f0:b2:cf:58:57:79:d7:
         04:1b:e4:56:27:83:fb:95:80:91:9d:61:18:05:b5:b1:b5:53:
         5f:e4:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----