Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13bcfe1f-a849-3320-8eee-c12bece86ab7.roa
File:                     13bcfe1f-a849-3320-8eee-c12bece86ab7.roa (raw, json)
Hash identifier:          XaGfZ7+NguVh4lS90/diRyBM9EiEuv19eKglWua+CgM=
Subject key identifier:   9F:8D:EE:F9:98:00:C4:F3:2F:40:2F:24:6B:B1:6D:C0:D2:D7:CF:2B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BDF274D3B071FEDD68DAA700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13bcfe1f-a849-3320-8eee-c12bece86ab7.roa
Signing time:             Tue 01 Aug 2023 16:21:34 +0000
ROA not before:           Tue 01 Aug 2023 16:21:34 +0000
ROA not after:            Mon 30 Oct 2023 16:21:34 +0000
asID:                     11798
IP address blocks:        166.1.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bd:f2:74:d3:b0:71:fe:dd:68:da:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  1 16:21:34 2023 GMT
            Not After : Oct 30 16:21:34 2023 GMT
        Subject: CN=27bf18cf-d1b7-4218-a336-99cc76e8ca30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:ec:70:2e:48:ee:c7:39:7f:5a:47:b4:6f:
                    e8:93:24:8d:37:70:cf:9a:58:1f:7e:9e:f6:2e:63:
                    44:d2:af:0e:fc:6c:6d:99:22:d2:23:61:fb:30:32:
                    7e:00:4d:64:1a:56:3e:d6:fe:93:6c:20:de:c0:5f:
                    6f:33:a1:19:3d:8f:fc:f5:01:1f:d2:12:a5:7c:7a:
                    f9:68:74:8a:65:25:1d:ab:ba:84:ff:03:3d:5b:34:
                    b0:b1:c5:85:9b:44:1c:b1:36:a9:7f:35:93:b5:c9:
                    dc:19:89:c2:54:e0:aa:15:32:a2:bf:c9:21:9f:18:
                    57:7e:b8:e6:18:c1:10:11:9f:a6:15:31:7c:ca:33:
                    90:b1:8c:31:41:61:e0:b8:6d:7f:75:67:4a:3b:12:
                    34:b3:6f:df:88:f2:59:36:6e:5c:94:fc:1a:3d:3d:
                    b1:c6:0a:01:34:01:c6:dc:7e:47:73:9d:46:05:6c:
                    93:36:da:8f:96:31:48:c1:c3:cc:d9:a6:e9:c2:1c:
                    48:8d:c1:96:c7:ce:50:4d:fb:a1:a0:7b:80:c1:c9:
                    39:c9:12:43:a0:f7:03:71:a3:a7:87:ce:5c:d4:29:
                    2f:ab:ad:23:8e:a3:0c:64:38:ea:5e:26:b6:7c:b4:
                    9e:85:a0:c1:8f:6c:2c:fc:5d:ec:4e:ae:5d:fd:d2:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:EE:F9:98:00:C4:F3:2F:40:2F:24:6B:B1:6D:C0:D2:D7:CF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13bcfe1f-a849-3320-8eee-c12bece86ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:98:37:32:57:1f:a1:8d:30:6c:a9:a5:66:0f:ea:13:fc:
         d1:0a:14:e0:73:8f:39:c2:ed:05:54:7b:07:39:74:92:96:ca:
         c9:4b:fd:3a:68:8b:9a:39:02:ca:98:5d:6e:11:16:67:c4:b5:
         77:49:89:95:8d:40:f2:b7:94:d8:23:25:22:4f:bc:54:4b:05:
         e8:8f:9a:2f:4f:7c:3f:22:a7:57:8e:82:22:02:2f:1f:2f:53:
         d4:49:78:20:e3:6c:dd:c5:91:df:90:d4:3a:4a:e6:00:2b:5b:
         be:86:13:c7:8c:e3:f4:b0:3c:96:cb:4d:4c:28:9b:45:80:5e:
         21:4a:63:fd:9a:7b:22:d8:ac:6c:f3:09:22:34:07:d7:38:f1:
         74:f6:4b:c1:1d:33:16:88:d5:87:44:03:fd:9f:c6:8c:fd:af:
         a3:70:e5:3c:0a:87:5d:84:d1:e3:ea:6a:3c:8b:dc:6e:94:c8:
         a8:eb:d4:93:7e:27:2f:6d:db:7f:fa:8f:70:cd:5d:02:22:18:
         88:fd:5f:d2:96:fe:14:c7:57:41:be:bf:cf:50:a8:75:63:bf:
         39:b6:74:6f:c3:81:76:17:3f:4f:0c:a4:a5:12:03:b3:fc:18:
         a0:03:f6:4a:6b:5a:9d:c9:d0:60:38:6e:8a:8e:52:8b:b0:18:
         a9:6f:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 17:09:59 2023 by rpki-client on console-fra.rpki-client.org