Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/168891ec-e97e-3939-9af2-d3c0b3deb647.roa
File:                     168891ec-e97e-3939-9af2-d3c0b3deb647.roa (raw, json)
Hash identifier:          odNidK1UZD1akUJ0Nwoq14NaKjUSj4eDCd4n441y6hw=
Subject key identifier:   E7:2A:CA:02:42:D7:1A:84:75:26:A6:4F:18:00:23:73:35:18:16:83
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858425973BAF8498E861FFA2E84C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/168891ec-e97e-3939-9af2-d3c0b3deb647.roa
Signing time:             Mon 26 Jun 2023 16:25:23 +0000
ROA not before:           Mon 26 Jun 2023 16:25:23 +0000
ROA not after:            Sun 24 Sep 2023 16:25:23 +0000
asID:                     834
IP address blocks:        166.0.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:59:73:ba:f8:49:8e:86:1f:fa:2e:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 26 16:25:23 2023 GMT
            Not After : Sep 24 16:25:23 2023 GMT
        Subject: CN=c0a20302-8c46-4e2f-8331-8d422db8d203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:fa:f9:ad:07:c3:8e:7b:be:8a:97:15:5d:
                    a8:60:f3:48:a6:b1:7d:48:df:58:e9:c8:d0:cc:1e:
                    f2:91:c9:d1:bf:68:81:02:16:f2:61:47:15:da:2a:
                    17:81:90:c3:07:a5:07:cf:68:71:5d:0b:4f:e6:a2:
                    89:56:1c:af:31:78:7f:be:03:da:ed:39:a1:58:b9:
                    1c:e9:19:17:2e:b0:2a:a3:4e:c4:2d:70:a0:c7:af:
                    ed:15:14:58:ec:ab:f5:da:b3:dc:86:c9:3d:45:df:
                    f9:86:3b:33:f8:97:d5:a8:2e:9b:ed:ce:d5:43:5c:
                    40:1f:5d:e5:ff:29:da:74:c8:3e:76:1d:87:e0:a2:
                    28:51:c2:27:ed:77:fb:e3:c3:7f:16:72:27:6d:ec:
                    9f:8b:b5:1e:54:2f:38:24:13:33:a3:55:ff:94:c4:
                    1a:e6:2b:71:56:aa:5f:e2:03:c8:d9:2e:d5:22:2d:
                    0f:4f:d2:4a:5a:43:b5:98:4b:58:49:24:5f:f4:50:
                    ea:5a:de:fd:09:71:0d:1c:fe:2f:42:c3:49:cf:00:
                    60:4f:a9:3f:bb:80:74:6e:ba:1d:ec:f2:51:9c:5b:
                    8a:d1:62:9b:a5:13:d4:a8:5a:79:34:4e:18:17:c6:
                    a2:4a:15:a6:71:04:2c:6d:d7:9d:31:6b:3c:15:18:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2A:CA:02:42:D7:1A:84:75:26:A6:4F:18:00:23:73:35:18:16:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/168891ec-e97e-3939-9af2-d3c0b3deb647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:89:b8:ae:3e:54:f7:e0:75:c2:28:61:17:11:97:7d:a0:
         c7:e6:ab:a0:30:2e:ae:af:0b:ef:2e:25:06:f7:1e:c7:6e:70:
         9c:e0:f4:71:9e:26:6f:6c:4b:12:02:7d:c4:85:ca:15:91:24:
         2c:27:6b:b1:1b:69:a7:8f:12:79:52:87:49:d6:0d:3d:6a:b4:
         c0:1d:84:0b:bc:4f:f8:b2:fb:c1:d3:d2:ee:03:e3:47:f9:58:
         66:07:d3:e2:97:0a:b2:e1:da:86:9d:f5:50:65:6e:ff:30:66:
         71:3d:0f:f3:05:74:f1:1e:c2:69:2b:b7:be:af:c3:f8:73:03:
         5f:03:ea:23:69:69:d1:36:51:e6:75:98:d0:f2:eb:57:f5:08:
         c9:14:26:2c:43:8a:36:0b:83:80:ac:ad:bc:55:96:8e:a5:d5:
         42:df:db:2c:ef:50:f0:b2:fd:b1:51:b5:e8:f6:eb:8d:cb:b9:
         fb:7c:01:f4:be:65:7e:18:96:02:6a:48:88:d4:bd:c2:1c:9a:
         23:f3:dc:39:00:53:82:ba:fb:d5:c0:0f:df:1e:3c:ca:2e:d7:
         64:e9:46:84:78:8b:4e:b7:ca:dd:e3:5a:af:98:9b:a9:b5:52:
         11:ae:7c:2b:51:47:5b:bc:9f:f5:f5:f2:b2:68:28:42:95:24:
         bb:bb:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----