Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17229c13-1b7b-3133-a2c1-712ef44f319b.roa
File:                     17229c13-1b7b-3133-a2c1-712ef44f319b.roa (raw, json)
Hash identifier:          q7uggARBP/HSBLom65vZBz0F1X+j8tqfIk3NjGt1kuY=
Subject key identifier:   25:26:A0:B7:36:BD:87:33:C2:10:EF:D7:BD:96:44:2A:A5:58:89:32
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858436DDD5EAF18356F3AEBFF4C90
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17229c13-1b7b-3133-a2c1-712ef44f319b.roa
Signing time:             Tue 03 Oct 2023 16:41:21 +0000
ROA not before:           Tue 03 Oct 2023 16:41:21 +0000
ROA not after:            Mon 01 Jan 2024 17:41:21 +0000
asID:                     834
IP address blocks:        166.0.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6d:dd:5e:af:18:35:6f:3a:eb:ff:4c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  3 16:41:21 2023 GMT
            Not After : Jan  1 17:41:21 2024 GMT
        Subject: CN=2d7095a8-7a8a-4747-95cf-caa9d1c2cbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:1d:ff:a2:11:80:bd:ff:47:36:bb:a2:26:
                    f2:72:56:7c:56:96:b6:5d:6f:b3:56:65:fc:8c:49:
                    2f:4f:cf:9b:9f:a2:82:1d:81:25:a0:c8:8e:3c:7b:
                    1d:83:7c:20:c9:d6:33:b9:fc:f8:59:0a:33:b0:7d:
                    df:29:4d:e9:23:10:5f:99:06:ea:a4:6e:0f:9a:44:
                    66:e2:19:f1:65:35:f7:ca:55:cf:78:20:b0:8f:2b:
                    7a:49:01:92:71:40:fa:be:78:5a:84:06:b3:d7:32:
                    56:62:ca:c7:4f:b7:60:06:20:5a:0b:94:b0:84:7e:
                    13:ef:71:10:33:7a:7e:5d:53:35:bd:7b:04:dc:cb:
                    59:e2:b4:fa:cf:da:a5:6e:af:81:e5:00:cb:a0:89:
                    f3:18:7d:3a:22:d9:fe:7c:0e:77:5e:56:60:5b:7c:
                    15:b2:1f:a5:9c:09:51:5c:9c:6a:06:83:57:6d:78:
                    6a:3b:13:7b:69:ac:c4:10:2b:c4:b9:41:12:22:8f:
                    cd:69:92:a6:bd:c9:a8:c7:82:94:2e:df:02:55:57:
                    6c:36:b1:55:a5:4a:10:49:5c:d6:c4:a9:06:2a:f6:
                    a7:09:8e:dc:36:ff:15:8a:d0:ff:d2:e4:4e:1c:bb:
                    ed:33:31:59:31:02:40:76:bd:03:2d:46:3e:db:49:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:26:A0:B7:36:BD:87:33:C2:10:EF:D7:BD:96:44:2A:A5:58:89:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17229c13-1b7b-3133-a2c1-712ef44f319b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:5e:33:f0:95:2f:c0:3d:4c:d3:44:6b:b7:5e:06:56:c1:
         63:d3:69:04:3a:1d:43:69:12:ff:77:87:5b:88:3b:86:fb:37:
         1b:ee:bf:32:f7:57:5b:8a:1b:fe:cc:8e:61:ba:31:5f:fa:cc:
         26:3e:9b:1a:9d:1c:bf:2c:24:18:4e:6e:da:b7:08:0a:8b:66:
         60:7d:7e:e9:7e:14:9c:19:d0:16:60:ef:eb:19:6c:34:ee:40:
         52:bc:62:b4:b3:d7:4d:20:87:c5:b9:45:1e:03:13:79:0a:d4:
         7b:9a:50:2c:29:63:e6:a5:4f:bd:be:82:27:6f:c9:66:2d:a0:
         91:0a:81:e4:ca:9a:f2:0f:77:a3:0e:5f:fd:25:06:f7:b7:a8:
         c4:a5:53:b8:74:16:23:76:c0:5d:68:f4:69:77:9c:93:c0:95:
         02:27:f1:25:86:75:f0:3b:ca:e7:af:ff:a3:2f:70:bb:de:58:
         a8:95:62:b0:9a:3a:c9:22:1d:f4:4a:52:e9:b4:35:bb:cb:97:
         bb:22:b9:11:5c:54:4b:4b:f1:a7:0a:99:d0:7f:5a:ba:64:48:
         68:87:dd:25:ca:4a:d0:b8:7c:dc:8d:79:eb:8a:46:55:55:21:
         4f:08:d6:38:c0:d2:a1:4a:43:ab:b1:74:62:f2:9e:1d:c0:e2:
         e5:39:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 17:46:54 2023 by rpki-client on console-fra.rpki-client.org