Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a0fe0e5-ce82-3ce5-a4c2-61dc532db679.roa
File:                     1a0fe0e5-ce82-3ce5-a4c2-61dc532db679.roa (raw, json)
Hash identifier:          5K8KfpVUWGFpNaXAh4XtEl5jX3PWtSb2icNlSBV23tg=
Subject key identifier:   91:40:DD:8F:E1:8E:49:12:C3:AF:5E:21:E3:80:D6:A7:72:2D:76:73
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584248BE73EF8B18408082E68E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a0fe0e5-ce82-3ce5-a4c2-61dc532db679.roa
Signing time:             Tue 20 Jun 2023 16:47:12 +0000
ROA not before:           Tue 20 Jun 2023 16:47:12 +0000
ROA not after:            Mon 18 Sep 2023 16:47:12 +0000
asID:                     198802
IP address blocks:        166.1.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:48:be:73:ef:8b:18:40:80:82:e6:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 20 16:47:12 2023 GMT
            Not After : Sep 18 16:47:12 2023 GMT
        Subject: CN=58129489-6218-4b23-a019-88c7803615ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:7d:ff:e4:b4:84:91:93:56:b0:3f:83:df:
                    d9:25:26:9f:9a:7b:5f:7e:0f:b5:08:5b:56:6a:e6:
                    a2:72:75:bc:19:1e:e5:83:92:1b:e8:15:d4:9e:89:
                    2a:ed:81:aa:9d:c3:41:cd:94:78:e4:bd:65:3c:93:
                    21:0b:58:21:b0:8f:5a:bd:39:1a:9e:3f:61:93:89:
                    11:29:32:f0:6a:56:f7:a0:46:5f:c1:dc:9a:0b:a1:
                    83:df:39:18:ff:c9:54:6b:0e:90:85:6b:21:d3:41:
                    cf:e1:01:95:32:09:8c:f8:e9:cb:fc:28:c0:09:5a:
                    f1:26:50:68:71:53:46:31:37:ae:22:60:6f:5d:07:
                    20:95:6b:67:12:1c:fd:a8:99:b9:01:b9:13:3d:31:
                    c1:38:cb:2a:62:1e:cd:6a:8f:09:f3:21:e9:48:44:
                    68:00:8b:75:4f:7e:b6:21:77:05:be:2e:bc:ed:b7:
                    18:7f:60:36:e5:b7:df:1d:64:ac:bd:4b:f8:fd:29:
                    b4:c1:90:6e:d7:42:bf:dc:09:67:ae:d2:a8:a3:cd:
                    89:42:ee:6f:a6:9a:e1:35:97:5a:6e:e3:32:08:f6:
                    67:16:ce:36:2d:8b:63:6e:62:cc:e7:00:a3:d3:9a:
                    25:93:d8:aa:f8:4c:d0:18:ee:95:56:96:ea:6e:a0:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:40:DD:8F:E1:8E:49:12:C3:AF:5E:21:E3:80:D6:A7:72:2D:76:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a0fe0e5-ce82-3ce5-a4c2-61dc532db679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:38:7c:f2:ed:01:57:96:8f:c6:09:0f:c4:6c:b7:29:57:d8:
         86:14:cf:82:ff:61:ec:55:8e:e6:c6:92:da:1f:97:56:10:dd:
         59:3b:09:9b:1b:99:25:50:cc:b9:a4:5d:54:22:7c:2a:ca:7f:
         24:59:fb:76:1c:39:91:fc:15:51:a5:77:7e:59:8d:32:aa:b0:
         97:9f:9a:12:e5:4d:11:4e:63:52:9a:b1:03:e9:de:d6:56:6b:
         f4:7e:74:8b:23:3d:11:d4:a8:b0:8d:3e:b5:68:15:d8:e6:fe:
         5b:7d:b0:f4:8a:e2:aa:4b:76:e2:0f:6b:bb:fd:ba:ea:67:e2:
         bc:3c:86:6f:f9:92:5b:bf:6f:7a:97:f2:bb:ed:e0:d3:97:69:
         0f:35:69:e8:b8:d8:13:7a:d6:8e:54:d8:93:8f:60:58:91:01:
         18:6d:3b:28:c6:03:b5:3e:60:d6:89:e8:8d:01:d8:a3:17:6f:
         5f:b1:27:3e:4c:9b:32:dd:4b:6b:e1:71:3b:d0:01:97:43:f1:
         cd:c6:87:f2:44:c9:86:b3:e6:80:0b:e8:10:c1:7a:4f:b8:c1:
         4f:15:b3:86:55:68:1b:59:c1:3e:86:80:33:bb:51:09:6b:2d:
         d3:db:2d:ac:25:22:b8:36:c2:54:55:f2:2e:e7:01:98:11:00:
         55:32:90:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJIvnPvixhAgILmjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYyMDE2NDcxMloXDTIzMDkxODE2NDcxMlowLzEtMCsGA1UEAxMk
NTgxMjk0ODktNjIxOC00YjIzLWEwMTktODhjNzgwMzYxNWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Z9/+S0hJGTVrA/g9/ZJSafmntffg+1CFtW
auaicnW8GR7lg5Ib6BXUnokq7YGqncNBzZR45L1lPJMhC1ghsI9avTkanj9hk4kR
KTLwalb3oEZfwdyaC6GD3zkY/8lUaw6QhWsh00HP4QGVMgmM+OnL/CjACVrxJlBo
cVNGMTeuImBvXQcglWtnEhz9qJm5AbkTPTHBOMsqYh7Nao8J8yHpSERoAIt1T362
IXcFvi687bcYf2A25bffHWSsvUv4/Sm0wZBu10K/3AlnrtKoo82JQu5vpprhNZda
buMyCPZnFs42LYtjbmLM5wCj05olk9iq+EzQGO6VVpbqbqBciQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFA3Y/hjkkSw69eIeOA1qdyLXZzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWEwZmUwZTUtY2U4Mi0z
Y2U1LWE0YzItNjFkYzUzMmRiNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ4fPLtAVeWj8YJD8RstylX2IYUz4L/YexVjubGktofl1YQ3Vk7CZsb
mSVQzLmkXVQifCrKfyRZ+3YcOZH8FVGld35ZjTKqsJefmhLlTRFOY1KasQPp3tZW
a/R+dIsjPRHUqLCNPrVoFdjm/lt9sPSK4qpLduIPa7v9uupn4rw8hm/5klu/b3qX
8rvt4NOXaQ81aei42BN61o5U2JOPYFiRARhtOyjGA7U+YNaJ6I0B2KMXb1+xJz5M
mzLdS2vhcTvQAZdD8c3Gh/JEyYaz5oAL6BDBek+4wU8Vs4ZVaBtZwT6GgDO7UQlr
LdPbLawlIrg2wlRV8i7nAZgRAFUykPg=
-----END CERTIFICATE-----