Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d06ea44-e610-39cd-b4ab-c3128041cb6b.roa
File:                     1d06ea44-e610-39cd-b4ab-c3128041cb6b.roa (raw, json)
Hash identifier:          M9oVdgfK5w+K9QhY9L/Cg20e9DgGPJukBzou58t3Zyk=
Subject key identifier:   0B:6D:40:0E:99:FC:CB:1A:88:9C:A8:5C:8C:D7:3E:0E:19:56:E0:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842356352C4F7A4156EB9BFFA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d06ea44-e610-39cd-b4ab-c3128041cb6b.roa
Signing time:             Tue 13 Jun 2023 18:23:14 +0000
ROA not before:           Tue 13 Jun 2023 18:23:14 +0000
ROA not after:            Mon 11 Sep 2023 18:23:14 +0000
asID:                     834
IP address blocks:        108.165.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:63:52:c4:f7:a4:15:6e:b9:bf:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 13 18:23:14 2023 GMT
            Not After : Sep 11 18:23:14 2023 GMT
        Subject: CN=1f1cb8f1-e93a-45e9-8537-61d09c5f3fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:0c:95:4c:73:2a:b8:d7:07:76:1f:2a:e4:
                    44:02:e6:1c:8f:fd:b7:48:ab:75:8c:6a:72:83:14:
                    f1:1f:0e:33:90:e1:af:b0:bc:3d:77:5a:be:5f:34:
                    ea:39:b5:3a:4e:e2:34:0f:31:ac:a2:db:16:e8:0b:
                    e8:26:0b:bd:41:04:21:46:c0:cb:3a:c9:b4:66:e8:
                    e5:80:e0:31:d5:47:bc:f1:c1:18:4d:3c:e3:84:4f:
                    41:39:c3:2d:b9:07:61:f0:d8:44:05:74:38:cd:78:
                    18:cd:33:8d:94:ff:37:80:ea:ac:16:73:5d:f9:88:
                    72:d7:d5:89:53:68:1e:48:f0:03:61:59:b4:a9:2e:
                    23:f4:87:09:58:04:ce:4e:94:c4:fc:c8:5b:0b:e4:
                    ad:68:24:42:df:2b:ec:b8:d0:f7:17:1f:9f:83:3b:
                    1b:08:16:30:91:68:b5:33:82:78:66:49:eb:99:66:
                    2e:d9:1c:51:77:9d:74:dc:78:7c:ba:0b:72:f5:86:
                    31:5f:70:bc:df:36:8e:25:c4:23:5c:d4:5f:06:b3:
                    95:88:9d:b7:cf:ad:31:b2:63:aa:57:43:df:96:38:
                    87:6a:65:0a:32:30:0c:45:ac:b9:fd:3a:5f:05:1c:
                    f0:91:db:f4:4d:e0:ab:5d:7f:be:e3:d0:fd:ea:d1:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:40:0E:99:FC:CB:1A:88:9C:A8:5C:8C:D7:3E:0E:19:56:E0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d06ea44-e610-39cd-b4ab-c3128041cb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:6a:0f:90:ab:03:20:b9:02:dc:25:d9:ee:26:69:1f:b8:
         a2:35:6d:76:fd:ba:33:f3:74:bc:2f:7d:e9:e4:87:60:e1:21:
         9f:33:53:30:80:9e:cf:d1:3a:9c:f3:43:fb:de:1a:f2:fc:f0:
         03:95:51:3c:f2:9f:81:76:14:05:62:de:7a:3a:a1:cf:3f:97:
         5d:0f:89:41:f4:dd:5a:fe:31:f0:8a:7c:43:c1:7d:8e:ac:04:
         35:6c:5a:02:63:b4:26:55:8d:ee:7d:fb:67:0d:0c:f3:2a:84:
         63:94:f0:d7:fe:4d:f6:b0:33:12:c1:51:f1:d7:b7:77:9c:50:
         ed:98:4d:bd:2e:60:43:ff:7d:1e:83:3d:29:73:ef:82:3b:7d:
         a0:55:3b:7e:3d:f9:f9:94:ea:57:a3:4f:40:58:eb:a1:62:a6:
         0f:2e:81:db:55:89:95:cc:6a:4a:da:a6:50:22:7c:77:0c:79:
         34:d4:8f:a4:35:f3:1f:ac:2b:7c:f8:34:7e:51:e7:aa:8c:c0:
         ef:4a:8d:f6:3f:5a:56:25:f8:70:51:cd:38:ab:63:b4:65:11:
         e8:d3:ae:4b:64:2d:1e:2b:ff:e3:15:46:17:21:af:33:d9:58:
         aa:3a:89:fe:8d:37:73:ed:b4:68:d1:19:5f:d0:c9:eb:9c:77:
         43:14:67:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEI1Y1LE96QVbrm/+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxMzE4MjMxNFoXDTIzMDkxMTE4MjMxNFowLzEtMCsGA1UEAxMk
MWYxY2I4ZjEtZTkzYS00NWU5LTg1MzctNjFkMDljNWYzZmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu8MlUxzKrjXB3YfKuREAuYcj/23SKt1jGpy
gxTxHw4zkOGvsLw9d1q+XzTqObU6TuI0DzGsotsW6AvoJgu9QQQhRsDLOsm0Zujl
gOAx1Ue88cEYTTzjhE9BOcMtuQdh8NhEBXQ4zXgYzTONlP83gOqsFnNd+Yhy19WJ
U2geSPADYVm0qS4j9IcJWATOTpTE/MhbC+StaCRC3yvsuND3Fx+fgzsbCBYwkWi1
M4J4ZknrmWYu2RxRd5103Hh8ugty9YYxX3C83zaOJcQjXNRfBrOViJ23z60xsmOq
V0PfljiHamUKMjAMRay5/TpfBRzwkdv0TeCrXX++49D96tHBcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAttQA6Z/MsaiJyoXIzXPg4ZVuDeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWQwNmVhNDQtZTYxMC0z
OWNkLWI0YWItYzMxMjgwNDFjYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGf4ag+QqwMguQLcJdnuJmkfuKI1bXb9ujPzdLwvfenkh2DhIZ8zUzCA
ns/ROpzzQ/veGvL88AOVUTzyn4F2FAVi3no6oc8/l10PiUH03Vr+MfCKfEPBfY6s
BDVsWgJjtCZVje59+2cNDPMqhGOU8Nf+TfawMxLBUfHXt3ecUO2YTb0uYEP/fR6D
PSlz74I7faBVO349+fmU6lejT0BY66Fipg8ugdtViZXMakraplAifHcMeTTUj6Q1
8x+sK3z4NH5R56qMwO9KjfY/WlYl+HBRzTirY7RlEejTrktkLR4r/+MVRhchrzPZ
WKo6if6NN3PttGjRGV/Qyeucd0MUZ2Q=
-----END CERTIFICATE-----