Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1de4d056-34a0-3940-a2ca-e33565c53e7f.roa
File:                     1de4d056-34a0-3940-a2ca-e33565c53e7f.roa (raw, json)
Hash identifier:          l6/2R9Y4VfpLht777IWZT4pPdMQgON0EB9t7UTyBCbo=
Subject key identifier:   97:7B:56:87:50:6E:EF:F2:E6:2C:D4:62:50:6C:08:54:D4:06:60:39
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842CA7A0349E4035A4D8C3E8200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1de4d056-34a0-3940-a2ca-e33565c53e7f.roa
Signing time:             Sun 06 Aug 2023 04:04:23 +0000
ROA not before:           Sun 06 Aug 2023 04:04:23 +0000
ROA not after:            Sat 04 Nov 2023 04:04:23 +0000
asID:                     11798
IP address blocks:        166.1.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ca:7a:03:49:e4:03:5a:4d:8c:3e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  6 04:04:23 2023 GMT
            Not After : Nov  4 04:04:23 2023 GMT
        Subject: CN=8faadd4a-4cbd-4f50-bb84-00c8dac32413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:7c:01:ef:1c:3f:0a:fb:2a:53:02:da:26:
                    d1:50:05:64:85:03:36:b7:a7:a5:19:17:c8:6d:68:
                    25:60:82:d3:f8:99:a3:3e:d3:96:68:80:52:3e:34:
                    d7:25:4d:d2:91:63:59:e2:5d:fd:ad:1b:57:f0:1c:
                    6e:f1:b5:70:53:6b:84:68:3b:31:3d:34:ea:93:40:
                    11:9d:79:5e:73:8a:6b:28:40:98:6e:9c:b4:a9:15:
                    a3:a7:50:7c:f1:03:f9:73:27:6b:8a:ca:07:cb:fd:
                    31:a6:15:f9:ea:1b:a5:37:ea:26:34:de:b4:44:17:
                    e3:72:36:65:e0:8a:46:4a:62:bd:2a:30:df:5e:b6:
                    be:c5:08:0a:86:db:7e:e6:0b:90:29:96:b2:15:8d:
                    aa:eb:c2:9d:3a:48:f6:76:aa:c5:02:c5:b5:70:64:
                    25:c0:80:20:cc:d3:83:5a:13:2e:d5:99:6b:eb:5f:
                    65:a8:6d:3b:50:53:5d:8e:71:69:22:3c:e6:01:7c:
                    06:37:39:9a:ff:7a:8c:e8:82:ff:a6:b3:c2:cc:e0:
                    aa:86:16:fc:7c:a2:d6:f9:e6:fa:e9:a8:23:c1:34:
                    34:05:34:55:18:75:48:81:d2:7f:61:5e:63:e5:2a:
                    f0:0c:c0:3c:fb:2f:b2:3d:ff:0d:4a:dc:a2:60:58:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7B:56:87:50:6E:EF:F2:E6:2C:D4:62:50:6C:08:54:D4:06:60:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1de4d056-34a0-3940-a2ca-e33565c53e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:4c:18:f3:75:d0:6c:5b:3a:fa:ae:e9:69:55:55:c0:9a:
         f4:78:5e:61:44:15:7d:25:c5:62:83:53:9a:77:51:72:ad:16:
         79:41:be:45:d6:29:42:70:9a:67:8d:38:41:74:a4:a4:e5:a7:
         ca:35:b6:e0:7e:8e:27:93:f7:84:0b:7f:b6:70:a4:52:ce:31:
         fe:9d:de:e5:38:1b:fa:a8:6f:18:7f:51:e6:0b:da:6c:9d:6e:
         a6:ac:11:82:24:cd:d9:7b:d7:63:66:03:58:92:6b:af:f6:99:
         b9:e2:c9:62:97:47:4d:aa:e2:76:89:8b:d9:0c:05:27:84:4c:
         ea:ce:b2:75:41:bc:64:93:5b:e7:cc:bc:7c:58:39:e6:06:d2:
         b6:96:17:45:e8:42:0b:82:35:25:03:8e:ce:0b:5f:46:df:33:
         ee:10:c5:b2:32:9c:6a:79:5b:d1:06:b7:d2:ce:ca:39:86:45:
         cc:56:a7:cb:9d:ce:c3:81:ca:b6:50:88:b8:78:7c:81:c9:a3:
         c9:7f:37:6a:45:18:12:ca:3b:51:87:e5:62:fd:20:8c:4b:c5:
         65:4e:57:f9:ef:7b:4f:26:c3:f0:e7:0e:08:b5:d6:95:a2:be:
         f0:c0:8b:e1:a6:17:83:b9:cc:d0:4c:ec:5f:08:ba:fd:42:46:
         39:cc:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 20:23:01 2023 by rpki-client on console-fra.rpki-client.org