Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e9c83ad-56e1-3b3b-b9a4-014fe8104b1c.roa
File:                     1e9c83ad-56e1-3b3b-b9a4-014fe8104b1c.roa (raw, json)
Hash identifier:          8ra/wI7qCIJo3KwxqUIIIl4cV12lS6Yw/p5bYqebPhc=
Subject key identifier:   BB:28:D6:8E:19:6F:3D:FF:5E:8C:8C:A7:7A:0F:6B:D8:5B:B0:98:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584464B44752CB7ABA2B3D4D6800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e9c83ad-56e1-3b3b-b9a4-014fe8104b1c.roa
Signing time:             Sun 31 Dec 2023 02:43:13 +0000
ROA not before:           Sun 31 Dec 2023 02:43:13 +0000
ROA not after:            Sat 30 Mar 2024 01:43:13 +0000
asID:                     11798
IP address blocks:        166.1.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Feb 2024 18:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:64:b4:47:52:cb:7a:ba:2b:3d:4d:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 31 02:43:13 2023 GMT
            Not After : Mar 30 01:43:13 2024 GMT
        Subject: CN=99f4c421-411f-4c05-af3b-1d9f6eb01fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:10:4c:6b:a8:42:80:65:26:ce:85:04:c4:
                    18:af:2e:50:6a:e3:38:25:1a:48:64:75:bc:39:20:
                    cb:e8:3e:1c:01:3f:ca:2c:89:a3:51:1a:52:84:80:
                    69:97:cb:51:7c:52:83:4b:88:9d:09:6d:d3:9c:15:
                    1f:3a:37:26:6f:ec:cb:12:be:87:a3:ea:ed:d0:f6:
                    bc:6d:b1:b6:0d:45:be:b2:f0:43:ba:1f:76:4e:fd:
                    1c:3a:5f:c1:89:4c:eb:1a:9f:d9:28:2a:ba:82:d1:
                    62:a0:4e:5e:3c:6b:29:ef:31:09:bf:b9:e2:46:89:
                    6d:97:06:07:34:e5:81:4c:de:c7:d6:84:3f:5d:4f:
                    33:1d:d2:56:f3:b9:de:aa:d7:34:23:a4:b0:b9:e6:
                    f5:8a:eb:41:9f:4c:ee:28:7b:be:aa:a4:e2:c4:24:
                    08:6a:c7:21:87:cf:2b:6e:7b:81:a5:16:0b:c5:18:
                    11:58:86:b3:93:8b:db:c9:e6:0a:b7:39:a1:dc:eb:
                    83:f2:c7:fc:42:39:3d:63:21:4d:d4:85:5c:be:d9:
                    3d:e2:d5:cf:9e:11:1b:0b:b7:61:e5:bc:01:30:09:
                    40:42:27:10:fc:5c:20:73:e8:77:12:68:23:fc:dd:
                    64:fd:29:b4:c8:26:8d:7b:e6:06:95:41:d9:93:56:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:D6:8E:19:6F:3D:FF:5E:8C:8C:A7:7A:0F:6B:D8:5B:B0:98:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1e9c83ad-56e1-3b3b-b9a4-014fe8104b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:04:27:17:23:47:e7:a8:55:a0:ca:08:50:cf:68:4c:6a:
         cf:f5:99:23:41:ab:16:14:a4:42:15:50:bf:d2:2a:56:0f:00:
         00:88:2f:41:6c:b4:6d:59:82:f7:17:24:bd:31:ed:7c:b1:84:
         5c:eb:7a:56:f8:82:51:5c:a9:ef:c5:d6:ce:15:3d:c1:b3:c6:
         e6:a4:ae:01:7b:14:16:2c:70:52:e2:1f:5d:b9:d0:05:4e:4d:
         14:e0:a5:9f:db:cd:ef:f4:c3:a6:4e:12:d3:fc:f4:59:ec:1e:
         20:e1:a9:25:e7:ca:46:de:61:d2:54:d0:d9:1c:8f:07:98:da:
         3d:64:eb:b9:ff:87:2f:a7:90:de:87:e1:ac:4d:7f:4e:d6:23:
         5d:cf:39:e3:97:b2:42:14:3c:9c:53:78:9b:4c:5f:74:64:c6:
         d6:58:a7:6b:27:4d:a6:36:e2:79:05:7c:de:06:e5:cf:2d:c5:
         bf:ce:3a:e0:66:61:51:b3:25:f3:7b:05:54:5c:df:5c:18:70:
         59:2c:1e:24:5a:da:5a:a5:fd:64:fb:3b:ae:87:3f:a6:0e:a8:
         dd:07:c1:13:91:9a:c3:5f:8a:52:e0:cc:61:18:65:f8:d4:27:
         26:01:55:91:3d:25:47:95:81:26:ac:58:f7:4a:c5:56:57:1c:
         9e:ec:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----