Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fc27783-7370-30db-9f9c-0f311e8574ef.roa
File:                     1fc27783-7370-30db-9f9c-0f311e8574ef.roa (raw, json)
Hash identifier:          thi4ZQNtf+NWUPEWjqwwyzJQtMhWwpsjqwRhxGEqpjg=
Subject key identifier:   58:ED:26:F6:3A:2B:A7:49:73:A0:8B:11:98:58:80:8E:65:30:04:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583AD30E2B990395D402D5DAF080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fc27783-7370-30db-9f9c-0f311e8574ef.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Wed 08 Nov 2023 05:00:00 +0000
asID:                     19437
IP address blocks:        108.165.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:d3:0e:2b:99:03:95:d4:02:d5:da:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Nov  8 05:00:00 2023 GMT
        Subject: CN=f67a8e55-244f-4b41-9a90-f54d07b4ce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0d:1d:65:dc:d9:74:7e:aa:9d:37:ea:24:a9:
                    78:92:78:fb:33:7f:73:28:81:9d:88:51:02:c1:83:
                    51:b9:be:9e:74:21:99:d1:49:ca:7f:d4:ec:90:3d:
                    8f:4e:4c:96:a3:c6:eb:90:4f:07:6d:28:97:ff:c7:
                    9b:92:b9:1c:e3:51:93:67:03:8f:cc:2a:62:04:12:
                    78:2a:1e:4f:b6:1d:c7:9e:d2:39:34:7b:9c:c2:4d:
                    30:bc:ad:1d:52:c5:fc:5f:bb:f4:89:c3:5e:58:92:
                    85:cc:ac:51:3e:2e:e5:b9:b3:b9:8b:e2:e3:c9:b4:
                    22:65:f3:41:14:66:89:ab:e1:6b:08:19:36:85:31:
                    a1:89:b8:a3:67:6a:ef:03:88:43:9a:83:19:f6:12:
                    61:9b:69:ea:72:00:f0:84:54:0d:de:44:e5:51:4a:
                    1d:ba:74:40:04:e3:02:df:58:e3:af:35:2a:dd:af:
                    ae:06:a8:6a:41:06:ff:45:5b:6a:bb:53:7e:35:dc:
                    8c:96:19:c4:30:50:af:f2:db:50:16:7f:7a:c9:c9:
                    0e:28:c2:ee:73:a8:68:f6:dd:21:e6:07:51:64:5b:
                    7b:41:ad:ca:07:61:ab:6e:52:03:14:d5:f5:93:d3:
                    3f:93:6f:66:2c:47:be:ab:79:bd:dd:2a:a6:6e:b2:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:ED:26:F6:3A:2B:A7:49:73:A0:8B:11:98:58:80:8E:65:30:04:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fc27783-7370-30db-9f9c-0f311e8574ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:04:99:a3:8b:4e:ab:27:9b:96:fc:4a:49:d9:72:f3:c2:ec:
         9d:dd:2c:9b:58:e2:e6:95:ff:df:d8:e6:19:93:e0:94:76:1a:
         e8:81:c2:e3:af:e6:e2:22:b6:27:9b:4c:53:3e:4c:2c:4b:50:
         dc:05:ac:30:2d:75:ee:4e:d9:a1:44:7b:7b:c7:55:a8:d2:9b:
         d4:4b:bc:1d:bf:e9:96:78:6b:b3:70:94:47:16:a2:a5:3f:24:
         a6:f0:76:5a:d8:40:a1:e8:e8:24:bd:c2:99:cc:8c:4e:32:a9:
         65:e9:91:92:a1:3c:f5:60:0c:ba:c9:82:f7:60:48:f0:4e:aa:
         0a:ad:4e:6f:8a:31:39:09:a4:c4:3b:58:51:3b:c6:8d:25:64:
         13:84:5f:29:98:cc:d8:57:2c:60:88:3d:b0:06:b8:ae:58:83:
         6a:dd:f7:1b:62:b1:40:54:50:78:3d:8f:6b:52:cc:7c:f5:1b:
         45:00:72:50:b2:d1:4d:a2:09:c1:2d:02:40:f5:0e:89:dd:d5:
         a2:10:5d:79:91:d0:b3:93:9f:a9:5c:36:0f:03:d9:ed:7c:4d:
         73:8a:db:2b:ae:77:5d:24:3c:9d:fd:2e:6e:22:be:f1:5c:b5:
         d4:20:b8:a5:41:63:c1:8e:ab:50:89:6f:dd:fa:54:12:09:67:
         ff:a1:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:18 2023 by rpki-client on console-fra.rpki-client.org