Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/205d7d7d-0c12-30c8-aaa2-af47f0fe13ff.roa
File:                     205d7d7d-0c12-30c8-aaa2-af47f0fe13ff.roa (raw, json)
Hash identifier:          0gzFh0tOKqS/jzgmt7t9R+AYvHeim8wqEJzWaxUtrVU=
Subject key identifier:   7B:A2:A9:C3:EC:F2:5E:E8:3A:8F:64:F6:BB:E0:12:A0:A2:07:69:7D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841FAA4A4B96C9F9925BAC4DD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/205d7d7d-0c12-30c8-aaa2-af47f0fe13ff.roa
Signing time:             Tue 23 May 2023 17:22:09 +0000
ROA not before:           Tue 23 May 2023 17:22:09 +0000
ROA not after:            Mon 21 Aug 2023 17:22:09 +0000
asID:                     139660
IP address blocks:        108.165.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fa:a4:a4:b9:6c:9f:99:25:ba:c4:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 17:22:09 2023 GMT
            Not After : Aug 21 17:22:09 2023 GMT
        Subject: CN=ef9ab26c-a8c2-4260-868b-532d75b1cf86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:9a:b2:d5:af:11:51:94:bc:6a:59:59:33:
                    b7:82:55:68:e3:1a:b9:91:f1:64:5d:92:02:cd:d3:
                    5d:b7:1a:6a:25:77:96:11:14:20:8a:ab:b4:2e:0b:
                    34:17:e4:12:8f:85:5d:1f:48:19:c4:1f:64:53:51:
                    ea:db:d3:3a:06:a7:a4:62:e4:61:17:c1:50:b5:7f:
                    f1:69:71:cf:8c:a0:a1:76:e3:d8:1c:47:24:9e:8f:
                    04:e0:4d:c4:2f:14:de:f8:5e:8f:22:95:f1:4e:9e:
                    70:20:21:5a:84:92:ee:ab:13:e7:05:b9:54:b0:4a:
                    39:52:99:0b:57:e2:a0:76:86:3c:a0:bc:c1:1f:2b:
                    0e:fc:7d:77:4b:fa:ca:e8:59:66:6b:2d:65:86:38:
                    ce:e2:a9:69:92:7f:00:05:fd:a8:69:39:de:12:d6:
                    fe:5b:cd:82:b4:8f:bd:77:27:8f:70:66:cd:ad:3d:
                    1f:ab:d7:f8:c2:f9:f2:ab:bd:c9:b9:6d:ea:a1:ef:
                    87:fc:7b:bd:7b:71:28:b4:19:33:1e:7e:50:4d:6c:
                    eb:72:2d:ec:f6:e1:67:ad:73:7b:17:fa:01:9f:c7:
                    3f:1c:9a:51:cd:4f:cb:e0:b3:e3:2a:07:c5:f9:9c:
                    36:8e:b7:18:ff:ad:8a:fc:ef:47:14:22:8f:27:85:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:A9:C3:EC:F2:5E:E8:3A:8F:64:F6:BB:E0:12:A0:A2:07:69:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/205d7d7d-0c12-30c8-aaa2-af47f0fe13ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:b7:40:7f:b7:ca:da:57:53:f0:c4:9d:a6:12:8b:f3:d1:
         d6:39:2f:a5:23:6d:ed:69:e3:73:ff:36:aa:1f:d9:77:7a:73:
         0f:d9:e1:4f:a9:21:76:f0:24:df:32:46:ee:e6:91:ce:d7:5f:
         fc:b2:35:53:34:ba:e9:30:ad:27:f9:c6:3f:1f:a0:9b:96:74:
         54:10:28:ef:17:8d:d5:ec:23:11:13:76:39:cd:a0:31:32:91:
         b6:87:f1:a1:89:da:ba:e0:3a:fa:eb:7b:a9:17:aa:9f:78:8f:
         14:2e:50:87:23:4a:0c:53:d8:a1:eb:32:5a:05:2f:57:bf:c2:
         ae:fd:57:cd:0d:7d:91:aa:c5:8b:73:b2:01:1f:c0:da:e5:6c:
         7c:26:d8:17:70:a8:74:0c:63:6c:69:4d:28:32:38:c6:1f:a2:
         9d:e4:85:ee:3e:7f:72:2c:20:2c:9c:35:48:a4:96:c9:59:02:
         71:9c:4f:ef:b5:e8:f0:b7:5b:b0:d8:76:35:92:28:31:1f:47:
         4f:a3:6e:e0:24:2a:75:63:32:bb:79:d3:3f:73:b9:d8:2c:1b:
         31:5a:a3:db:29:c0:b6:6a:d5:86:b1:a5:df:f7:86:ab:3e:50:
         04:d9:ed:b2:c2:d1:3f:c1:5e:77:91:75:f1:83:5e:0a:86:e6:
         fb:e6:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----