Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21820b2c-3250-33b8-9214-f22182a0f72f.roa
File:                     21820b2c-3250-33b8-9214-f22182a0f72f.roa (raw, json)
Hash identifier:          D/BSi+aOPHnkQ5m8RoBm+nzM0zs+/RxQIxmDto87k+I=
Subject key identifier:   78:97:A5:49:FF:84:B6:85:4C:1A:40:76:18:58:E8:6B:67:CC:50:E2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E4470022772B5ECBB2637E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21820b2c-3250-33b8-9214-f22182a0f72f.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 20:49:51 +0000
asID:                     38337
IP address blocks:        166.1.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:00:22:77:2b:5e:cb:b2:63:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 20:49:51 2023 GMT
        Subject: CN=4f695f68-1ecf-430b-9395-af4f99b7b18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3f:38:7f:8d:4b:78:d7:da:ef:da:e7:46:96:
                    43:16:2d:01:ec:1b:e9:c2:be:66:80:28:e9:43:b9:
                    cf:c7:c9:d8:3e:b5:9d:3e:c8:c1:59:ed:d5:29:1e:
                    79:c9:6d:d8:e7:df:a5:a9:c6:6b:50:dc:a8:43:11:
                    c6:52:48:d4:12:a2:75:98:96:4b:80:2e:5e:06:cc:
                    fb:86:8b:95:c0:f7:0d:f0:df:80:39:01:7d:ae:f9:
                    78:48:1a:c6:14:7d:3e:2c:44:6d:ef:39:89:ba:2f:
                    c3:66:f2:92:ba:24:f9:ff:e6:a1:8a:c6:9f:0a:e7:
                    ef:05:39:84:31:ef:f1:57:9d:0e:26:11:87:e7:a0:
                    3f:58:82:ba:d4:2c:5c:fa:3f:a9:05:8b:57:49:60:
                    cb:67:fb:f9:e9:8d:e0:c6:db:55:82:8c:b7:b9:de:
                    aa:5f:e9:6e:a2:22:f8:fa:8b:04:6f:be:68:6f:65:
                    f4:74:fe:62:bb:27:1a:77:17:bc:1f:49:76:d2:73:
                    5b:0f:dc:bf:68:eb:a4:38:5b:68:59:e2:56:87:da:
                    00:fe:35:1e:f4:ab:4c:b9:6b:12:59:c4:4b:26:a6:
                    2f:81:f6:49:be:1e:0c:07:bb:fa:6d:4d:e8:f9:c3:
                    c2:e4:7c:94:0d:d9:38:2d:3b:18:58:3a:6f:6f:4e:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:97:A5:49:FF:84:B6:85:4C:1A:40:76:18:58:E8:6B:67:CC:50:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21820b2c-3250-33b8-9214-f22182a0f72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d7:56:a5:84:8c:66:a5:95:ca:5a:75:f9:26:6d:40:d7:bb:
         e9:b2:92:5a:1d:18:1c:c0:15:7b:68:bf:ed:85:aa:95:98:e0:
         98:0b:31:9c:e6:97:63:89:2b:ea:61:a5:07:ad:33:32:1b:65:
         7c:12:51:fe:45:e9:9b:90:04:fa:42:57:83:18:8a:5b:aa:c3:
         17:aa:df:17:fd:65:75:23:70:4d:72:57:08:3a:16:7e:fa:09:
         e5:f9:ab:b2:a8:8f:de:3c:c0:fd:8c:b8:e7:78:cb:48:6b:0f:
         04:13:10:c8:23:e8:71:e3:d7:ca:2e:ca:cd:c0:2a:75:20:db:
         3d:65:6a:5e:69:19:4d:bb:77:2b:51:92:18:d5:8a:ae:d4:74:
         83:56:2e:17:cf:74:c5:0d:13:68:74:e7:52:53:e1:4a:2f:f2:
         82:e0:d2:37:7d:a0:bb:02:25:8e:e7:85:2c:0b:4d:02:c7:e8:
         80:b0:f9:bc:93:4f:83:4a:50:05:64:3f:0d:63:dc:7d:2e:9f:
         d4:93:5a:55:eb:34:7a:ba:4c:b3:45:e7:af:47:d5:cf:94:93:
         2e:35:40:d2:68:aa:80:81:11:74:b8:3b:5b:60:65:9f:2e:33:
         71:b6:d7:fc:da:64:92:a3:4d:7f:d3:d3:5f:bc:f5:0b:80:04:
         d8:d1:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----