Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/230ade0b-2e92-39d2-9512-3c38f73e7792.roa
File:                     230ade0b-2e92-39d2-9512-3c38f73e7792.roa (raw, json)
Hash identifier:          X/BJn2QoABC9mSIk4saWAeGJ3V2j1t/XNDPwCOUrBPI=
Subject key identifier:   A5:DF:9E:A7:71:DC:41:07:EF:E7:8E:86:A9:2E:61:A0:A4:35:C1:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584229FD4A4E45A02B94F38A0280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/230ade0b-2e92-39d2-9512-3c38f73e7792.roa
Signing time:             Fri 09 Jun 2023 16:23:45 +0000
ROA not before:           Fri 09 Jun 2023 16:23:45 +0000
ROA not after:            Thu 07 Sep 2023 16:23:45 +0000
asID:                     834
IP address blocks:        166.0.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:29:fd:4a:4e:45:a0:2b:94:f3:8a:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 16:23:45 2023 GMT
            Not After : Sep  7 16:23:45 2023 GMT
        Subject: CN=0659980d-b1e9-45f1-8232-8a26364981a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:16:39:2b:c6:80:0d:88:c0:63:5f:57:d0:
                    2f:3c:b6:fe:42:28:cd:1a:05:60:1e:82:12:f6:14:
                    22:98:3f:90:28:02:07:7c:fb:78:57:d3:5b:98:b2:
                    d5:3a:39:dd:df:2d:b8:c7:82:bb:11:64:a6:03:8b:
                    62:00:8b:59:43:7c:33:ac:1d:fb:cb:e3:30:46:70:
                    df:66:cc:70:7d:c4:18:5c:74:62:a4:3e:1e:cd:4b:
                    98:3c:10:77:04:c2:d3:04:a1:d8:01:40:28:eb:48:
                    6c:cd:8a:29:5b:dd:15:da:bd:20:ef:f8:92:ba:da:
                    09:9e:45:a0:38:12:0d:bf:17:ce:32:df:95:d1:21:
                    00:4e:cf:3d:ec:8e:a9:4f:8a:dc:22:df:d9:6f:b8:
                    ff:ac:d5:77:ac:30:3a:30:66:cf:21:47:c2:e8:25:
                    d4:8b:a8:ee:09:d1:ea:ae:be:5f:a4:36:e6:1e:c9:
                    27:a2:d4:8d:10:a1:25:45:7a:2d:c2:b1:0d:79:8c:
                    4b:f1:af:9b:69:4b:48:47:23:96:9f:44:8c:f0:8c:
                    fc:2b:01:2c:46:a8:c4:0c:02:4b:b0:53:42:1f:53:
                    7b:de:ea:0d:ed:26:50:88:69:38:76:52:89:40:98:
                    89:72:e3:5d:75:33:ee:97:d8:7d:63:9c:ac:ba:98:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DF:9E:A7:71:DC:41:07:EF:E7:8E:86:A9:2E:61:A0:A4:35:C1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/230ade0b-2e92-39d2-9512-3c38f73e7792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:32:b7:49:f0:33:1e:a0:11:3b:26:c3:8e:f0:75:05:8f:87:
         80:3e:2d:9d:a1:af:0b:ed:9b:ac:ad:d2:52:75:2f:2e:da:6c:
         02:76:8b:22:1f:b8:e2:76:57:56:10:ae:61:fb:a5:a9:5c:2f:
         4e:7a:a3:d0:15:33:d0:53:e8:d0:db:1d:0e:c8:2e:15:ca:5f:
         a2:9f:38:d1:aa:2b:ff:96:7f:76:4f:a2:0e:d5:b0:65:1a:df:
         08:86:07:bf:1c:c8:27:7c:fd:6b:70:bc:75:a3:5b:bc:32:c3:
         72:05:66:1d:38:df:3c:f9:78:53:00:f7:e9:31:90:b2:13:58:
         43:39:d7:a1:1c:d1:8c:00:19:3e:b0:4d:a6:59:e4:59:06:3a:
         1c:aa:13:e4:ee:7d:31:59:19:7a:3b:ca:b0:32:d1:bf:08:b2:
         0b:01:02:27:95:35:f6:ac:b5:a6:3f:7f:2d:c2:51:15:b1:13:
         69:97:74:92:26:9c:e5:04:b8:11:df:65:c6:4c:94:65:7e:c9:
         9a:bb:7f:c8:9c:18:44:96:dc:ea:17:97:aa:83:e8:2c:3d:e7:
         56:e5:9d:c9:05:a8:7d:11:02:a8:5e:28:b8:f2:8d:0e:11:ba:
         ca:2e:5f:e3:38:26:a1:01:82:63:4a:b6:09:70:f6:f5:ee:02:
         fd:ae:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----