Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bf67328-66a2-3a47-8e65-0576d5e69c3e.roa
File:                     2bf67328-66a2-3a47-8e65-0576d5e69c3e.roa (raw, json)
Hash identifier:          wuokjYr0/dNDooZGORaShnpqLb7aW/dx/Z/1ua6RmrI=
Subject key identifier:   A1:37:67:E8:8A:1A:1B:CB:94:5E:77:63:8D:AC:D1:76:AB:B0:E6:54
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843F228F9F84C9945FB85F13D60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bf67328-66a2-3a47-8e65-0576d5e69c3e.roa
Signing time:             Mon 20 Nov 2023 02:00:17 +0000
ROA not before:           Mon 20 Nov 2023 02:00:17 +0000
ROA not after:            Sun 18 Feb 2024 02:00:17 +0000
asID:                     834
IP address blocks:        108.165.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f2:28:f9:f8:4c:99:45:fb:85:f1:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 20 02:00:17 2023 GMT
            Not After : Feb 18 02:00:17 2024 GMT
        Subject: CN=66703135-96fb-483e-8586-3788c19e4f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:d8:45:2e:3d:54:cc:f0:ad:0f:57:9b:ff:
                    2d:7d:dc:9a:5b:94:1f:8a:4d:4e:7e:d7:01:00:f7:
                    80:af:a1:14:49:58:3c:b8:11:90:7e:e6:9e:b4:aa:
                    57:80:cf:80:fc:1f:21:83:db:aa:81:07:77:ef:e2:
                    54:d7:a8:23:42:55:47:1a:e6:14:f7:d4:bc:f0:45:
                    a4:8a:be:cc:ff:01:b4:70:db:d2:53:08:eb:04:9b:
                    5f:29:16:f9:c6:5f:97:33:cd:d6:26:4d:2a:e5:5e:
                    48:48:ee:3d:71:d7:15:d7:fe:e3:6f:86:e1:e5:2c:
                    07:98:3d:e7:f9:a0:14:09:63:f9:5f:df:fa:c7:4f:
                    f2:ab:a6:b3:56:5a:7c:bc:e8:f9:11:05:1b:23:7d:
                    4b:4a:0b:a5:e7:ca:b0:ef:a4:8d:82:0b:bc:cf:6f:
                    a3:c8:bf:5d:b9:cb:fc:7a:38:66:f7:77:d3:f0:9f:
                    9b:11:16:96:22:3b:46:51:33:9e:00:17:c9:b2:97:
                    f1:e2:96:d8:76:c7:cb:63:0e:89:b6:20:19:2e:0c:
                    7c:1c:2d:56:ac:30:a8:e0:58:28:48:5d:62:80:1e:
                    94:36:33:da:b7:1a:d6:08:23:ab:8f:eb:2f:30:04:
                    d2:af:e6:45:b3:f9:ee:a5:d7:63:72:96:49:a8:7e:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:67:E8:8A:1A:1B:CB:94:5E:77:63:8D:AC:D1:76:AB:B0:E6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bf67328-66a2-3a47-8e65-0576d5e69c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:14:75:9a:73:f7:63:da:33:05:d7:11:64:80:5d:00:73:5f:
         09:90:95:9b:46:4d:a7:63:9e:d5:b4:70:54:cd:aa:a0:3d:00:
         0b:01:37:b7:9a:d9:b9:a6:88:bd:ec:2c:39:f0:de:0f:3e:5c:
         73:56:41:c9:01:10:a0:4b:e7:ee:7d:18:40:62:6a:74:ff:96:
         3e:88:c5:52:6e:10:b9:51:b9:a5:e9:ab:56:31:46:7f:15:fa:
         f7:36:e6:a0:ae:12:32:64:63:1b:e7:f2:3c:35:d6:9e:99:94:
         30:4d:b8:cd:25:a2:d1:2d:3d:d8:a4:b5:18:56:d1:c4:68:24:
         1a:4d:68:ca:8d:cb:02:7c:ef:54:22:b6:c1:87:ed:11:86:8b:
         16:d6:4a:66:19:ed:1a:1f:31:50:14:df:e5:c6:2e:67:3d:2a:
         a7:6a:a5:95:84:09:31:6e:9c:e5:9a:78:6d:44:3b:ab:b9:a7:
         36:1d:a5:fc:da:84:93:a3:e1:d8:93:a7:8c:d5:5a:d5:ca:e7:
         30:08:ed:42:a2:b7:b8:03:75:ae:56:4c:ba:71:82:9b:76:1d:
         1e:45:2e:5f:f3:96:45:a0:29:7e:8b:0d:df:1c:7e:d6:7c:37:
         0c:3b:24:c6:64:2d:c5:42:ff:c1:6c:15:4e:c4:9d:9a:91:5e:
         b8:97:6c:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPyKPn4TJlF+4XxPWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTEyMDAyMDAxN1oXDTI0MDIxODAyMDAxN1owLzEtMCsGA1UEAxMk
NjY3MDMxMzUtOTZmYi00ODNlLTg1ODYtMzc4OGMxOWU0Zjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobHYRS49VMzwrQ9Xm/8tfdyaW5Qfik1OftcB
APeAr6EUSVg8uBGQfuaetKpXgM+A/B8hg9uqgQd37+JU16gjQlVHGuYU99S88EWk
ir7M/wG0cNvSUwjrBJtfKRb5xl+XM83WJk0q5V5ISO49cdcV1/7jb4bh5SwHmD3n
+aAUCWP5X9/6x0/yq6azVlp8vOj5EQUbI31LSgul58qw76SNggu8z2+jyL9ducv8
ejhm93fT8J+bERaWIjtGUTOeABfJspfx4pbYdsfLYw6JtiAZLgx8HC1WrDCo4Fgo
SF1igB6UNjPatxrWCCOrj+svMATSr+ZFs/nupddjcpZJqH423QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKE3Z+iKGhvLlF53Y42s0XarsOZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmJmNjczMjgtNjZhMi0z
YTQ3LThlNjUtMDU3NmQ1ZTY5YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgUdZpz92PaMwXXEWSAXQBzXwmQlZtGTadjntW0cFTNqqA9AAsBN7ea
2bmmiL3sLDnw3g8+XHNWQckBEKBL5+59GEBianT/lj6IxVJuELlRuaXpq1YxRn8V
+vc25qCuEjJkYxvn8jw11p6ZlDBNuM0lotEtPdiktRhW0cRoJBpNaMqNywJ871Qi
tsGH7RGGixbWSmYZ7RofMVAU3+XGLmc9KqdqpZWECTFunOWaeG1EO6u5pzYdpfza
hJOj4diTp4zVWtXK5zAI7UKit7gDda5WTLpxgpt2HR5FLl/zlkWgKX6LDd8cftZ8
Nww7JMZkLcVC/8FsFU7EnZqRXriXbJs=
-----END CERTIFICATE-----