Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cfa66b9-057d-3a5e-acb7-ca60a02470fa.roa
File:                     2cfa66b9-057d-3a5e-acb7-ca60a02470fa.roa (raw, json)
Hash identifier:          LgE4BWC1YT7E915X5/IiU/fhvaph63NjaUBz65q5XZM=
Subject key identifier:   48:12:1E:2B:7F:35:5C:94:FD:95:38:0D:86:8F:34:9C:62:48:24:0E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446EDB5A4BB2AF0F1CFEA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cfa66b9-057d-3a5e-acb7-ca60a02470fa.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 13 Aug 2023 16:57:07 +0000
asID:                     834
IP address blocks:        108.165.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:ed:b5:a4:bb:2a:f0:f1:cf:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 13 16:57:07 2023 GMT
        Subject: CN=0222860e-5e6b-4453-9377-2b4ec43e64b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:d7:4e:a0:a5:75:6a:1e:77:6d:3a:2f:9b:
                    ab:56:2c:36:5b:e1:df:55:83:6e:a5:c9:37:b6:a1:
                    80:4b:55:7a:58:c8:b1:d0:68:21:54:da:e5:86:58:
                    1e:ed:82:22:ff:4c:a7:22:2f:ae:ae:68:9c:51:04:
                    e0:9f:5e:53:97:e7:a9:72:e2:f7:f8:d2:8e:0d:15:
                    11:91:41:07:a2:f7:a5:95:71:da:f6:dc:45:16:82:
                    3e:a5:dc:34:ad:48:13:86:c9:04:9b:dd:dd:48:8c:
                    09:07:bb:25:15:64:02:0b:58:7e:a9:ae:51:11:85:
                    e5:1f:08:15:a7:d4:15:e6:77:76:3b:9d:a9:5d:23:
                    3a:6e:1a:4b:6b:d2:f1:6b:cf:93:06:fc:b5:84:bd:
                    50:a4:80:ba:aa:5e:0d:ff:38:1d:7d:39:cd:9b:3c:
                    ca:37:44:16:a3:11:8b:ba:37:0b:2c:09:41:9b:32:
                    73:ee:c2:f7:bf:e5:68:1c:a7:30:f0:7f:20:01:70:
                    04:6b:38:25:84:bb:e7:76:33:2a:92:5d:e8:05:6e:
                    db:2f:4e:66:e6:f0:92:b5:bd:c3:fb:b3:17:38:6b:
                    b9:58:11:f4:08:34:41:51:d7:8a:fe:c0:e3:61:78:
                    5d:3e:90:f4:f2:a9:0a:61:00:c9:1e:f4:3f:20:ee:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:1E:2B:7F:35:5C:94:FD:95:38:0D:86:8F:34:9C:62:48:24:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cfa66b9-057d-3a5e-acb7-ca60a02470fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:99:da:ce:2c:a5:eb:1e:f7:f9:47:c7:f0:4d:3e:f7:5a:
         a7:18:64:ef:4f:de:69:98:92:6d:46:98:5e:5e:dd:5d:1c:96:
         ee:a6:76:c5:f1:f6:49:9f:f0:d4:8d:9f:93:01:d1:26:55:e3:
         72:0c:1e:1d:86:c7:71:f4:29:8d:6f:1b:20:3b:f7:2e:bd:23:
         5c:2b:d8:8c:2b:f0:b5:84:4a:98:b3:a6:70:3f:6e:13:56:ba:
         69:5a:bd:8e:05:6c:1b:9c:cd:2a:df:f3:3f:b3:c3:58:d3:72:
         60:18:93:35:ac:32:e7:79:67:af:ae:70:2e:03:8c:63:d8:52:
         87:a1:4f:e9:13:9c:3c:43:87:a1:20:b4:35:6b:30:c1:bf:69:
         50:4e:f5:e5:b4:fd:07:8f:03:be:2f:7c:89:c5:c3:1c:1b:ae:
         aa:ac:94:30:10:25:24:2b:b3:67:61:65:ea:a0:90:31:85:f4:
         4a:b5:67:a4:ae:02:58:72:9d:61:ff:6f:1d:a1:42:18:f3:aa:
         16:0c:2a:63:34:56:2d:7c:5b:f7:0d:9f:22:d0:63:f5:c5:eb:
         7b:36:5a:42:ae:44:0c:34:8a:79:65:cf:20:d9:cb:36:e1:d6:
         fc:1c:54:b5:ec:5c:46:80:5c:fb:66:cc:21:23:80:1d:79:63:
         27:cf:4f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----