Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d86f8ed-0a8d-3e0b-ab9d-721d09805883.roa
File:                     2d86f8ed-0a8d-3e0b-ab9d-721d09805883.roa (raw, json)
Hash identifier:          UoySjOCX+WyYA3Lu95tTdlKjXPrZhdtnS6SUU9AK7HY=
Subject key identifier:   80:9C:65:16:8E:DF:D5:E3:65:9F:CB:31:A4:AC:71:8E:21:2B:8D:C1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844616AF9C153C47C62A7B9F5C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d86f8ed-0a8d-3e0b-ab9d-721d09805883.roa
Signing time:             Fri 29 Dec 2023 22:28:05 +0000
ROA not before:           Fri 29 Dec 2023 22:28:05 +0000
ROA not after:            Thu 28 Mar 2024 21:28:05 +0000
asID:                     16509
IP address blocks:        108.165.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:61:6a:f9:c1:53:c4:7c:62:a7:b9:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 29 22:28:05 2023 GMT
            Not After : Mar 28 21:28:05 2024 GMT
        Subject: CN=3a4451f9-4d01-464f-812b-ef00f33380cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c5:92:c2:c4:ad:0b:02:f5:e1:aa:fb:61:2c:
                    51:7e:57:23:2c:0d:1b:e7:8e:e7:95:23:02:c3:da:
                    c9:3e:d2:9a:fd:2e:8d:8b:e1:17:ef:75:02:c6:bd:
                    78:85:70:3e:4c:c7:05:f6:ba:1e:20:3f:24:7a:5f:
                    c7:4a:1c:9e:c9:82:a4:e3:67:3d:fd:73:f9:c6:35:
                    1b:ce:99:67:15:68:8f:97:82:83:f8:79:41:1a:43:
                    14:50:40:bb:34:2d:a5:05:af:e7:cb:f3:5f:cc:7e:
                    32:21:fb:95:a6:53:e2:f2:13:0d:76:3d:bd:37:0a:
                    3f:02:e8:18:07:47:62:89:3c:2f:32:87:d5:b1:c8:
                    d6:f0:be:29:19:06:a7:03:e7:b2:86:be:1c:5f:7f:
                    d3:ef:77:5e:fa:ea:58:10:6a:a9:1d:5c:eb:57:26:
                    49:f3:76:b8:02:8c:51:65:e1:28:ac:b3:e7:dc:a7:
                    f8:39:78:96:b3:5b:01:72:49:d0:9f:5e:3a:2b:eb:
                    c1:d6:17:86:49:c7:2c:f6:a7:4f:73:b7:70:63:a5:
                    85:c8:c9:d2:8b:ff:d0:26:66:95:22:10:0c:3e:76:
                    c5:b6:0f:41:25:73:1c:9f:ad:0b:24:a9:9d:62:50:
                    84:f2:d7:5d:c5:1c:cb:4a:5c:a9:99:3a:b7:ee:5a:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9C:65:16:8E:DF:D5:E3:65:9F:CB:31:A4:AC:71:8E:21:2B:8D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d86f8ed-0a8d-3e0b-ab9d-721d09805883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8f:07:0b:3a:c8:69:44:9d:64:4f:81:04:af:24:9c:a8:e0:
         9d:b0:e7:ae:79:62:82:83:29:f1:56:68:93:ed:21:20:0b:c4:
         b4:be:1a:1a:f4:bc:c5:af:c2:6b:7c:5e:62:84:3d:36:2c:59:
         9b:05:9c:2b:ef:9f:31:1d:39:59:fc:44:11:35:06:0c:23:44:
         d3:92:97:3f:74:c2:56:80:76:c7:6f:68:b9:c0:b0:59:1e:70:
         0c:56:35:f5:6a:0c:d5:01:e2:4f:da:03:50:9c:0b:4d:bf:8e:
         97:3c:82:c8:99:36:5a:cc:40:ed:9b:6a:6c:e4:2e:cc:9a:6c:
         05:22:14:30:f7:19:db:76:cf:7f:33:1d:14:d1:d2:6e:aa:09:
         00:7a:c2:f0:bb:e3:7e:c0:c4:34:cf:18:d9:28:e3:75:f5:61:
         cf:f6:32:13:21:23:e5:cc:e8:7f:50:72:c3:68:5f:23:99:87:
         d8:aa:36:fe:aa:1f:8b:70:ef:a9:48:ea:8a:fa:cf:74:66:89:
         c4:9b:82:db:2f:94:1e:b8:5b:f1:a4:98:60:94:31:f2:53:7f:
         75:61:fd:4e:94:19:4c:dc:61:07:c8:2c:45:92:5f:8b:55:e1:
         df:44:91:e6:c8:91:1e:c2:98:4f:76:09:5c:36:e5:58:06:13:
         a0:6b:09:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----