Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/346a84ee-5797-353b-8a10-246eb9d0a785.roa
File:                     346a84ee-5797-353b-8a10-246eb9d0a785.roa (raw, json)
Hash identifier:          Sc1dFtp/w7bjJ5OfAF66BvwsTdKp5QixA5w2frP5suU=
Subject key identifier:   7E:51:76:68:9C:5F:7B:70:8B:B5:F8:BF:CF:44:40:BD:55:4C:68:50
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446F6D7B6ECD82F45766580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/346a84ee-5797-353b-8a10-246eb9d0a785.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sat 05 Aug 2023 05:59:52 +0000
asID:                     60721
IP address blocks:        166.0.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:f6:d7:b6:ec:d8:2f:45:76:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  5 05:59:52 2023 GMT
        Subject: CN=88645456-3064-44ac-b78f-d2f41dad8c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:55:44:5e:29:51:db:81:dd:54:9f:c9:f7:cd:
                    a6:6e:da:a7:d8:83:94:79:12:51:63:3e:42:fd:64:
                    65:5e:bc:2d:e8:84:98:05:96:d4:a2:3b:73:a5:cf:
                    44:a4:99:e6:da:63:57:ff:83:4b:7d:c9:1f:92:ca:
                    b5:ae:0d:4d:65:0e:31:64:e3:ee:5f:cb:f3:c4:5c:
                    b2:12:ed:af:e9:03:59:49:81:78:35:14:46:17:e3:
                    7e:38:5b:e0:0b:03:8c:3c:03:d9:07:9d:bd:9a:1e:
                    af:e6:05:4d:e7:e4:55:7e:4c:d4:fa:f2:49:14:78:
                    d0:03:ca:2c:c8:3e:a1:74:a7:3b:98:68:4d:63:9e:
                    a3:ab:14:7c:8c:f1:47:4f:f0:e8:94:41:d3:85:c4:
                    e5:70:08:17:3e:b8:f0:93:37:f0:c5:d5:c0:cd:08:
                    12:c3:a4:70:8c:b9:5b:78:d7:4b:d1:6d:a2:bd:ab:
                    fc:4c:df:1c:07:d7:98:3f:bd:11:c3:cf:14:ab:4e:
                    67:28:cf:28:ab:35:ad:67:cb:01:e0:54:73:63:a7:
                    2d:af:cf:fa:94:91:af:1d:85:24:60:ce:ce:65:9e:
                    bf:3e:15:35:1d:22:6d:79:6a:3a:0e:0c:c5:e8:18:
                    c2:ac:af:bf:9c:b2:7d:42:32:ee:8b:80:1a:c9:ed:
                    c0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:76:68:9C:5F:7B:70:8B:B5:F8:BF:CF:44:40:BD:55:4C:68:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/346a84ee-5797-353b-8a10-246eb9d0a785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2f:49:2a:d5:dd:36:13:92:70:4b:55:7b:30:90:4b:66:e1:
         c3:73:41:16:65:6c:6a:90:9a:c4:bb:d1:cd:11:5d:1e:38:d4:
         1b:50:2f:c6:7c:7c:98:a9:76:c8:f3:88:cb:a1:28:82:d3:50:
         8e:e4:4a:8c:1c:72:c8:17:95:e7:dd:e1:34:80:fa:d2:c9:14:
         36:f4:97:7e:d6:9f:d8:c0:87:34:3d:ed:3c:51:68:67:1e:1f:
         b8:74:8d:a7:8a:55:93:1f:ad:bf:30:4d:fa:0a:a6:44:dd:19:
         54:91:f3:2f:43:c6:30:1a:a8:23:9b:ec:50:ef:3d:fd:9e:db:
         33:9d:79:d0:7c:9f:df:6d:97:0a:18:4b:3a:e7:c9:01:a9:98:
         a2:14:ca:0c:cc:b8:21:6b:0e:b3:50:b0:8d:66:20:af:8b:46:
         41:08:55:37:a4:fd:e3:af:f1:09:b4:76:fd:92:1b:7c:c1:06:
         8d:e4:b2:f8:02:27:44:75:7a:76:b4:1a:85:5b:3d:2a:ed:33:
         0d:9c:5b:6f:92:7c:ff:d3:62:fc:b8:10:86:d7:26:38:5c:da:
         79:08:a8:69:d8:94:9f:b4:98:1a:bc:19:2e:da:6f:98:78:ab:
         16:f5:ef:10:d3:27:ce:c2:e7:26:bd:6a:f3:d6:18:a4:ef:27:
         83:b0:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----