Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3619333a-687d-3129-82b8-6a2c2d67e525.roa
File:                     3619333a-687d-3129-82b8-6a2c2d67e525.roa (raw, json)
Hash identifier:          +Nwz/aKYN1cFYAVrvPurLHSYlmU4BMo80MlfTA8VBZ8=
Subject key identifier:   87:85:2A:CE:A3:12:F0:3C:21:C7:CE:70:31:8F:F8:ED:6A:39:E9:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446EC89D9A23BDD86FF3700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3619333a-687d-3129-82b8-6a2c2d67e525.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 13 Aug 2023 06:37:48 +0000
asID:                     51722
IP address blocks:        166.1.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:ec:89:d9:a2:3b:dd:86:ff:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 13 06:37:48 2023 GMT
        Subject: CN=059c73e2-9647-4ead-a288-e3d47803596c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:b8:8d:a0:dc:3b:c6:2a:72:a5:08:7e:90:
                    4a:c1:00:2a:fd:9c:81:84:79:3e:1b:78:2f:43:b1:
                    37:d2:f1:cd:42:4f:3d:d8:a8:c8:dc:72:ac:3f:38:
                    56:3d:c9:6f:9f:2f:2a:73:77:2f:22:bb:85:39:e5:
                    62:4e:7e:ca:2c:91:b4:b3:8a:7a:a7:6c:bd:a9:a3:
                    7e:33:62:5d:d7:90:40:a2:3e:bb:6a:63:05:96:9e:
                    b6:78:d7:9a:7d:02:7f:09:e4:ed:74:ff:16:19:4c:
                    c7:17:fb:ee:c6:9f:15:c8:77:d5:77:6b:ec:3b:95:
                    b8:e2:91:9d:f2:7e:8f:e1:6c:64:73:6b:f0:ec:cd:
                    a7:c0:ef:39:1f:87:7b:4c:38:b6:c6:52:c4:87:d5:
                    bf:eb:f9:ab:38:bf:45:eb:38:61:ca:91:7e:c4:2f:
                    ce:90:3e:cf:4d:0e:ac:a3:2e:f0:84:61:61:d6:5f:
                    32:c5:7e:1f:e0:99:4e:18:66:a9:49:95:26:64:7a:
                    a3:67:44:b4:56:16:2d:92:ab:8a:f1:43:9f:82:1a:
                    4f:13:48:bf:c6:de:cd:d3:9f:c3:70:be:ac:ef:37:
                    38:87:b1:60:c4:7e:29:a0:bb:3b:a6:fa:a3:ef:79:
                    43:1f:16:76:36:40:9f:2a:14:d7:25:77:9c:6d:9f:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:2A:CE:A3:12:F0:3C:21:C7:CE:70:31:8F:F8:ED:6A:39:E9:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3619333a-687d-3129-82b8-6a2c2d67e525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:35:bc:50:25:cd:70:14:da:61:5b:d7:6e:4c:76:1a:cc:
         c2:0a:88:38:c1:e3:72:8f:5b:0e:0c:af:a0:24:02:37:2b:0c:
         72:9d:ea:bd:21:ab:b8:e2:29:b6:85:d2:e1:b6:a5:96:c3:34:
         ae:13:b7:29:02:83:78:45:73:c2:37:85:c0:b2:b2:9c:29:6a:
         c0:d1:00:82:9c:39:e8:8f:b0:e1:77:b7:4f:8a:48:fd:5f:d8:
         8f:44:97:64:ce:ef:68:23:ed:1b:ed:8e:a5:d8:09:01:5f:6c:
         d1:cf:dd:3d:24:d8:74:ae:34:1c:c8:bb:1e:91:a2:95:0e:42:
         51:f5:9b:36:b8:aa:f6:64:da:da:31:61:cd:7b:ca:0b:66:f6:
         38:0a:56:12:d5:46:00:04:2e:47:0d:9e:2e:b6:ee:20:03:31:
         e8:63:cc:9f:d2:c4:4b:27:27:44:29:82:32:fa:57:2c:f0:3d:
         e1:75:4d:61:60:f7:86:b4:49:f1:e9:89:32:1e:20:3e:10:56:
         84:32:cf:b6:bc:32:fe:2f:ef:32:0c:00:a7:a9:31:88:5c:19:
         5e:fe:10:b8:25:51:70:40:38:05:9d:e4:10:72:71:1f:21:1d:
         0b:69:6e:bc:c1:f1:51:7f:cc:21:9b:ff:cc:3e:04:11:8c:a9:
         64:e6:db:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRuyJ2aI73Yb/NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgxMzA2Mzc0OFowLzEtMCsGA1UEAxMk
MDU5YzczZTItOTY0Ny00ZWFkLWEyODgtZTNkNDc4MDM1OTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8W4jaDcO8YqcqUIfpBKwQAq/ZyBhHk+G3gv
Q7E30vHNQk892KjI3HKsPzhWPclvny8qc3cvIruFOeViTn7KLJG0s4p6p2y9qaN+
M2Jd15BAoj67amMFlp62eNeafQJ/CeTtdP8WGUzHF/vuxp8VyHfVd2vsO5W44pGd
8n6P4Wxkc2vw7M2nwO85H4d7TDi2xlLEh9W/6/mrOL9F6zhhypF+xC/OkD7PTQ6s
oy7whGFh1l8yxX4f4JlOGGapSZUmZHqjZ0S0VhYtkquK8UOfghpPE0i/xt7N05/D
cL6s7zc4h7FgxH4poLs7pvqj73lDHxZ2NkCfKhTXJXecbZ/umwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIeFKs6jEvA8IcfOcDGP+O1qOenRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzYxOTMzM2EtNjg3ZC0z
MTI5LTgyYjgtNmEyYzJkNjdlNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKWdNbxQJc1wFNphW9duTHYazMIKiDjB43KPWw4Mr6AkAjcrDHKd6r0h
q7jiKbaF0uG2pZbDNK4TtykCg3hFc8I3hcCyspwpasDRAIKcOeiPsOF3t0+KSP1f
2I9El2TO72gj7RvtjqXYCQFfbNHP3T0k2HSuNBzIux6RopUOQlH1mza4qvZk2tox
Yc17ygtm9jgKVhLVRgAELkcNni627iADMehjzJ/SxEsnJ0QpgjL6VyzwPeF1TWFg
94a0SfHpiTIeID4QVoQyz7a8Mv4v7zIMAKepMYhcGV7+ELglUXBAOAWd5BBycR8h
HQtpbrzB8VF/zCGb/8w+BBGMqWTm24A=
-----END CERTIFICATE-----