Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36700cad-2544-3e64-9662-7d782acb5535.roa
File:                     36700cad-2544-3e64-9662-7d782acb5535.roa (raw, json)
Hash identifier:          TYgcelrPMbzFM4AQfkh+Wmi75dJS8j48Em55fsK5C3I=
Subject key identifier:   12:AB:40:06:FA:B5:F5:DF:E3:B2:F6:43:AB:C5:1C:07:40:78:C9:9E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446E4B1EB7EED1EA3BEFD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36700cad-2544-3e64-9662-7d782acb5535.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 01:28:38 +0000
asID:                     834
IP address blocks:        166.0.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:e4:b1:eb:7e:ed:1e:a3:be:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 01:28:38 2023 GMT
        Subject: CN=57690042-4482-48f3-8da1-ed8ba3b6508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2c:b1:1b:19:19:5d:d8:07:3e:be:93:5c:af:
                    d8:be:1c:13:68:64:53:63:47:b3:7d:44:e9:72:42:
                    64:ba:db:ba:ef:7d:fd:a7:7a:39:ca:ac:e7:32:01:
                    a1:91:e7:c8:25:54:02:83:83:bf:99:a5:2e:2a:11:
                    67:39:d1:12:3e:41:3f:7c:b2:51:63:00:51:7a:e7:
                    49:f7:77:83:e6:23:69:a6:a9:d0:94:d7:70:a5:7b:
                    d5:a9:1a:8d:1e:3b:db:ea:b7:1d:37:4e:29:64:ed:
                    37:96:43:63:ad:5f:e6:a8:85:05:33:e5:1f:f2:05:
                    73:c3:e3:35:5e:d6:d6:94:49:46:d7:5f:4d:21:3a:
                    a8:06:2a:61:38:bf:40:39:61:39:83:80:3c:5d:8e:
                    89:1a:cd:8b:12:bb:b8:0c:15:13:2c:24:c1:f2:b6:
                    c9:86:3e:02:92:40:57:3f:83:87:91:c5:b2:3f:a6:
                    df:99:17:ac:59:86:6a:6d:da:88:e2:6e:7a:7e:78:
                    68:ac:fa:75:d1:74:75:a2:2a:93:53:f6:03:68:24:
                    05:e2:b1:13:b3:18:31:d7:e9:73:a6:86:ea:23:a4:
                    6f:53:a1:eb:d0:ce:a4:96:04:19:34:df:db:17:57:
                    14:11:5d:e8:49:0e:20:fe:d1:d6:21:41:87:7b:7b:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:40:06:FA:B5:F5:DF:E3:B2:F6:43:AB:C5:1C:07:40:78:C9:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36700cad-2544-3e64-9662-7d782acb5535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:40:a6:ba:95:26:18:c6:56:b7:80:96:5f:62:10:9e:0d:01:
         24:3b:3b:6b:68:9f:9b:2d:ae:00:e8:bb:62:62:9c:06:7b:6f:
         35:4f:3b:0e:94:80:de:23:9a:8e:b5:2d:48:09:7c:2b:17:e8:
         f9:b7:a1:e9:05:eb:45:e4:ba:60:b4:f1:08:59:3e:6d:0e:c5:
         d9:b5:92:81:97:48:5f:c9:a0:03:32:e4:1f:2d:f0:a5:8a:b5:
         89:b8:d7:38:57:08:e8:b6:80:38:87:01:91:3b:6e:01:89:bc:
         b3:f3:c0:66:65:ea:b8:c3:84:10:14:40:fb:d9:1e:ba:4f:20:
         8b:4b:55:e1:9a:12:9e:b8:97:df:21:f5:6d:0c:e0:13:d0:4a:
         87:eb:29:31:9f:5a:b4:1c:3a:37:f2:6a:22:1c:3d:b5:6d:29:
         a1:30:67:d4:3d:dd:b7:8e:4c:e5:ee:86:59:27:30:18:bb:ee:
         96:94:54:53:0a:de:ce:55:6b:1c:78:dd:43:4e:af:62:a7:d4:
         24:89:93:ed:e7:1f:7e:74:9e:b7:ff:95:56:de:fb:05:2f:17:
         d0:a9:05:ba:35:f5:e0:68:ef:aa:38:c2:d1:b6:67:f4:50:75:
         98:48:07:dc:61:37:43:ea:7f:3c:de:8b:3f:22:16:6b:2e:9c:
         6d:7f:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----