Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3af8395b-b3dc-3c6e-a1f0-f77b64ac45e8.roa
File:                     3af8395b-b3dc-3c6e-a1f0-f77b64ac45e8.roa (raw, json)
Hash identifier:          t0Ct8eDU7KwG+1Y/r24gtyzH5WM+OWNlCTVhrwHGV4s=
Subject key identifier:   54:01:FD:81:7E:85:FF:0B:47:15:52:60:FF:CC:8D:44:32:4A:7D:7A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842B067AC23B572E14766DD5400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3af8395b-b3dc-3c6e-a1f0-f77b64ac45e8.roa
Signing time:             Thu 27 Jul 2023 19:56:25 +0000
ROA not before:           Thu 27 Jul 2023 19:56:25 +0000
ROA not after:            Wed 25 Oct 2023 19:56:25 +0000
asID:                     11798
IP address blocks:        166.1.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:67:ac:23:b5:72:e1:47:66:dd:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 27 19:56:25 2023 GMT
            Not After : Oct 25 19:56:25 2023 GMT
        Subject: CN=c5deee33-8035-4838-94ba-15b993741c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:00:ac:63:d5:f7:92:b1:13:ac:bc:4a:de:
                    9f:92:f3:1b:0b:c0:00:86:c6:fc:97:ae:2e:2f:13:
                    6d:b6:5e:93:fd:11:3e:d0:a2:11:ae:61:81:52:db:
                    ac:a6:2d:40:b0:30:ae:84:bc:05:72:86:7e:69:ea:
                    3c:e4:5d:24:ee:6f:c2:b6:89:bd:55:26:b6:9e:78:
                    b8:9d:f6:9b:e6:52:80:0a:8d:73:f1:ed:c7:ad:42:
                    5c:6b:e9:93:d4:57:9c:91:75:a8:7b:4b:89:28:c1:
                    e6:f4:8d:61:fc:69:45:8b:4f:22:e3:79:37:d5:2e:
                    d0:26:de:8d:9b:6f:c5:fc:a7:23:ec:99:63:d7:2f:
                    7e:aa:60:f6:8b:fa:67:94:ed:e2:56:f1:a8:4f:51:
                    01:47:3f:e5:f3:c8:4f:4f:65:07:53:5b:26:70:58:
                    92:e7:60:ec:7b:a2:3a:d8:1a:94:76:e6:3c:7c:0c:
                    5f:18:a6:9f:74:e2:28:1d:35:4f:10:72:f1:ea:de:
                    92:7c:bb:e5:58:a6:e3:fa:3f:f4:ac:a4:8e:1b:2c:
                    5d:ff:7e:cb:3e:fa:65:39:3a:fe:8b:31:43:2e:0b:
                    97:97:8f:67:31:ec:63:b1:8c:ad:0a:5f:ac:a2:ec:
                    6d:1b:fd:9c:57:88:e6:0e:0f:85:d4:ea:bb:30:b5:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:01:FD:81:7E:85:FF:0B:47:15:52:60:FF:CC:8D:44:32:4A:7D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3af8395b-b3dc-3c6e-a1f0-f77b64ac45e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:ca:1d:cc:18:22:f1:47:5d:e2:a1:d9:37:a8:63:d4:6b:
         bd:38:e2:6f:eb:03:b1:87:88:1e:60:71:ab:57:29:4a:d7:28:
         fb:34:a7:78:af:66:bb:e6:28:c3:0e:a0:60:3b:29:34:71:e9:
         0e:d4:88:8d:d5:11:27:a6:58:b3:0f:e1:75:4b:dc:ee:65:1e:
         13:34:18:53:9d:54:eb:93:7c:f4:fa:55:df:c9:dc:c3:7e:59:
         1b:7e:71:26:03:e7:73:59:d4:ec:6b:47:c1:ac:50:0a:c1:19:
         63:1e:7f:79:a9:bb:d9:e4:a4:21:8d:66:bc:97:9a:9f:f8:ee:
         c6:29:ae:c2:39:37:1d:79:43:08:10:d6:0d:be:cb:2d:e2:b3:
         38:c6:63:ab:32:1a:de:6d:fd:48:33:fb:af:04:91:04:bb:17:
         70:7a:89:36:0a:bc:83:12:5a:2d:f9:45:83:62:e9:7e:74:f6:
         a1:15:5e:53:5a:8a:fd:83:a9:7d:6a:4e:db:77:ab:e0:61:13:
         63:bb:0e:96:cf:1b:13:e6:aa:47:5f:a7:24:66:97:99:75:0d:
         7b:fe:e3:9f:8f:89:6c:37:d6:12:95:87:a8:61:bc:ba:9b:89:
         27:5b:c3:58:66:ba:b1:99:3c:f1:7a:92:d1:ba:44:28:7b:29:
         86:8a:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----