Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d094b71-b9a3-3003-98f6-206ac14a6f19.roa
File:                     3d094b71-b9a3-3003-98f6-206ac14a6f19.roa (raw, json)
Hash identifier:          WJC8aHxQt6D7b0d6lyA2/qZGVnfF66VY46/0Y67FLSo=
Subject key identifier:   25:02:9B:8D:3A:6B:9F:21:91:14:CB:7D:D5:A3:16:D6:07:AA:FB:2D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843F403951DF8C9E37BB3FEB3C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d094b71-b9a3-3003-98f6-206ac14a6f19.roa
Signing time:             Mon 20 Nov 2023 17:56:39 +0000
ROA not before:           Mon 20 Nov 2023 17:56:39 +0000
ROA not after:            Sun 18 Feb 2024 17:56:39 +0000
asID:                     834
IP address blocks:        166.0.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:03:95:1d:f8:c9:e3:7b:b3:fe:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 20 17:56:39 2023 GMT
            Not After : Feb 18 17:56:39 2024 GMT
        Subject: CN=633c1b41-577d-45be-a61b-da2179733241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:aa:90:80:42:36:ea:c7:4f:8e:55:9c:84:
                    57:4a:fe:77:40:15:3d:16:6c:f0:a4:9b:65:43:c7:
                    e4:7c:60:ba:eb:6d:1e:14:4e:38:e6:7a:b5:d3:1e:
                    a1:b6:14:bc:8e:f5:07:fc:46:77:df:e3:9e:af:0f:
                    6c:56:94:a0:85:00:24:fd:8a:fb:16:84:04:2a:c9:
                    a9:c5:d7:b3:96:c8:76:b7:81:77:34:f2:f2:7c:dd:
                    bc:86:91:25:a4:a3:b6:52:f3:f7:fb:36:f2:e2:98:
                    30:bc:e7:f8:f2:8c:49:8c:a3:52:3a:5f:98:f8:f7:
                    a5:ee:70:32:57:4e:d6:d5:65:2b:bd:41:33:48:6b:
                    69:2e:8f:fc:c3:c5:a9:be:f0:a2:b7:18:d2:65:e1:
                    74:28:01:28:d3:52:c0:55:d3:d1:0a:70:0a:c9:a1:
                    82:ae:86:d6:3f:55:8b:2e:8f:cf:80:d8:a6:50:75:
                    d7:c4:5c:46:52:fd:d5:27:75:b9:c7:44:cb:f0:c7:
                    fb:6f:51:40:13:8d:b8:18:ac:7a:67:9e:6b:77:44:
                    e9:67:79:34:a2:c7:c2:69:a8:51:6a:a0:50:86:9a:
                    76:82:ea:0c:02:95:e6:22:09:e0:62:f0:e7:da:b3:
                    c8:f2:93:2d:00:a2:5d:34:29:a5:fb:2f:bf:bd:44:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:02:9B:8D:3A:6B:9F:21:91:14:CB:7D:D5:A3:16:D6:07:AA:FB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d094b71-b9a3-3003-98f6-206ac14a6f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:c0:bd:0e:48:50:83:bc:ec:48:00:c2:b6:96:0d:65:80:
         69:44:cd:2c:7c:16:4e:b7:e3:a9:de:c2:f2:d1:1e:f2:ad:f8:
         b0:6d:77:fa:8e:f3:13:37:3e:5a:ec:76:8f:9b:af:26:bd:ba:
         79:35:63:8a:80:f1:c0:fd:c9:34:c3:f8:c9:20:bf:cc:fa:22:
         bc:35:28:9f:fa:b0:95:6b:3a:70:b0:2b:0e:52:0a:0a:58:a9:
         af:8d:4c:08:fb:12:7a:ae:ff:54:66:66:a5:51:3b:91:6b:7a:
         f2:cd:92:a7:76:0f:8d:c6:8f:3e:6e:ac:e6:d0:e3:a0:20:35:
         94:70:17:c8:ba:07:78:37:1e:49:35:dd:b1:b8:d1:93:43:35:
         4a:c4:03:18:46:c1:33:c1:1f:c3:b1:44:fd:8e:81:0d:99:64:
         2a:4a:4e:bc:ed:d5:c3:89:1d:e2:25:9a:42:43:99:7c:cc:e4:
         9d:be:82:af:65:45:4a:e8:42:77:05:3b:65:ba:54:95:3a:91:
         7a:c3:f7:38:e1:78:0c:54:05:8d:10:e7:3d:46:35:ae:97:36:
         7c:ef:ec:0d:8a:c7:03:07:c1:62:be:42:68:59:fc:0b:9d:0e:
         61:a0:3e:ae:43:80:cd:f4:20:ce:cd:ce:db:3b:e2:78:86:df:
         01:6a:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----