Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e750f19-b748-36a4-a72a-b8d464388642.roa
File:                     3e750f19-b748-36a4-a72a-b8d464388642.roa (raw, json)
Hash identifier:          2faaRwBpU8uK9/ELzDWRTay+4zylHQifRVTGtR/DSJM=
Subject key identifier:   AF:8B:A2:57:C5:CF:7D:E1:85:85:09:D8:A6:F8:CD:C0:38:F5:A5:6F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844049D24B4572D55B72BD3AD60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e750f19-b748-36a4-a72a-b8d464388642.roa
Signing time:             Sun 26 Nov 2023 16:39:00 +0000
ROA not before:           Sun 26 Nov 2023 16:39:00 +0000
ROA not after:            Sat 24 Feb 2024 16:39:00 +0000
asID:                     397423
IP address blocks:        166.1.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:04:9d:24:b4:57:2d:55:b7:2b:d3:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 26 16:39:00 2023 GMT
            Not After : Feb 24 16:39:00 2024 GMT
        Subject: CN=da1390b2-13ea-4962-80d1-4f0d54ce9829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:13:f8:3e:10:f9:e9:0d:c3:4a:72:be:e3:
                    1f:f1:49:26:37:8d:a4:6e:b0:bc:ce:30:15:0e:a7:
                    c0:9c:d7:80:97:dd:14:c5:f1:6c:ad:71:9a:89:ca:
                    54:ac:23:ae:93:77:14:01:ef:a3:ad:cc:cc:e6:c7:
                    a1:5d:db:0f:7f:53:0e:1f:f2:28:7d:97:e8:87:41:
                    93:55:8f:a4:ce:cb:a7:98:b1:0d:05:ba:48:cf:bd:
                    ec:64:27:a9:3d:0e:70:33:2c:e1:81:b4:09:5e:0f:
                    73:2e:e1:6f:d0:5d:77:ef:22:ed:1d:d0:74:1e:34:
                    af:06:73:96:51:a6:27:04:01:b4:e0:55:f3:12:27:
                    51:38:27:55:df:3d:b6:ec:91:39:82:84:5a:a9:8c:
                    1a:8f:75:76:a9:51:33:96:20:bc:51:b0:60:65:bc:
                    2c:97:3d:3a:d8:4f:91:5e:3f:e9:64:c8:6d:34:ff:
                    d3:4a:fd:af:8f:f4:26:2f:56:8e:9e:b0:42:28:5c:
                    e7:2a:ff:f2:f0:24:8d:b5:9e:29:74:8e:35:e9:7d:
                    af:cf:e3:20:7a:e7:70:22:f7:99:49:21:67:86:4d:
                    49:12:83:1c:a9:27:87:9d:50:06:6c:0f:5d:ce:2b:
                    6d:4b:c7:4c:b0:47:ea:cf:34:06:90:80:4a:dc:10:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:A2:57:C5:CF:7D:E1:85:85:09:D8:A6:F8:CD:C0:38:F5:A5:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3e750f19-b748-36a4-a72a-b8d464388642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:d5:44:b1:68:d2:ce:f5:88:31:76:a6:e3:b5:68:02:15:
         ab:c2:99:9b:51:f2:cc:f7:45:8c:6c:de:48:6e:18:15:02:d9:
         36:0f:4b:b4:f9:e0:9c:f1:28:24:92:40:7f:06:f3:23:57:fc:
         bf:68:8c:4e:27:97:52:64:f3:d6:23:68:11:a3:ed:4b:2d:23:
         73:fe:76:17:88:93:89:c6:51:b0:62:ef:26:fb:3d:0f:5b:21:
         33:eb:7c:2a:0e:78:56:89:5b:64:24:de:b7:db:a3:66:66:2b:
         bc:a9:7a:c7:04:35:de:ba:25:44:a9:4a:42:8c:a0:de:a5:37:
         f8:7b:ce:ef:4f:45:ec:b2:48:ae:cb:a0:88:d6:29:df:86:8a:
         e8:fa:fa:c0:39:41:ab:e2:53:f7:64:0a:6b:48:8f:26:fc:52:
         a2:da:1b:c5:c9:36:5c:61:0c:fb:24:aa:e7:2b:96:3c:d1:f0:
         aa:15:43:5e:8c:48:20:2c:3b:42:5c:cd:ce:b4:f7:b4:e3:62:
         cf:d7:3b:87:00:13:5e:61:0b:d4:fb:da:1c:7d:93:3f:56:fe:
         76:74:78:ac:03:0f:a8:1c:02:81:90:5f:bc:aa:b0:37:ce:5a:
         69:fb:72:29:f1:68:3f:f9:5c:f4:46:44:f0:e8:5c:48:33:14:
         8e:14:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----