Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ec5ebea-f54c-3b6b-947c-0baaa1a17249.roa
File:                     3ec5ebea-f54c-3b6b-947c-0baaa1a17249.roa (raw, json)
Hash identifier:          ptbUKdaU9/ODIBImUNm/j+UuxnVGAGFtkh+WpqnSWPA=
Subject key identifier:   05:69:A8:25:9A:F0:A5:F8:C1:D4:DB:6D:83:40:DB:FB:F1:31:A7:26
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584389E96877E9F8769AEF08B180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ec5ebea-f54c-3b6b-947c-0baaa1a17249.roa
Signing time:             Fri 13 Oct 2023 17:48:14 +0000
ROA not before:           Fri 13 Oct 2023 17:48:14 +0000
ROA not after:            Thu 11 Jan 2024 18:48:14 +0000
asID:                     834
IP address blocks:        199.115.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:89:e9:68:77:e9:f8:76:9a:ef:08:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 13 17:48:14 2023 GMT
            Not After : Jan 11 18:48:14 2024 GMT
        Subject: CN=14837535-b4ea-43bf-a96e-0e269c634ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:b7:0d:00:b0:73:04:a3:c4:53:c1:12:38:
                    99:ab:c8:01:2e:b1:52:fe:a8:70:b6:58:2d:3d:5a:
                    9d:8f:8c:d4:cd:a2:dc:76:98:c4:fa:f2:2e:74:30:
                    69:60:09:15:75:c9:04:85:d9:47:48:8f:ef:15:c9:
                    69:55:c1:c8:e7:e5:db:0d:d4:1b:65:e9:7f:a1:ea:
                    23:7c:47:58:c2:2f:e0:86:e2:37:8e:b3:8e:48:ca:
                    e3:19:3e:ab:2e:f5:a1:1e:c0:df:cf:cf:ab:28:51:
                    cb:6e:a6:05:09:30:af:a8:2e:95:eb:d0:1c:37:6d:
                    81:9c:2d:73:e5:6f:f3:28:22:3d:7c:07:32:5e:3c:
                    8c:ec:9c:0a:49:99:70:9a:65:54:a4:fc:65:09:7a:
                    20:7d:d8:54:3c:a2:a7:fb:5d:3a:60:e8:33:8a:c3:
                    14:cb:7a:a7:25:0a:bf:9f:9d:91:36:25:ba:25:fd:
                    6a:01:4f:bf:38:81:ec:53:3d:cd:af:a5:21:41:c5:
                    50:55:87:a2:83:0d:47:10:ea:d3:8d:b6:33:9a:58:
                    43:3f:6f:be:99:d2:d0:52:4e:23:80:bc:b5:78:a9:
                    fe:47:89:ec:2a:d3:cd:d9:c8:fc:de:4d:0d:0f:c6:
                    db:41:5b:12:e6:b6:2a:56:e8:d7:ec:85:fe:bb:50:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:A8:25:9A:F0:A5:F8:C1:D4:DB:6D:83:40:DB:FB:F1:31:A7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ec5ebea-f54c-3b6b-947c-0baaa1a17249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:18:ad:dd:ee:f3:fb:a1:1c:08:d2:29:94:b5:cf:a8:8d:
         42:95:49:33:00:26:76:28:63:63:5f:43:b9:fb:36:43:43:fb:
         0c:64:b9:57:ff:08:0a:e6:af:45:35:6f:83:d8:e6:1b:e7:1f:
         ce:cd:60:29:81:81:48:bd:43:bc:3a:52:68:38:4d:45:7a:0c:
         3d:70:cf:21:0d:b5:4e:c7:3d:ca:89:76:12:08:8e:83:8c:31:
         94:de:fb:96:45:08:5e:46:1d:f3:6b:e4:ea:46:9a:bb:ed:5e:
         4d:39:ac:c8:5f:71:8c:01:33:84:5d:05:0e:55:bd:f7:0f:d1:
         34:4d:0b:aa:e8:6b:df:80:72:ba:13:7f:eb:34:72:82:3d:a9:
         45:ed:26:78:6f:0f:60:0e:43:b3:1a:0a:60:ad:01:19:ed:45:
         1d:b7:fb:a1:c7:09:0f:76:ba:d5:e5:c7:1f:6c:2d:27:66:48:
         87:cb:78:97:c7:70:da:a4:a2:c1:a9:36:47:d2:4a:a5:57:69:
         b6:1a:45:db:07:38:57:b2:1e:3d:92:29:85:07:28:e2:c7:00:
         43:18:22:e1:21:ac:98:d3:c1:06:0b:f3:77:cd:d6:90:4d:49:
         0a:f1:8c:36:9f:77:39:09:d9:57:a9:a8:9a:3b:ca:f4:da:f1:
         ba:82:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----