Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41278b18-681d-3186-b8f6-9cd5df8d782d.roa
File:                     41278b18-681d-3186-b8f6-9cd5df8d782d.roa (raw, json)
Hash identifier:          bFx2cWq92SyWEqeGK+RHdG78XlPci+Bz5kyPEUjN0wk=
Subject key identifier:   87:3C:BE:66:71:CF:50:E1:E6:65:13:1D:04:F6:13:77:87:5E:63:DF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584161126D9647D891E05DD7D820
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41278b18-681d-3186-b8f6-9cd5df8d782d.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 01 Jul 2025 04:00:00 +0000
asID:                     135752
IP address blocks:        166.0.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:61:12:6d:96:47:d8:91:e0:5d:d7:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  1 04:00:00 2025 GMT
        Subject: CN=0ff66f41-8575-4ea0-9c12-a976a656732b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:eb:39:69:62:f1:8d:54:cc:f2:f2:04:20:
                    9e:5d:f7:a5:2f:f3:87:99:1c:08:a6:b9:94:f9:db:
                    13:51:c8:85:cd:d9:00:8a:13:1c:3f:84:67:99:74:
                    b9:50:2b:c4:0a:56:3f:f3:27:2d:6e:f0:40:52:7a:
                    48:7f:58:cb:e7:4d:e3:2c:0d:14:e9:17:3f:55:df:
                    1d:ff:64:5d:94:9f:66:b5:62:d8:b8:ed:e2:f3:0c:
                    23:59:6b:27:16:d2:7a:14:c4:b1:a4:a3:01:c3:dc:
                    b3:9e:b6:a3:ba:7a:f8:bc:6e:6a:29:f9:e5:1e:72:
                    c8:7e:17:c3:77:fa:f4:73:91:a6:51:75:00:ad:af:
                    d8:ad:fa:c7:88:0d:77:c5:b0:34:0b:72:e0:72:9a:
                    2f:7c:f7:2c:19:86:10:8f:fb:57:37:ca:46:f4:0c:
                    5e:6d:d1:8d:37:bc:f8:90:75:e5:85:99:18:6a:6f:
                    aa:30:10:84:83:92:2c:9f:29:db:7e:a8:75:d3:65:
                    5c:ea:fa:73:f9:71:ce:29:51:d0:21:03:2a:15:10:
                    1c:93:8d:8b:0b:3a:fd:b8:ec:7b:41:ed:35:4c:73:
                    b7:85:fa:f8:ba:be:2c:50:d5:9c:0f:52:2a:37:52:
                    ce:c9:eb:a4:2a:22:32:8b:8d:b6:de:37:df:d0:71:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3C:BE:66:71:CF:50:E1:E6:65:13:1D:04:F6:13:77:87:5E:63:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41278b18-681d-3186-b8f6-9cd5df8d782d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2d:00:df:ed:fa:60:b9:01:a4:98:a0:20:00:f7:2d:05:47:
         92:eb:f6:39:5c:41:26:49:21:d8:bf:f3:ca:8b:d2:88:fe:bb:
         f2:97:34:44:83:8b:10:11:d2:f8:12:9c:db:90:5b:d7:d4:92:
         51:44:8a:7f:f0:e1:29:95:24:f5:4c:c2:39:bf:e6:36:29:64:
         7b:63:47:ce:1d:b9:21:43:17:f0:da:d8:ca:86:f1:2d:82:8f:
         8a:5b:7e:81:b1:0a:63:3a:4c:4e:68:b3:1b:2c:70:29:7e:85:
         7e:df:5f:6b:0d:1b:cd:eb:29:8d:9d:bb:e9:e0:6b:78:7b:07:
         b5:01:e9:12:59:de:19:bf:b3:ad:28:6b:c3:a8:f9:0a:15:0c:
         81:d5:a7:f1:6e:25:20:8f:c2:8a:b8:ca:39:f8:9e:26:93:35:
         3c:c7:25:b3:c0:4a:8d:ee:f9:d6:c6:17:06:3a:73:24:89:51:
         eb:e0:56:72:b7:77:55:95:d7:4f:27:12:63:4f:57:fb:34:f8:
         30:8a:72:5a:50:cd:56:c1:14:eb:88:ee:23:cb:ce:f7:5b:16:
         29:71:77:47:a5:b1:7a:6a:ee:6b:f3:38:3f:91:10:db:ea:3d:
         c4:6f:a5:2f:dd:47:60:36:96:36:ff:d0:a5:dd:78:a3:80:94:
         f7:35:3a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----