Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/428ed6f4-0375-3977-83d0-7be80f2553a8.roa
File:                     428ed6f4-0375-3977-83d0-7be80f2553a8.roa (raw, json)
Hash identifier:          ep1RNh62zmPfNXdpuYSWaIl/dp6V0/vOffmLYZk4Cco=
Subject key identifier:   25:1D:04:E3:05:0B:59:85:A2:08:A9:6A:E3:75:EC:06:63:9E:19:8F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E45769F907F75B0B92EC2A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/428ed6f4-0375-3977-83d0-7be80f2553a8.roa
Signing time:             Mon 15 May 2023 17:38:45 +0000
ROA not before:           Mon 15 May 2023 17:38:45 +0000
ROA not after:            Sun 13 Aug 2023 17:38:45 +0000
asID:                     51722
IP address blocks:        166.1.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:57:69:f9:07:f7:5b:0b:92:ec:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:38:45 2023 GMT
            Not After : Aug 13 17:38:45 2023 GMT
        Subject: CN=38d061cd-7e04-4e9b-8aee-8f3231d6fb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:b0:a1:e5:96:a0:5d:bd:d0:78:94:0c:35:
                    17:d8:7f:f2:d7:6f:7d:74:08:11:6f:d7:4e:75:12:
                    94:5f:50:2e:f3:e4:42:9d:bf:61:93:d5:e5:f5:29:
                    f1:89:b8:3b:ec:a1:bd:c9:1d:69:b5:b7:76:76:6f:
                    b6:82:76:45:ea:41:54:c5:b8:26:7a:ce:74:53:3d:
                    82:a2:0d:44:c0:1b:83:40:45:0a:58:b6:d8:c5:c8:
                    c5:8d:a0:b2:d7:6e:07:87:92:f4:dd:5a:15:17:60:
                    39:a0:91:8c:23:17:3e:51:a1:26:8d:ae:ac:38:1c:
                    dd:91:56:8a:a4:11:9b:f0:1e:46:8d:f5:ed:c4:ec:
                    d0:d2:5e:e4:bc:2d:43:fb:11:18:b9:15:b8:24:f7:
                    8e:07:85:2f:c4:ad:39:98:d8:a4:c8:be:e4:22:1f:
                    dc:17:1f:54:ef:8a:a5:a0:56:cf:a8:e0:86:e9:bb:
                    65:11:fa:21:88:7f:dc:a7:c1:43:89:f5:a3:77:66:
                    43:01:03:a0:f0:7a:ce:18:81:d2:78:8e:cd:c2:86:
                    55:1e:3b:59:48:e1:5b:bd:27:a3:f6:43:d1:29:14:
                    34:33:6e:75:54:09:f2:01:60:9f:c6:a1:1f:1d:fa:
                    43:26:a7:ef:c9:99:f5:6f:cf:79:46:42:18:13:64:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:04:E3:05:0B:59:85:A2:08:A9:6A:E3:75:EC:06:63:9E:19:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/428ed6f4-0375-3977-83d0-7be80f2553a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:fa:d3:3f:ef:fc:56:ef:2a:2a:b0:23:26:f3:6a:6b:1c:
         65:e5:35:d2:d4:87:95:ee:34:9f:f7:d4:49:67:50:b7:00:03:
         65:c4:14:b4:13:61:b7:03:3a:f0:6e:ab:c2:40:c9:23:74:6c:
         c4:67:10:7c:00:2d:0b:aa:7f:04:09:a4:5e:b1:08:c1:ad:15:
         11:c6:e8:eb:ce:15:83:ed:39:7a:91:b1:14:47:87:b2:6c:da:
         18:44:0a:aa:e4:80:fd:b3:cb:f6:95:36:9a:88:dc:f2:6a:e8:
         7c:64:a0:98:af:4e:a2:df:54:6c:44:26:1a:61:32:df:c6:c5:
         22:96:9b:6a:15:77:c9:de:ec:ab:33:b1:62:af:21:e9:9b:82:
         73:e2:76:c4:da:02:ad:73:14:78:da:44:61:57:63:a5:28:9b:
         4a:1b:19:b5:90:f8:2c:94:73:8f:bc:a5:8c:70:20:ff:1a:cb:
         86:7a:ae:8b:b8:5c:cf:cb:b2:d4:e8:73:37:8c:6c:05:df:34:
         91:db:f1:23:70:0b:ce:65:7d:22:16:e0:49:65:fd:58:d9:c8:
         58:ed:8d:02:32:5c:eb:db:75:1d:b1:e1:64:b1:8d:5e:c7:78:
         07:c6:10:bd:4a:91:64:58:e7:ca:d3:d4:f3:47:d3:eb:ce:4e:
         bb:6d:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----