Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a72bf4-951d-35e7-b42e-21f70576647e.roa
File:                     45a72bf4-951d-35e7-b42e-21f70576647e.roa (raw, json)
Hash identifier:          +kxwp5pHSnQls+nWolAKFwQ3nLA7/7bHMsoiKLZK1Lw=
Subject key identifier:   D7:56:EC:C7:A9:EC:07:C4:7C:9F:5A:7F:3E:F8:EF:16:58:D5:29:1F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858422A05C5626C193340691F97C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a72bf4-951d-35e7-b42e-21f70576647e.roa
Signing time:             Fri 09 Jun 2023 16:40:50 +0000
ROA not before:           Fri 09 Jun 2023 16:40:50 +0000
ROA not after:            Thu 07 Sep 2023 16:40:50 +0000
asID:                     7018
IP address blocks:        108.165.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2a:05:c5:62:6c:19:33:40:69:1f:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 16:40:50 2023 GMT
            Not After : Sep  7 16:40:50 2023 GMT
        Subject: CN=d78684d4-88a8-4667-ad4a-5f16a721d77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:3a:a3:d2:f4:29:da:5e:2d:cb:6c:a1:63:
                    63:b2:39:88:09:e0:02:3a:c1:52:a2:0d:e0:be:60:
                    da:d4:23:69:45:39:0a:3f:62:b5:72:61:6f:2e:97:
                    0e:ad:7e:dc:17:bc:36:7f:23:3f:5c:bc:0f:5d:df:
                    db:d6:ac:fc:ce:e5:f4:4a:d2:4f:28:23:83:16:ca:
                    e1:95:ea:9c:3c:d3:90:c4:54:26:78:08:0a:4c:3c:
                    93:ab:36:08:14:e6:fb:d3:9d:b3:87:6a:4e:81:77:
                    9f:1b:79:d0:75:94:c6:2d:cb:6a:f2:71:6c:de:51:
                    5e:f1:62:73:ef:f0:55:e2:8e:e8:fe:41:ee:11:92:
                    1a:5c:f0:85:44:12:0f:6e:89:3e:2c:54:96:be:6f:
                    8c:ff:d3:eb:c8:1f:f5:84:ae:b2:ac:c5:6c:32:7e:
                    a1:ab:04:f8:e3:35:99:42:1a:51:59:28:01:f0:ba:
                    29:63:0d:d0:cd:a3:6d:c1:98:89:14:7d:e9:f6:22:
                    8d:ef:e7:fa:f1:61:34:4d:67:76:da:5a:f2:c6:4d:
                    5f:48:4c:61:82:be:b8:92:20:bb:73:0c:aa:3d:4c:
                    d7:c5:46:f4:a2:41:32:7c:19:f3:bc:b3:aa:67:26:
                    da:1f:7c:b9:4e:89:88:61:8c:52:8f:08:e2:de:e2:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:56:EC:C7:A9:EC:07:C4:7C:9F:5A:7F:3E:F8:EF:16:58:D5:29:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45a72bf4-951d-35e7-b42e-21f70576647e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:98:0d:cf:58:4e:cd:29:36:85:ed:91:dc:46:0f:ef:6d:
         f4:16:40:3e:a1:f7:7e:55:02:93:d4:52:56:2b:ff:4a:b1:1c:
         1d:c7:5a:73:1f:88:30:f8:c2:25:ca:31:11:3e:ba:99:05:cd:
         f9:99:c9:9a:7f:ce:ed:37:df:dc:c3:8b:6a:29:3d:ab:28:e1:
         7e:f4:01:28:17:f3:f6:57:e1:68:b1:d8:26:01:fd:73:e6:d6:
         38:c6:3c:85:28:09:b3:d5:83:e2:53:12:98:43:de:77:87:7d:
         4a:f3:f9:26:08:bd:7e:68:4e:e4:46:6c:24:7c:34:20:27:c7:
         73:dc:79:43:63:c0:e1:1c:17:d5:65:62:02:0c:a6:12:fe:88:
         a7:ce:8c:f7:40:b3:71:08:ed:8d:b4:6f:b9:05:f2:c1:18:17:
         a9:0b:bc:6e:80:b2:8d:3f:89:71:83:f1:df:e8:b7:0f:23:ae:
         63:85:9c:7c:f4:58:d6:af:91:50:5d:32:44:b2:99:28:b2:37:
         14:b5:0d:7e:9b:db:26:7a:6f:6c:04:a6:bd:90:d6:71:a1:24:
         3c:61:fd:32:e5:0c:ff:5f:10:37:dd:91:d6:1f:96:e1:8f:a5:
         f8:92:93:5f:1e:8d:5a:ee:ea:2a:94:57:9e:bd:a6:83:2e:2b:
         6e:ab:2e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----