Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48d36c66-c617-3344-adf7-b5487f28cdda.roa
File:                     48d36c66-c617-3344-adf7-b5487f28cdda.roa (raw, json)
Hash identifier:          PwK1hxi/HAoUSwHs3zKetgWCghWSY0MalWPSu3vkknk=
Subject key identifier:   F6:B0:14:DB:FF:BE:FC:71:B3:01:3B:CC:6A:81:46:6C:5A:1C:6E:AD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E447040C45A7514258692680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48d36c66-c617-3344-adf7-b5487f28cdda.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 01:12:52 +0000
asID:                     399471
IP address blocks:        166.1.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:04:0c:45:a7:51:42:58:69:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 01:12:52 2023 GMT
        Subject: CN=d6df10ec-97a0-46bd-a4a8-eb415d88ee36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b0:fa:ad:28:85:e9:bd:0d:07:84:d2:db:63:
                    3c:84:6c:3a:45:6b:80:fa:8b:91:55:5c:6b:0b:ed:
                    45:87:89:a5:34:d5:56:e4:b9:a1:e6:75:e2:75:29:
                    d7:bc:be:f1:1c:c9:9b:ea:0b:28:23:4e:31:68:2a:
                    72:8c:dc:87:34:de:d0:07:28:ef:64:ab:e1:bc:f0:
                    79:9a:b5:33:10:60:33:76:99:69:d7:bb:e7:18:36:
                    53:2f:d0:b0:97:4f:ba:90:35:19:2c:76:ad:98:61:
                    ca:29:d8:31:2e:f4:43:47:64:2a:6c:07:80:5f:36:
                    69:f7:43:c1:6b:3b:f6:fe:5e:ad:8c:ba:c2:29:c0:
                    45:d3:80:eb:73:5a:6b:99:ce:3a:ee:b1:e9:3b:a0:
                    19:df:2e:58:b9:d0:a2:b4:b0:1e:2a:a5:88:8c:39:
                    1e:76:aa:ad:73:24:99:af:9f:89:61:30:90:d5:16:
                    dd:d9:9d:93:3b:18:ae:cf:81:2c:da:84:07:a0:32:
                    24:e0:49:14:66:ad:d8:6c:63:74:83:92:e0:d5:36:
                    8d:40:f7:05:03:75:7f:8d:71:5a:23:1b:16:2b:df:
                    a3:de:40:34:00:4d:8e:f4:1c:e7:7c:44:c9:56:b7:
                    39:27:6d:c2:9f:ba:ea:0c:0f:38:64:be:57:1e:54:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:14:DB:FF:BE:FC:71:B3:01:3B:CC:6A:81:46:6C:5A:1C:6E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48d36c66-c617-3344-adf7-b5487f28cdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:61:f7:60:ef:46:a7:07:ed:de:72:2f:18:c2:f0:63:65:
         6a:7a:8f:a7:10:56:fc:3a:fa:ed:75:42:8e:80:f0:84:6b:4b:
         05:dd:07:ee:48:ba:95:2c:2b:70:e5:e1:9f:16:29:d5:7e:54:
         df:9c:38:33:2e:02:d5:c3:49:8a:4b:38:29:0a:90:e9:83:3f:
         c1:e3:2c:db:85:95:bd:52:67:16:1e:eb:cf:9f:23:0f:d3:cd:
         63:1e:bc:54:09:2c:01:cb:45:39:8c:ef:92:06:ed:50:b9:d5:
         3d:d6:90:8b:23:4f:2a:c5:e6:74:16:b1:3e:99:2d:91:bd:24:
         61:04:94:f9:99:00:66:c4:f3:90:78:01:92:3b:ed:fb:44:2e:
         a9:31:72:48:09:cb:c2:e5:23:b9:77:a8:f3:65:96:77:3c:5e:
         87:65:c6:9e:dc:99:57:c3:21:a4:ed:3a:49:ab:a4:e2:f4:b7:
         a3:58:4e:67:80:c6:b4:d2:1c:73:14:8b:cb:e9:c5:8b:54:3d:
         cb:37:e4:22:19:a2:41:83:09:c2:1d:ba:f5:16:cf:48:d8:c4:
         d6:19:5f:2b:75:97:3e:28:d4:ef:9a:7d:0a:b3:d0:c8:5c:e8:
         76:a1:4b:a6:3f:af:df:b5:dd:66:79:a5:00:30:6d:43:29:03:
         8f:79:69:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRwQMRadRQlhpJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgxMTAxMTI1MlowLzEtMCsGA1UEAxMk
ZDZkZjEwZWMtOTdhMC00NmJkLWE0YTgtZWI0MTVkODhlZTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbD6rSiF6b0NB4TS22M8hGw6RWuA+ouRVVxr
C+1Fh4mlNNVW5Lmh5nXidSnXvL7xHMmb6gsoI04xaCpyjNyHNN7QByjvZKvhvPB5
mrUzEGAzdplp17vnGDZTL9Cwl0+6kDUZLHatmGHKKdgxLvRDR2QqbAeAXzZp90PB
azv2/l6tjLrCKcBF04Drc1prmc467rHpO6AZ3y5YudCitLAeKqWIjDkedqqtcySZ
r5+JYTCQ1Rbd2Z2TOxiuz4Es2oQHoDIk4EkUZq3YbGN0g5Lg1TaNQPcFA3V/jXFa
IxsWK9+j3kA0AE2O9BznfETJVrc5J23Cn7rqDA84ZL5XHlSCbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPawFNv/vvxxswE7zGqBRmxaHG6tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDhkMzZjNjYtYzYxNy0z
MzQ0LWFkZjctYjU0ODdmMjhjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGssYfdg70anB+3eci8YwvBjZWp6j6cQVvw6+u11Qo6A8IRrSwXdB+5I
upUsK3Dl4Z8WKdV+VN+cODMuAtXDSYpLOCkKkOmDP8HjLNuFlb1SZxYe68+fIw/T
zWMevFQJLAHLRTmM75IG7VC51T3WkIsjTyrF5nQWsT6ZLZG9JGEElPmZAGbE85B4
AZI77ftELqkxckgJy8LlI7l3qPNllnc8Xodlxp7cmVfDIaTtOkmrpOL0t6NYTmeA
xrTSHHMUi8vpxYtUPcs35CIZokGDCcIduvUWz0jYxNYZXyt1lz4o1O+afQqz0Mhc
6HahS6Y/r9+13WZ5pQAwbUMpA495aTg=
-----END CERTIFICATE-----