Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4933844b-b173-302c-803b-283e73567576.roa
File:                     4933844b-b173-302c-803b-283e73567576.roa (raw, json)
Hash identifier:          UNu/eZ3e7V6bqLDpUG6Rkq4pR0FhelfP60pCFI+bu3k=
Subject key identifier:   49:18:03:2B:43:35:1F:A9:82:E4:08:B1:01:AD:0B:89:FF:46:5A:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584389E8E14EA7D65094BA10EE60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4933844b-b173-302c-803b-283e73567576.roa
Signing time:             Fri 13 Oct 2023 17:47:10 +0000
ROA not before:           Fri 13 Oct 2023 17:47:10 +0000
ROA not after:            Thu 11 Jan 2024 18:47:10 +0000
asID:                     834
IP address blocks:        108.165.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:89:e8:e1:4e:a7:d6:50:94:ba:10:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 13 17:47:10 2023 GMT
            Not After : Jan 11 18:47:10 2024 GMT
        Subject: CN=26dbf9e8-580d-4d65-9448-efc984381ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:d4:d8:bd:7e:1a:ed:30:96:72:fe:4b:f8:
                    48:5c:ed:9a:8e:10:6c:f7:07:9e:c6:ab:5d:02:55:
                    c5:51:cb:ce:59:a6:dc:2d:dd:6b:dc:d5:68:fe:1c:
                    d4:b7:c1:dc:af:b8:0c:83:8c:2e:08:0c:e8:ba:67:
                    5b:0e:2a:90:2c:49:53:6d:25:08:99:61:cc:ac:cd:
                    20:d6:6b:8d:d0:28:a6:6e:89:6c:4a:92:99:9d:da:
                    6c:3f:d8:f4:cb:ea:86:6c:9b:db:e3:00:f9:2f:6d:
                    4b:14:05:a0:a4:1f:af:55:12:7a:2f:0f:b0:c5:b1:
                    31:4f:4d:d8:29:31:68:af:4d:a3:c1:35:ca:4f:6c:
                    86:34:5e:eb:aa:73:54:ae:c9:70:ef:ab:be:e0:5a:
                    82:bc:3c:a9:23:de:21:a5:4a:f2:47:27:eb:70:ca:
                    fa:95:75:65:fc:7d:09:f6:4c:1e:d4:00:43:ec:25:
                    eb:4e:27:91:f5:09:b5:c7:2a:9e:c0:35:05:49:d0:
                    62:03:15:73:31:28:71:3b:3c:87:70:39:13:ba:75:
                    08:78:9b:8b:ff:d9:b2:db:35:6d:f2:ca:d2:40:1f:
                    3e:2c:f2:e5:3f:44:c8:b3:6b:93:3e:7f:af:6e:c5:
                    63:cd:96:9d:07:17:33:77:b7:dd:10:2b:d1:e1:b5:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:18:03:2B:43:35:1F:A9:82:E4:08:B1:01:AD:0B:89:FF:46:5A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4933844b-b173-302c-803b-283e73567576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:db:ad:d1:ca:75:7c:55:4a:53:fb:39:2c:6f:4c:22:f1:97:
         17:80:2c:0f:45:d0:aa:a1:9e:c4:4c:a3:70:3b:f1:8a:01:2e:
         cc:26:97:53:39:d1:96:e4:ee:fb:9b:83:30:57:59:61:a6:78:
         f0:06:5f:b3:f3:9b:76:eb:19:bb:26:4c:41:92:44:b8:b8:1e:
         5e:a8:1e:ab:f3:58:b4:d0:97:1c:f2:53:1d:02:70:84:11:61:
         64:01:b7:12:37:2e:7b:48:6a:6e:03:d5:c4:8a:55:19:bc:86:
         c5:d6:51:8a:fc:92:cd:8c:cc:a0:75:5d:66:a6:9b:1f:f6:a1:
         d3:aa:31:59:73:79:2e:5e:11:19:54:e5:7d:65:b1:70:26:46:
         dc:b3:14:06:d6:70:f0:12:3b:a0:f9:7e:f8:b5:5c:f7:22:b6:
         0d:4c:5a:7b:e1:d5:53:17:94:96:8e:a2:7a:54:98:90:9b:15:
         9a:c2:80:82:77:c2:92:8d:d0:14:ae:b8:c7:4c:cb:a2:7e:22:
         f8:e9:67:d3:e8:cb:1b:54:c4:ea:b2:e3:31:e3:60:94:8b:45:
         07:e0:62:7e:59:90:e7:ad:af:e2:e0:a4:03:7a:80:70:7c:9e:
         bc:35:10:56:c1:7b:d6:1c:8f:83:2f:e4:99:6f:7e:93:32:8b:
         0f:77:6a:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOJ6OFOp9ZQlLoQ7mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTAxMzE3NDcxMFoXDTI0MDExMTE4NDcxMFowLzEtMCsGA1UEAxMk
MjZkYmY5ZTgtNTgwZC00ZDY1LTk0NDgtZWZjOTg0MzgxY2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhHU2L1+Gu0wlnL+S/hIXO2ajhBs9weexqtd
AlXFUcvOWabcLd1r3NVo/hzUt8Hcr7gMg4wuCAzoumdbDiqQLElTbSUImWHMrM0g
1muN0CimbolsSpKZndpsP9j0y+qGbJvb4wD5L21LFAWgpB+vVRJ6Lw+wxbExT03Y
KTFor02jwTXKT2yGNF7rqnNUrslw76u+4FqCvDypI94hpUryRyfrcMr6lXVl/H0J
9kwe1ABD7CXrTieR9Qm1xyqewDUFSdBiAxVzMShxOzyHcDkTunUIeJuL/9my2zVt
8srSQB8+LPLlP0TIs2uTPn+vbsVjzZadBxczd7fdECvR4bXVKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkYAytDNR+pguQIsQGtC4n/RloSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDkzMzg0NGItYjE3My0z
MDJjLTgwM2ItMjgzZTczNTY3NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnbrdHKdXxVSlP7OSxvTCLxlxeALA9F0KqhnsRMo3A78YoBLswml1M5
0Zbk7vubgzBXWWGmePAGX7Pzm3brGbsmTEGSRLi4Hl6oHqvzWLTQlxzyUx0CcIQR
YWQBtxI3LntIam4D1cSKVRm8hsXWUYr8ks2MzKB1XWammx/2odOqMVlzeS5eERlU
5X1lsXAmRtyzFAbWcPASO6D5fvi1XPcitg1MWnvh1VMXlJaOonpUmJCbFZrCgIJ3
wpKN0BSuuMdMy6J+IvjpZ9PoyxtUxOqy4zHjYJSLRQfgYn5ZkOetr+LgpAN6gHB8
nrw1EFbBe9Ycj4Mv5JlvfpMyiw93als=
-----END CERTIFICATE-----