Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49b43cbc-57a5-371d-bff6-7a129eadc31e.roa
File:                     49b43cbc-57a5-371d-bff6-7a129eadc31e.roa (raw, json)
Hash identifier:          0XyscjkaHbf52QlxRChOrqNDYRiVcxLwpKKigVQpFGw=
Subject key identifier:   67:5A:F9:5C:BA:61:D2:8F:C2:62:78:6E:C8:16:26:C5:03:20:EF:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858435D0E5EE5F38350A7DAFF7F40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49b43cbc-57a5-371d-bff6-7a129eadc31e.roa
Signing time:             Wed 27 Sep 2023 16:11:20 +0000
ROA not before:           Wed 27 Sep 2023 16:11:20 +0000
ROA not after:            Tue 26 Dec 2023 17:11:20 +0000
asID:                     57043
IP address blocks:        166.0.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:0e:5e:e5:f3:83:50:a7:da:ff:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 27 16:11:20 2023 GMT
            Not After : Dec 26 17:11:20 2023 GMT
        Subject: CN=c587665f-606b-420f-82f5-c6e1f0c4761f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:d0:e3:ea:f5:5c:db:c9:1a:37:0d:c9:59:
                    8e:35:63:fd:cc:23:f8:9c:24:66:35:e2:30:96:1a:
                    b6:84:5e:04:59:82:2a:02:35:b9:ec:61:29:53:f2:
                    ca:46:e9:db:86:bc:98:79:35:8d:ab:eb:6b:8b:ee:
                    6c:00:26:1a:79:61:95:35:ca:49:24:d4:79:a1:02:
                    34:6d:6b:1a:15:4e:6f:44:67:46:63:45:bd:c5:63:
                    39:f6:12:37:36:d3:39:4b:4a:55:93:8c:29:9b:d7:
                    9c:2b:95:da:48:42:59:69:eb:66:e2:27:8c:9e:a8:
                    ed:ea:9b:ff:a8:03:ff:eb:02:e9:20:25:38:04:7c:
                    9b:5e:c6:86:de:93:ab:bf:0f:9e:04:cd:7e:d0:9b:
                    91:8e:7b:3e:00:39:59:8d:9d:de:1a:8d:f5:50:28:
                    23:88:6e:e6:9c:25:b3:02:00:0f:81:33:06:c0:42:
                    e5:e9:cc:c5:b7:19:c5:e8:c5:c0:99:88:66:c2:c3:
                    5b:d6:e8:c2:80:0f:37:4b:a7:3e:4f:71:81:f1:88:
                    ac:f5:6a:2e:24:7b:04:ac:5c:f6:78:0f:6b:20:91:
                    bc:ee:d9:c4:19:bd:39:1a:fa:0a:93:ff:5a:7b:c9:
                    fc:20:b5:af:ed:0a:3a:c0:68:bc:ec:aa:24:59:e8:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:F9:5C:BA:61:D2:8F:C2:62:78:6E:C8:16:26:C5:03:20:EF:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/49b43cbc-57a5-371d-bff6-7a129eadc31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b4:1b:a4:f1:12:8c:9a:19:92:4f:44:e6:32:c2:e4:ab:74:
         2c:33:e4:ea:c2:49:57:6d:20:33:a3:d9:37:a9:90:b5:1b:c2:
         be:ab:6c:2f:77:32:9f:d9:36:40:c1:6f:b5:b0:44:31:0f:6a:
         2b:b8:e5:70:0c:8c:f2:8d:58:bf:6a:0d:03:bf:aa:ae:1a:d3:
         4b:6c:aa:f1:1a:70:04:de:b9:ef:9d:33:ea:53:49:9d:2a:94:
         b8:71:11:62:5e:b1:60:1d:5f:b3:c8:64:b7:03:51:28:09:60:
         62:8f:1b:6d:cf:48:29:01:9d:7e:3f:dd:7c:79:cb:2d:51:90:
         bb:e2:32:f0:51:ef:f9:19:0a:c9:b4:bf:ad:3f:fa:9e:d1:c7:
         88:b5:50:a3:0c:ec:34:58:fc:c2:98:3f:bf:ec:3c:fb:ed:b7:
         fa:fe:1e:de:4f:d6:15:a8:2a:3a:12:48:69:a8:80:8d:bd:59:
         f3:ab:ad:9a:13:60:91:c9:e2:fb:6c:1a:83:8c:48:ca:bf:e0:
         53:2a:5a:33:1e:3b:74:bb:73:1f:dd:26:d0:e8:f2:64:f8:30:
         7f:86:26:bf:69:be:58:35:c7:81:d7:5a:6f:aa:59:29:31:5c:
         cc:c5:50:13:b7:39:3e:60:c0:67:6a:8e:bc:da:44:97:15:6e:
         fd:44:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----