Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bd36c92-62e4-3e35-864e-61b47d2390eb.roa
File:                     4bd36c92-62e4-3e35-864e-61b47d2390eb.roa (raw, json)
Hash identifier:          91xfvmYJ7b7h0uXhVdSGzaDsxltrfYaOSd73Bg7Xa/I=
Subject key identifier:   36:A5:C9:05:10:1F:FB:06:55:17:96:3F:1D:05:43:E2:4D:8F:34:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842E97942226BAA25199F605780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bd36c92-62e4-3e35-864e-61b47d2390eb.roa
Signing time:             Thu 17 Aug 2023 06:32:56 +0000
ROA not before:           Thu 17 Aug 2023 06:32:56 +0000
ROA not after:            Wed 15 Nov 2023 07:32:56 +0000
asID:                     200385
IP address blocks:        166.1.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e9:79:42:22:6b:aa:25:19:9f:60:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 17 06:32:56 2023 GMT
            Not After : Nov 15 07:32:56 2023 GMT
        Subject: CN=4f42d232-1181-4ef7-8db9-70e945787808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:6a:60:c7:bd:cd:27:bf:5a:0e:cd:ad:d4:
                    02:5a:a1:31:94:0e:a6:ff:b1:75:72:d7:c8:dd:fc:
                    74:22:3d:dc:9b:d3:76:ad:51:c1:46:89:5d:c8:ff:
                    17:db:3c:f8:bb:4b:ae:bd:8a:25:d4:a7:78:7a:a5:
                    ad:eb:68:7f:ae:bd:0f:2e:e5:97:46:9d:a4:8b:db:
                    da:fb:87:7a:54:8d:ad:34:fb:a2:72:cf:ab:d4:0e:
                    25:67:14:98:5e:f7:16:34:c5:f4:0c:61:fb:18:49:
                    ae:ea:e5:26:f1:36:d9:9d:cd:ed:ae:76:2e:ee:a3:
                    96:71:02:90:26:c8:4a:e6:bb:1e:a7:c9:1c:ca:46:
                    17:87:07:1a:23:08:e3:c9:67:cf:09:3a:dd:c1:40:
                    93:d9:5a:d8:77:66:47:f2:30:cb:1a:b9:53:15:ec:
                    37:3d:3b:08:d0:af:3e:d1:b8:36:2a:1a:f0:e3:6a:
                    8c:6b:78:98:f3:7f:d1:7f:96:51:8d:54:c3:63:d7:
                    77:88:57:7d:56:ae:3a:c9:eb:aa:72:1c:f6:9b:29:
                    a5:18:35:d9:52:5c:b3:7c:ac:69:66:b7:ae:f2:a2:
                    64:4b:b1:d3:3c:a2:38:08:06:c8:b7:3c:1c:ba:28:
                    dd:b0:0f:64:33:96:2b:a7:4b:fd:78:b9:fb:97:0d:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A5:C9:05:10:1F:FB:06:55:17:96:3F:1D:05:43:E2:4D:8F:34:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bd36c92-62e4-3e35-864e-61b47d2390eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:12:31:97:63:c0:69:aa:9b:e8:ea:2a:ab:5c:0e:88:16:a7:
         1f:c7:6e:5d:14:24:e6:e3:aa:f4:32:89:56:fb:9e:d4:97:fc:
         03:2c:d0:2d:cd:2d:f2:fe:da:5a:16:cf:64:cb:71:12:26:f6:
         66:74:64:85:e2:38:bf:bf:69:e1:20:ed:b9:34:7b:d0:03:ab:
         fa:97:77:2a:26:f5:aa:d1:72:62:c0:c5:ec:81:11:7f:ba:2a:
         14:53:90:99:a9:c0:51:e3:8e:c2:f2:71:aa:0f:ad:7c:7d:55:
         35:be:4c:ab:fd:c6:df:6c:7e:8d:0b:60:2c:2e:fa:66:e0:57:
         70:35:08:4f:f1:37:ae:32:24:0d:f1:4e:83:5b:46:53:ba:b8:
         66:ef:8f:9a:49:16:e8:17:31:fc:75:64:d0:29:df:f3:70:33:
         48:9d:af:99:5d:7b:7e:c1:0d:ed:9f:2b:79:2a:5d:57:25:c3:
         a1:a3:e3:b4:22:10:34:08:37:4e:80:77:25:19:87:20:b6:5b:
         2f:64:f0:e5:62:55:02:49:df:9a:20:aa:1d:06:3d:44:76:0c:
         57:b2:75:05:57:49:89:19:a6:b8:12:29:cb:43:e5:c4:1a:d6:
         5c:47:bc:16:07:33:84:bf:7c:36:a8:51:04:9e:d2:d3:94:3f:
         2d:1e:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----