Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f940471-1bf7-3d9c-b21b-d88f17ce5cab.roa
File:                     4f940471-1bf7-3d9c-b21b-d88f17ce5cab.roa (raw, json)
Hash identifier:          bv+vdwknJ39nvWOu9iArBRjpoauJkJhSVjmjXnlyheo=
Subject key identifier:   45:74:F5:26:66:BD:68:60:6C:AD:4F:0B:4B:3B:8D:E4:C8:42:CA:77
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842DC8D709BFB3CCD5371730100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f940471-1bf7-3d9c-b21b-d88f17ce5cab.roa
Signing time:             Sat 12 Aug 2023 15:28:05 +0000
ROA not before:           Sat 12 Aug 2023 15:28:05 +0000
ROA not after:            Fri 10 Nov 2023 16:28:05 +0000
asID:                     211014
IP address blocks:        166.1.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:dc:8d:70:9b:fb:3c:cd:53:71:73:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 12 15:28:05 2023 GMT
            Not After : Nov 10 16:28:05 2023 GMT
        Subject: CN=696e4c8b-2c61-4675-ae45-2cddfc1877f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:ad:91:e8:6b:8d:22:be:05:fc:87:67:26:
                    3c:57:13:55:3f:e1:aa:63:fe:7d:bf:33:5a:67:14:
                    42:00:53:5c:fd:ab:e7:8d:20:6f:af:04:52:22:89:
                    fa:19:6b:f1:c6:21:37:6f:3f:37:c8:82:d1:cf:3f:
                    13:c3:76:a2:80:2b:1d:d8:17:12:4a:41:65:bf:e7:
                    d0:02:f5:c4:d2:ec:e6:17:cc:65:64:4a:cb:d6:3f:
                    bd:1b:7a:86:27:00:c1:45:07:46:6b:22:c2:82:bc:
                    4c:df:f9:e0:dc:a0:58:59:a4:80:32:0c:56:f4:19:
                    e8:ff:49:1a:cc:f6:92:2a:48:0b:3f:6b:b9:6c:68:
                    16:b7:94:ab:c2:1d:d3:a9:46:1e:11:24:23:28:6b:
                    35:18:a0:d0:28:10:67:f8:2e:26:e9:bc:fc:97:f3:
                    b8:11:4b:ed:4c:08:aa:2b:49:ea:4d:73:a7:2d:2f:
                    69:98:c9:5b:af:a6:47:36:a8:f1:29:e2:00:91:8a:
                    97:01:28:c1:4b:2d:89:c3:e3:1a:d8:76:fc:34:8e:
                    b5:c2:30:a9:07:9a:d8:bf:c1:c5:0c:b7:ab:22:52:
                    e3:e8:9b:20:bb:ce:43:0b:06:e7:af:df:72:7f:62:
                    75:62:1e:b8:44:28:4d:e4:45:da:68:82:21:6b:22:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:F5:26:66:BD:68:60:6C:AD:4F:0B:4B:3B:8D:E4:C8:42:CA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f940471-1bf7-3d9c-b21b-d88f17ce5cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:67:27:dd:e5:8c:77:0c:be:c4:41:bd:10:28:14:31:df:e8:
         2f:96:08:1a:3e:2a:a7:c8:0f:5f:ff:f7:07:3e:89:27:b3:53:
         7e:80:23:55:0c:77:ab:29:15:f6:b1:ae:4d:1f:47:c7:aa:38:
         18:89:f0:d8:20:bb:40:74:68:41:fa:a8:2c:34:56:7b:44:6d:
         3f:15:36:2d:f9:58:89:a4:28:73:a9:08:4b:8f:ea:4d:9f:5a:
         62:8a:3e:d7:d7:e3:37:77:f3:34:4a:c4:c6:b9:8a:8a:47:a9:
         8c:28:43:fa:ea:71:ae:2f:bb:26:49:de:5a:86:b3:51:e8:6b:
         41:8f:1b:ec:c5:a1:36:05:50:70:fe:52:81:03:71:72:cf:66:
         3c:df:e1:6a:b6:43:dc:27:c2:32:39:4d:d8:b4:33:21:ae:39:
         a8:6c:ec:b0:59:6c:69:b8:d1:0c:04:4b:55:bb:dc:19:25:51:
         51:1b:23:66:b8:cb:04:60:a5:0e:19:e1:b0:72:d2:83:b2:0b:
         c9:30:46:f8:c9:4e:32:97:95:a3:ed:b8:96:a7:ae:ea:93:6a:
         69:84:9e:17:15:0d:49:11:29:63:53:66:f5:e2:96:7e:9b:4f:
         62:9f:62:82:03:81:38:c5:76:5e:49:f3:8a:fa:34:10:eb:c4:
         19:af:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----