Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5062a1be-b6dc-3c02-9926-dc9bc85c1268.roa
File:                     5062a1be-b6dc-3c02-9926-dc9bc85c1268.roa (raw, json)
Hash identifier:          cUygAPZKQ5Jgqhf1rJP5aZkB67dOPvZqzE9L2jcpHKU=
Subject key identifier:   4D:ED:73:3A:38:E7:5F:C8:0A:74:BD:20:11:01:E1:90:7C:F4:9C:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858424603D2BD4C07A36FAF5B1F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5062a1be-b6dc-3c02-9926-dc9bc85c1268.roa
Signing time:             Mon 19 Jun 2023 17:19:33 +0000
ROA not before:           Mon 19 Jun 2023 17:19:33 +0000
ROA not after:            Sun 17 Sep 2023 17:19:33 +0000
asID:                     198802
IP address blocks:        166.1.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:03:d2:bd:4c:07:a3:6f:af:5b:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 19 17:19:33 2023 GMT
            Not After : Sep 17 17:19:33 2023 GMT
        Subject: CN=3bdcff26-751d-4a67-ba2d-76d00dab74e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:e6:f2:a1:85:98:e8:c2:53:1f:37:f3:f6:
                    95:1c:e6:15:ac:58:09:cc:d6:4f:44:8b:a5:12:7f:
                    d4:ad:d2:8a:49:d0:34:8d:4b:7a:2c:d6:9b:06:c9:
                    c9:51:88:2f:58:be:4e:e4:5f:b6:40:a3:98:05:35:
                    5e:10:9d:02:a5:73:61:c6:28:58:42:37:3a:de:9c:
                    bb:72:6f:13:b8:1b:cf:c3:d9:ac:f0:97:4f:05:37:
                    ea:a0:f9:d4:a4:8c:87:75:13:4b:e8:65:42:ae:81:
                    a1:b5:84:e9:1b:6d:f4:68:18:69:90:57:19:49:b4:
                    d0:65:9e:80:b0:78:e4:92:e9:0f:d7:10:91:88:1e:
                    7e:6d:68:93:4c:e2:8e:8d:71:a5:d3:e0:36:ed:9e:
                    7a:6c:27:d1:7e:90:24:ed:e4:16:5c:f2:cb:f7:0e:
                    b8:5b:07:fc:b4:ce:d7:a6:87:71:0c:b1:ec:63:39:
                    f3:54:dd:4b:ed:ab:f1:4c:27:18:e7:1f:f9:60:48:
                    5a:a3:ad:21:fe:f7:c9:c4:83:71:f1:6f:99:70:70:
                    1f:de:c9:a6:1c:56:4a:ad:a8:27:36:95:5f:b0:53:
                    9f:26:b2:1f:7b:d8:45:c6:02:c5:15:ca:75:26:18:
                    09:56:a0:4f:e8:c0:03:7a:46:a5:fa:cc:87:2a:e7:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:73:3A:38:E7:5F:C8:0A:74:BD:20:11:01:E1:90:7C:F4:9C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5062a1be-b6dc-3c02-9926-dc9bc85c1268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:d9:4b:00:c7:3e:34:e2:67:5c:df:5f:09:67:84:b3:4e:
         cf:ed:30:4d:26:fe:db:04:c5:32:e7:ad:9e:47:eb:7e:3d:42:
         77:cf:0b:5e:42:77:4a:e7:54:e5:9a:44:55:31:05:e8:23:c0:
         b3:78:df:d7:a3:c6:82:df:33:30:df:04:2c:81:06:c1:97:9e:
         a7:1e:80:07:6f:c6:92:e7:77:9f:2f:2c:fd:cf:8e:00:d0:b2:
         e2:59:6f:55:ac:d6:21:67:3f:18:cb:60:46:bb:e8:41:95:c7:
         7e:da:f9:99:46:29:77:7e:89:72:d9:5a:c2:c6:f7:af:03:45:
         bb:d3:50:21:1e:51:6f:64:d1:0e:87:07:c9:39:73:24:a4:d1:
         40:6b:21:fd:6c:f1:1c:e4:2d:74:d5:f5:14:bf:36:10:f3:4a:
         5d:47:e6:94:a7:fe:6f:6b:5f:ad:6e:55:e1:a4:56:6a:20:9d:
         11:f2:9d:e2:25:4c:f8:44:a9:1b:01:ae:0d:1a:46:a9:a4:d1:
         ff:9c:27:37:e0:8e:12:93:6a:d9:1c:5e:0f:df:8d:ef:66:ce:
         f7:f9:f6:ed:f3:ff:d8:3c:66:60:29:33:30:6d:4d:a2:24:b0:
         40:8a:09:51:91:b8:22:15:ba:1f:e0:71:8b:0b:f2:90:ac:d1:
         b8:d0:dd:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJGA9K9TAejb69bH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxOTE3MTkzM1oXDTIzMDkxNzE3MTkzM1owLzEtMCsGA1UEAxMk
M2JkY2ZmMjYtNzUxZC00YTY3LWJhMmQtNzZkMDBkYWI3NGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf/m8qGFmOjCUx838/aVHOYVrFgJzNZPRIul
En/UrdKKSdA0jUt6LNabBsnJUYgvWL5O5F+2QKOYBTVeEJ0CpXNhxihYQjc63py7
cm8TuBvPw9ms8JdPBTfqoPnUpIyHdRNL6GVCroGhtYTpG230aBhpkFcZSbTQZZ6A
sHjkkukP1xCRiB5+bWiTTOKOjXGl0+A27Z56bCfRfpAk7eQWXPLL9w64Wwf8tM7X
podxDLHsYznzVN1L7avxTCcY5x/5YEhao60h/vfJxINx8W+ZcHAf3smmHFZKragn
NpVfsFOfJrIfe9hFxgLFFcp1JhgJVqBP6MADekal+syHKucalwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3tczo451/ICnS9IBEB4ZB89JzCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTA2MmExYmUtYjZkYy0z
YzAyLTk5MjYtZGM5YmM4NWMxMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5X2UsAxz404mdc318JZ4SzTs/tME0m/tsExTLnrZ5H6349QnfPC15C
d0rnVOWaRFUxBegjwLN439ejxoLfMzDfBCyBBsGXnqcegAdvxpLnd58vLP3PjgDQ
suJZb1Ws1iFnPxjLYEa76EGVx37a+ZlGKXd+iXLZWsLG968DRbvTUCEeUW9k0Q6H
B8k5cySk0UBrIf1s8RzkLXTV9RS/NhDzSl1H5pSn/m9rX61uVeGkVmognRHyneIl
TPhEqRsBrg0aRqmk0f+cJzfgjhKTatkcXg/fje9mzvf59u3z/9g8ZmApMzBtTaIk
sECKCVGRuCIVuh/gcYsL8pCs0bjQ3ds=
-----END CERTIFICATE-----