Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52fe7631-8af9-3ec1-be42-89b482fa9263.roa
File:                     52fe7631-8af9-3ec1-be42-89b482fa9263.roa (raw, json)
Hash identifier:          EtTw5v5vDpYjAKm6BGmhCA0+pbIaRTQwhT+5vIZWUDQ=
Subject key identifier:   0C:D1:DA:6C:A4:87:90:13:8D:16:82:BC:48:09:9C:4B:2C:E0:B1:22
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446F3D4D6ADC3D62C90D300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52fe7631-8af9-3ec1-be42-89b482fa9263.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Wed 02 Aug 2023 14:07:52 +0000
asID:                     135752
IP address blocks:        108.165.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:f3:d4:d6:ad:c3:d6:2c:90:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  2 14:07:52 2023 GMT
        Subject: CN=0b491ee8-02c6-4219-a744-99a0cf49c193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:ba:b9:65:ba:26:3d:88:12:9d:99:a2:b5:
                    3f:63:60:0b:df:0b:9b:09:1f:c7:28:fe:58:43:ce:
                    77:c8:c4:ab:13:0e:99:76:50:80:91:c9:9a:42:1f:
                    f7:19:00:3e:bf:e5:14:1d:f3:7f:ba:60:ee:c9:4b:
                    da:b8:5b:b3:40:f2:1a:6f:fc:8c:02:67:71:7b:ee:
                    b3:c4:da:fc:3f:a3:24:1a:7a:04:f8:33:c5:a8:fc:
                    2a:b0:41:6c:42:ae:a3:ea:ee:52:10:1d:37:43:9e:
                    a5:49:8a:63:a2:48:9c:8c:d0:5a:b6:9f:c5:42:f1:
                    9e:b6:dd:42:56:0b:c1:29:5f:18:0f:bf:56:0f:95:
                    70:f8:f2:46:ef:49:bf:e0:30:b8:cf:3d:b5:f4:31:
                    80:87:75:f7:c8:e1:1e:77:b8:b4:f3:56:c2:df:eb:
                    03:ef:9e:50:57:86:2e:cd:e1:27:ff:d6:00:aa:30:
                    bf:5f:04:ab:4b:80:bf:b6:57:14:8b:6c:aa:12:6b:
                    c5:d5:04:bc:9c:1c:d0:6a:e5:f3:b5:00:28:4c:47:
                    25:08:df:94:e1:a2:6e:9b:ad:69:6f:26:42:5b:01:
                    e0:37:1f:93:19:06:4d:48:69:23:24:99:05:00:ee:
                    a2:7a:76:54:68:c6:08:58:7c:24:91:cf:1c:03:d9:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:DA:6C:A4:87:90:13:8D:16:82:BC:48:09:9C:4B:2C:E0:B1:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52fe7631-8af9-3ec1-be42-89b482fa9263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:19:fa:ae:3d:a2:9f:64:5c:a8:5a:d9:5f:e4:3c:6b:62:
         82:b8:2b:c4:0d:99:61:08:c8:77:69:00:e5:61:ee:a3:2d:ba:
         59:f4:15:e7:06:22:3e:b7:45:7d:1d:e8:0a:a2:98:45:dd:6f:
         92:68:f7:02:20:e9:78:f6:7c:93:fe:46:ea:c5:ac:83:2f:63:
         fc:20:e7:86:f5:76:1b:c3:a0:fc:0d:8c:5f:fc:b8:1a:6a:d3:
         a0:47:82:1d:5c:6b:37:16:ca:13:c7:96:62:41:20:d9:35:8c:
         76:5e:8e:b1:d7:d4:8f:65:e3:ce:28:d5:9c:44:ee:2e:2a:80:
         57:b4:fd:f3:d9:d3:ad:3d:b3:5f:f3:3e:ec:87:41:7b:2b:61:
         ee:14:b2:a3:09:aa:1a:f8:63:c7:46:af:f3:b7:4b:44:fa:8c:
         4a:58:80:32:6b:99:e8:fb:5f:9b:34:34:d3:3f:5d:b8:bf:80:
         4b:ec:1b:aa:3b:93:58:fe:99:9c:4e:75:40:20:f7:71:b0:e0:
         6b:33:58:4c:cd:2e:62:5f:b3:a4:f8:e6:74:16:2a:33:0f:17:
         65:6b:27:7e:d5:36:52:a4:01:36:9e:8f:2c:3a:78:c6:42:ee:
         c3:71:0a:6e:c4:c7:20:91:2c:7b:f3:ed:00:75:72:9d:69:33:
         09:32:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----