Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/579100a3-f32b-3727-ad1d-1fd81a34fc6f.roa
File:                     579100a3-f32b-3727-ad1d-1fd81a34fc6f.roa (raw, json)
Hash identifier:          1t8jzBzXU2hy+3TnNpLXOOhSvVMrFabQonOTCGq2Kw4=
Subject key identifier:   5D:C5:2E:E7:8C:BE:89:E8:B8:38:C2:33:4A:52:E5:B9:84:12:58:68
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858453B7800EA56C3A6BD07FD7420
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/579100a3-f32b-3727-ad1d-1fd81a34fc6f.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     11798
IP address blocks:        166.1.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 22:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:78:00:ea:56:c3:a6:bd:07:fd:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=3e7db770-4b7d-41c1-8490-2f54ccb5ebd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:0b:04:6d:e4:cd:74:b3:42:92:e2:74:52:
                    5a:dd:1e:da:4f:06:32:1f:2c:dd:cf:de:ba:a6:99:
                    6f:98:a4:f7:5b:ed:7b:99:63:41:d6:83:48:18:cd:
                    ee:00:05:86:52:47:a6:cc:31:c2:25:94:e4:0b:92:
                    96:e6:72:cb:05:d8:a6:06:3e:d6:a9:43:9f:57:d7:
                    b5:a0:78:a0:65:cb:f3:d5:fb:91:f7:9b:b5:96:a6:
                    d3:a2:36:fe:9c:22:13:0f:2c:82:d5:b0:76:39:46:
                    57:31:4a:f2:59:07:4d:5a:fb:61:10:01:df:d5:2d:
                    e5:5d:b4:3e:dd:dc:6b:f0:36:7b:5e:33:97:76:92:
                    9d:1d:81:66:f5:b9:55:d0:6d:68:41:3d:d0:9b:ef:
                    b9:df:c6:3b:77:24:55:6a:5f:4e:d8:5d:1f:db:f5:
                    f6:ad:5d:4d:de:fa:e0:6e:af:fe:7f:c9:0f:12:f7:
                    c9:8c:61:c2:b1:43:e7:c8:89:70:8a:ee:1e:4e:ed:
                    a1:3c:41:48:a4:03:50:10:5a:fb:78:2c:50:00:75:
                    e6:ea:95:42:c2:40:ab:ae:22:7e:82:fe:bb:87:ff:
                    c8:ed:f7:29:0f:22:db:2d:9a:fd:d9:2e:de:5a:46:
                    1a:79:6d:81:c5:36:43:61:e5:d7:fe:da:48:e9:fa:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C5:2E:E7:8C:BE:89:E8:B8:38:C2:33:4A:52:E5:B9:84:12:58:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/579100a3-f32b-3727-ad1d-1fd81a34fc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8f:47:7b:9a:07:5d:0d:8f:5f:46:d6:97:4f:4b:05:d4:9d:
         38:fd:46:7c:d9:44:66:05:28:38:b7:44:0e:23:f7:a5:f3:9c:
         10:af:fd:04:1d:6e:9a:ba:f3:ee:c9:34:52:e9:a6:05:f2:33:
         49:f6:36:66:02:b9:06:2a:a4:0b:d0:f1:20:fe:7f:be:45:a9:
         82:f9:52:90:ba:76:5b:ea:8e:47:13:6d:68:f5:16:8e:49:c8:
         ad:f7:ad:60:f6:51:4a:8d:bc:ea:2e:67:cf:7a:44:be:d0:ca:
         3f:8e:b0:d9:4c:47:96:d9:2b:e0:03:cf:33:7e:31:c0:1f:33:
         3c:e3:ae:a4:9e:dc:ee:d4:65:dc:9c:cc:33:02:d7:ca:62:cb:
         b2:9f:58:f7:3e:04:db:c8:1b:74:ee:b0:8e:16:93:d0:47:2e:
         de:8a:cf:76:8b:fb:a1:51:5d:88:d1:78:b2:db:67:77:81:9d:
         14:56:58:70:2b:2a:35:23:d2:f6:f3:16:ff:b0:75:d5:99:8d:
         f9:51:c8:22:26:5e:3d:85:49:da:3a:b7:6b:82:1f:4b:ea:ae:
         3a:ed:43:76:de:79:67:5e:45:3d:23:78:43:89:86:b3:03:c7:
         8b:e1:2b:39:75:b8:8a:d8:07:b6:58:47:c6:3b:a4:02:b1:83:
         1a:5f:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----