Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a16fea9-1404-314a-8c69-1ab4a434bad2.roa
File:                     5a16fea9-1404-314a-8c69-1ab4a434bad2.roa (raw, json)
Hash identifier:          1Jn9l1mwPhbi5kpHQbfxzl0gI2J4zt02S8ICwuPHyGQ=
Subject key identifier:   3A:50:2E:44:F2:5A:12:97:06:D1:23:87:80:FF:7E:A2:EB:92:B6:72
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858424B8E2DA8421D6885205F2220
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a16fea9-1404-314a-8c69-1ab4a434bad2.roa
Signing time:             Wed 21 Jun 2023 16:57:22 +0000
ROA not before:           Wed 21 Jun 2023 16:57:22 +0000
ROA not after:            Tue 19 Sep 2023 16:57:22 +0000
asID:                     51722
IP address blocks:        166.1.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4b:8e:2d:a8:42:1d:68:85:20:5f:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 21 16:57:22 2023 GMT
            Not After : Sep 19 16:57:22 2023 GMT
        Subject: CN=23e4bc1b-5848-429b-98ae-0ae66ac6aa7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:aa:b7:dc:af:6e:f1:0c:de:cd:d8:d5:34:
                    0c:7a:0c:0b:a4:28:ae:b6:1e:29:3a:cf:de:7a:4d:
                    30:77:b6:6d:62:d3:f2:aa:a1:a2:36:0f:c5:7e:36:
                    1b:1f:dd:c9:23:a4:5f:e8:53:fa:49:55:1a:e5:98:
                    50:9f:cc:a3:74:c6:2f:e4:70:fa:c9:43:e8:be:2c:
                    84:48:a4:b4:0c:73:1a:1b:7a:58:59:ae:c7:98:c9:
                    a8:33:f7:2c:1a:cd:88:0c:63:ae:2c:37:d3:b7:b5:
                    20:73:5a:c9:73:e3:bd:8c:ad:ad:9e:de:d6:53:f8:
                    e7:d0:9e:52:42:45:c3:a2:22:da:33:9a:8c:36:ac:
                    50:d8:00:33:c2:c3:99:e0:e8:c3:ee:e5:47:34:13:
                    b5:a0:5d:a7:5a:93:b9:a6:d5:be:10:96:60:15:51:
                    60:b5:dc:5a:06:48:82:5d:0f:48:a7:37:81:ac:b7:
                    f1:12:7c:8a:d5:12:ea:e1:09:c2:dc:e7:f3:b5:be:
                    8a:2f:8d:5d:3d:ed:cc:59:ab:22:54:71:9f:f2:a9:
                    c4:38:58:1b:bd:1a:c0:d8:39:c7:54:50:d2:53:f5:
                    23:5d:03:c7:8e:e1:76:a8:d5:66:85:1d:e8:be:1d:
                    55:52:42:78:e8:47:41:ee:9b:10:61:04:fb:51:2f:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:50:2E:44:F2:5A:12:97:06:D1:23:87:80:FF:7E:A2:EB:92:B6:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a16fea9-1404-314a-8c69-1ab4a434bad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:79:25:76:e0:70:40:a0:f3:25:60:ab:e7:eb:96:66:c3:
         38:ef:87:0f:7e:57:88:fc:08:11:ce:54:ea:f2:03:93:81:e0:
         1c:c2:6e:93:c7:9e:e0:48:ca:09:00:28:5e:9d:4e:db:ea:30:
         5c:cb:6c:02:dd:6e:29:04:38:11:fa:f5:80:d0:c9:c6:dc:44:
         8f:72:0b:fd:c5:2e:e7:46:d1:39:84:c6:c3:44:6a:54:99:3e:
         8d:f9:13:e7:cf:b1:10:df:0d:59:43:14:b1:2b:a8:78:25:a1:
         96:ad:92:97:fd:49:00:4b:33:c4:23:59:f0:c5:a1:e3:b7:45:
         df:ce:ef:ac:a6:a4:ec:26:c5:fc:ff:10:0c:ce:11:08:83:b4:
         36:1a:7a:8a:8b:46:60:b4:ab:84:6b:e0:8b:ac:71:e7:f2:d9:
         bb:1f:d8:f6:2f:b4:d7:5e:bb:75:a1:d5:f5:63:f1:70:bc:35:
         1d:b0:fa:94:7c:e6:45:5f:d4:d7:16:11:60:f3:17:5a:35:f1:
         3e:d5:fd:a1:a9:0c:ff:5d:90:19:a5:45:db:98:48:18:dc:6e:
         5e:db:63:4e:96:a1:46:33:80:6c:5b:96:67:57:7f:ed:61:dc:
         fc:a8:b7:cf:56:c7:1e:61:ea:c9:88:a7:81:51:b9:5b:55:d3:
         07:88:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 23:42:54 2023 by rpki-client on console-fra.rpki-client.org