Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e269e05-2de4-3ce0-9724-3cdb2dd7bf8a.roa
File:                     5e269e05-2de4-3ce0-9724-3cdb2dd7bf8a.roa (raw, json)
Hash identifier:          RVxby7o+bt9eS1eFwlCU59WnD1cNCgzFEUVSJZbjeyk=
Subject key identifier:   CC:41:59:50:4A:49:5F:F7:B9:75:D8:66:C5:15:D9:8D:E0:AD:15:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843A27ACC61E314152D97B8FA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e269e05-2de4-3ce0-9724-3cdb2dd7bf8a.roa
Signing time:             Sun 22 Oct 2023 13:00:21 +0000
ROA not before:           Sun 22 Oct 2023 13:00:21 +0000
ROA not after:            Sat 20 Jan 2024 14:00:21 +0000
asID:                     13876
IP address blocks:        166.0.22.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a2:7a:cc:61:e3:14:15:2d:97:b8:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 13:00:21 2023 GMT
            Not After : Jan 20 14:00:21 2024 GMT
        Subject: CN=38766cfe-0dc3-4aec-829d-f5349a806fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:7d:be:6d:f7:42:7b:94:ca:ce:ca:81:87:
                    31:fb:35:09:92:07:77:24:f3:fc:a0:76:44:f8:57:
                    b5:6d:e0:da:24:c1:e1:54:9e:9e:f9:85:56:90:d9:
                    ca:a5:38:d0:f1:f2:ec:20:ec:6e:6b:b6:a5:af:cd:
                    8f:58:90:28:c3:2e:01:9a:6c:c6:82:80:ce:0f:9a:
                    a6:84:37:b9:02:0c:54:4f:4f:47:34:78:cf:61:35:
                    32:3a:58:cc:95:1c:be:54:78:eb:d0:cc:80:4a:d2:
                    1a:c2:92:7c:fb:2e:46:c0:c6:75:9d:d8:fb:cd:59:
                    2c:d2:9f:53:5b:10:6c:04:19:2b:dd:8d:a3:8a:c2:
                    f8:4e:fc:22:d0:f1:bf:b1:93:b7:44:4f:c3:21:fc:
                    40:cd:34:a9:42:f6:94:da:67:df:60:97:d6:b9:2e:
                    9e:57:c3:3f:e1:04:ed:1c:05:f2:07:dd:e8:96:15:
                    98:8f:2e:8e:1e:c9:57:c4:6a:a6:d3:73:ff:47:87:
                    6e:c7:92:02:6e:f7:78:b7:30:51:56:ce:22:a8:b6:
                    b1:77:1a:bf:a0:c5:03:29:23:7a:4f:fb:02:f1:a0:
                    ff:19:09:57:c0:ee:f6:d5:33:95:30:30:63:30:ca:
                    00:c9:3a:37:82:f9:2c:be:69:79:fd:ee:9c:00:e9:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:41:59:50:4A:49:5F:F7:B9:75:D8:66:C5:15:D9:8D:E0:AD:15:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e269e05-2de4-3ce0-9724-3cdb2dd7bf8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:36:5b:53:12:95:13:5e:4e:bd:c7:5c:d2:af:a8:48:e6:
         72:24:e6:26:cd:97:d2:9c:4e:68:b1:43:60:42:9d:8e:71:d5:
         82:34:a0:b9:fd:92:01:14:f0:c5:49:2d:f8:1c:f4:ca:69:17:
         e9:92:1c:48:44:85:74:f7:cb:23:6b:99:c1:a4:f2:7b:42:2b:
         89:44:c8:2f:dd:a2:7b:c9:32:3e:34:b2:6b:5e:0d:ef:fe:b4:
         71:bc:e7:a6:97:9b:bc:5b:7e:36:32:2a:41:5a:ea:e0:86:2b:
         a0:d1:98:20:6c:36:07:a0:ba:d0:dd:13:7f:7e:04:ec:f4:ea:
         19:0f:f8:7a:b4:9b:96:de:80:cc:b6:81:17:01:2f:0e:34:31:
         2e:cc:da:1d:30:f5:39:26:45:78:19:42:c1:a8:2f:33:e9:cf:
         bf:b8:ac:2c:53:bf:00:dd:1e:51:5e:7c:50:34:5f:e9:30:2e:
         65:e8:d9:11:ba:b2:53:86:bd:b4:80:bf:fd:53:c0:c6:dd:4d:
         c0:9f:94:5d:67:de:4c:0b:81:ea:71:83:16:d9:44:f4:3d:48:
         26:50:45:de:73:bf:c3:bf:b9:22:15:04:cf:97:91:0d:73:85:
         96:70:d1:cd:e9:11:5d:51:6b:b9:6d:48:5f:38:e1:b7:d3:df:
         0a:43:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----