Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f00da87-c935-3b54-a699-ad813fc61342.roa
File:                     5f00da87-c935-3b54-a699-ad813fc61342.roa (raw, json)
Hash identifier:          JJw5fILcih8cgbQXcl6siUzi0XWSkI7ivXYY0oGpIbs=
Subject key identifier:   D6:6C:B0:98:A2:32:44:CF:62:7A:73:77:69:69:B8:4D:37:65:AC:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841ECE9435A45E66E1A869BDEE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f00da87-c935-3b54-a699-ad813fc61342.roa
Signing time:             Thu 18 May 2023 19:19:05 +0000
ROA not before:           Thu 18 May 2023 19:19:05 +0000
ROA not after:            Wed 16 Aug 2023 19:19:05 +0000
asID:                     43260
IP address blocks:        166.0.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ec:e9:43:5a:45:e6:6e:1a:86:9b:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 18 19:19:05 2023 GMT
            Not After : Aug 16 19:19:05 2023 GMT
        Subject: CN=632ea2b4-37e6-4a81-8d0d-c5047024ed03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:5c:ea:64:a7:f6:57:c1:c2:86:db:40:6f:
                    ea:2e:71:22:d8:6e:31:7d:24:c4:6c:2c:ef:e9:97:
                    a3:24:0c:c9:0c:0b:9d:3a:c5:74:c3:61:65:05:26:
                    97:bc:e1:47:24:1d:2d:ac:c1:20:84:25:a5:55:0c:
                    c2:b1:e4:aa:c5:b8:bf:4c:6c:68:2c:99:bc:d9:ef:
                    3b:7e:fe:af:d5:01:50:99:59:68:2b:ac:9d:ab:98:
                    d1:87:5e:43:18:bf:69:cd:ad:69:a7:ad:17:34:62:
                    91:c0:ae:38:d9:1d:5b:43:d9:42:4d:a4:aa:1e:e2:
                    25:f2:88:b6:ee:87:24:b8:14:a0:9e:2f:d0:d5:2e:
                    d7:33:ff:af:76:d3:ec:72:33:e9:26:ce:9d:6a:fb:
                    66:34:d1:01:24:8e:46:4d:b9:04:a4:38:fd:42:4a:
                    f3:03:df:3f:14:60:72:2e:10:0e:26:9d:98:72:89:
                    43:a4:7b:a6:81:2a:5b:b2:c7:b6:b1:5a:af:56:68:
                    f9:cb:f2:62:e8:bc:ea:75:46:c6:44:bb:b6:72:8e:
                    1f:0f:3e:37:06:44:da:89:46:19:37:38:c3:9a:e0:
                    70:b6:19:d8:01:ac:1e:3c:00:27:57:6f:91:05:f1:
                    79:39:d4:d1:c9:28:94:2c:2a:6b:c3:fa:79:ee:27:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:B0:98:A2:32:44:CF:62:7A:73:77:69:69:B8:4D:37:65:AC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f00da87-c935-3b54-a699-ad813fc61342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:8c:31:75:c4:b1:21:d8:99:91:c6:7c:f8:4c:94:42:8a:
         0f:f7:7e:9c:e0:26:de:e1:17:53:95:48:3d:9c:f7:66:d2:30:
         bd:e3:05:38:cd:55:73:a0:a1:db:65:42:70:cf:c0:5b:7c:3f:
         90:d1:50:e9:38:e4:31:29:c2:b8:28:0d:fc:b3:b3:08:6a:10:
         96:41:03:86:9a:55:6e:fc:ac:5f:6a:92:0e:5e:fd:55:f9:98:
         5b:9a:44:b0:fd:0a:72:d8:13:d2:ec:8f:04:50:da:13:41:79:
         69:07:3d:2b:e8:39:0d:92:e5:1a:62:cb:14:55:73:5e:f5:05:
         cd:d2:86:00:53:b6:de:80:e1:11:31:b4:6f:e7:d5:56:98:47:
         9c:48:76:62:9d:6c:9f:86:f4:82:03:23:73:02:9b:01:36:ae:
         66:8f:7f:f8:84:30:5e:bb:52:ca:02:c6:0d:74:e6:3d:ce:be:
         5d:9f:ab:bd:2f:33:fc:4b:47:91:d4:37:c9:d0:aa:cf:82:4b:
         c4:42:0b:a2:fd:78:e0:4b:dd:df:63:51:79:ca:45:35:55:9b:
         e6:ce:12:82:36:85:47:bc:ae:74:61:b8:b4:fc:f0:74:eb:9a:
         74:81:12:b7:86:38:f0:05:8f:05:44:9f:35:9e:a4:49:f9:cd:
         92:7a:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----