Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60578722-687b-3c60-b17a-5768e21a8414.roa
File:                     60578722-687b-3c60-b17a-5768e21a8414.roa (raw, json)
Hash identifier:          qdVwkETq3QeShkSZ9913sT1QDe7QMzFgc6cp92WrHfA=
Subject key identifier:   53:B0:B0:4C:DF:1E:53:B6:EE:73:D2:10:B6:15:C8:32:1E:D6:82:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584510D87E04CDA70FF19CE01F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60578722-687b-3c60-b17a-5768e21a8414.roa
Signing time:             Fri 01 Mar 2024 18:35:13 +0000
ROA not before:           Fri 01 Mar 2024 18:35:13 +0000
ROA not after:            Thu 30 May 2024 17:35:13 +0000
asID:                     834
IP address blocks:        166.0.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 20:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:d8:7e:04:cd:a7:0f:f1:9c:e0:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  1 18:35:13 2024 GMT
            Not After : May 30 17:35:13 2024 GMT
        Subject: CN=d7412bf5-6c08-40a2-bd6c-9cc9dc63077f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:d7:89:4c:d6:98:e1:6b:8f:1f:5b:d4:f1:
                    00:7f:55:7b:57:12:a6:4d:f4:41:ec:58:51:fd:89:
                    23:36:fe:ce:8e:aa:f3:5f:33:86:cc:c2:c7:35:37:
                    8f:58:2a:e4:b1:99:f9:c7:a7:8d:9b:4e:83:22:92:
                    82:8d:ce:39:59:a0:72:9a:71:e1:45:a2:c3:73:01:
                    28:45:e9:10:1c:a6:5e:28:41:9e:ec:39:75:d5:bf:
                    13:85:e9:17:97:56:4a:cb:f6:00:a1:03:e6:ff:28:
                    e3:d5:7b:7b:1b:19:91:34:83:87:42:a1:e3:13:a2:
                    50:c3:55:b5:ca:d7:50:6f:21:e9:19:70:47:70:dc:
                    a0:b2:bc:74:04:94:01:28:14:28:3a:f6:fe:3a:9f:
                    bf:a1:b9:c9:b4:76:ae:86:06:6a:35:b6:db:e3:a2:
                    b5:13:4c:8c:dd:5a:3c:2a:1d:27:a7:ed:35:88:39:
                    d9:19:12:97:0d:8e:55:ce:d8:77:2d:c0:ce:4e:a7:
                    a9:7d:b4:e5:54:7f:e9:5d:62:bd:b6:3b:84:72:6a:
                    02:78:e2:40:5b:21:ce:93:4c:a7:48:b8:fa:ca:72:
                    1c:32:fb:d9:41:83:40:41:ad:de:98:a8:20:28:c9:
                    dc:f8:18:a9:b8:35:40:be:d8:fd:92:27:87:1b:b7:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B0:B0:4C:DF:1E:53:B6:EE:73:D2:10:B6:15:C8:32:1E:D6:82:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60578722-687b-3c60-b17a-5768e21a8414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:27:b6:3e:6c:43:60:4c:9c:71:43:de:3d:3d:86:87:a0:
         b2:78:5f:63:5d:57:54:16:7b:74:73:db:77:8b:3f:39:ab:3e:
         51:d1:55:a8:00:9c:3c:ea:99:6c:45:e3:2a:ad:b4:84:50:cd:
         99:ea:c5:5a:d3:da:15:54:c1:e0:1d:14:90:65:f0:e2:21:19:
         f3:7b:d9:36:d3:74:b6:7e:b4:a5:f7:1f:eb:36:6c:ff:7f:8c:
         f2:8c:c0:79:dc:f4:a8:56:7c:32:42:e7:75:3d:0e:a6:02:ed:
         48:9a:9b:0d:b1:87:fd:74:24:38:33:78:0f:96:1a:a5:fc:22:
         ad:74:57:73:b5:a9:89:d5:04:51:b1:1a:25:4f:e8:c7:36:72:
         78:bc:a8:34:ee:d3:3f:da:fc:c6:ce:ea:ea:5c:a6:26:39:93:
         3d:76:b8:b7:0c:7e:40:16:a5:19:1c:97:1e:14:32:5a:8b:df:
         12:08:0f:03:63:40:96:39:14:1e:c4:28:bd:12:33:1d:f7:e0:
         27:95:c1:5a:55:2e:68:61:8e:5d:20:3f:d2:f0:b7:6e:03:e7:
         31:54:79:f2:7f:f1:92:4c:d9:d0:90:22:c2:08:0f:57:c3:82:
         a7:06:9b:c9:3e:9e:ee:17:3d:23:ea:8a:63:18:e5:98:cf:27:
         29:8b:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----