Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6274fb50-6a75-3416-978f-f5137f34357d.roa
File:                     6274fb50-6a75-3416-978f-f5137f34357d.roa (raw, json)
Hash identifier:          91VymajYw4m78y/ADMM3UQKR2aqor0UrRpLJpmRQqJs=
Subject key identifier:   F3:08:F7:49:50:EF:41:44:9C:7B:2C:19:C4:CE:B0:21:0B:4C:9A:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841F7D03709498EDD56E4366900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6274fb50-6a75-3416-978f-f5137f34357d.roa
Signing time:             Mon 22 May 2023 17:02:31 +0000
ROA not before:           Mon 22 May 2023 17:02:31 +0000
ROA not after:            Sun 20 Aug 2023 17:02:31 +0000
asID:                     397441
IP address blocks:        166.0.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f7:d0:37:09:49:8e:dd:56:e4:36:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 22 17:02:31 2023 GMT
            Not After : Aug 20 17:02:31 2023 GMT
        Subject: CN=d8aad79e-177f-4cf6-a058-3ef1d67a3308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:ce:b6:20:68:1d:fa:80:b7:08:31:4c:7f:
                    7f:8d:0a:79:c5:cf:b9:b0:7e:80:26:b9:82:92:30:
                    2d:92:75:09:a7:89:71:f0:54:a8:fc:2b:25:77:9d:
                    9d:f8:fa:ea:a1:2d:d5:4a:c4:a4:36:6f:f4:71:6a:
                    25:06:47:d4:54:23:31:a0:52:5a:e5:2a:c8:71:fb:
                    9f:b0:68:1d:40:29:d5:8b:03:fe:d4:26:12:d8:1f:
                    38:18:98:39:a9:fe:5e:64:ac:15:12:b0:90:57:a2:
                    f0:b5:eb:4c:e6:23:71:b5:91:ce:79:dc:f8:80:e1:
                    b5:f9:87:a3:bf:03:16:90:95:ea:b5:b9:f8:ba:73:
                    2c:3b:f5:c8:0e:d7:83:3f:be:9f:12:46:4b:43:b7:
                    5d:27:8f:8d:7e:ce:e0:49:8f:b3:4a:56:3e:1f:a6:
                    16:1d:e7:6f:af:46:51:99:92:6e:1a:fb:34:96:a0:
                    9d:56:27:df:99:0e:a9:5c:ee:c4:e8:1f:37:a5:bc:
                    f4:e9:71:1a:b7:3d:e6:58:80:ec:66:11:21:1c:f1:
                    21:ff:7d:dd:9b:de:47:5f:73:1d:bb:79:4c:7a:ba:
                    17:d0:5c:f7:9a:19:7e:e3:cb:fc:3d:f6:99:a4:a1:
                    1a:90:23:68:0a:7d:e1:5e:11:17:82:48:2d:ee:2d:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:F7:49:50:EF:41:44:9C:7B:2C:19:C4:CE:B0:21:0B:4C:9A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6274fb50-6a75-3416-978f-f5137f34357d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:ca:0e:e5:41:48:39:27:34:9d:00:8c:dc:4b:93:a7:dc:
         04:85:dd:14:84:f5:df:6f:fe:6b:f3:7a:91:cb:e4:ad:8c:cc:
         3e:36:e8:e3:53:57:63:f3:b2:f4:48:36:64:5a:82:b2:dd:9a:
         47:f1:20:27:67:c1:77:9f:59:d9:2d:70:39:a4:0c:37:a6:0c:
         f6:ed:62:c3:20:6f:48:70:ed:07:ec:54:99:55:1d:f7:40:a3:
         21:f5:b7:6b:80:cb:8f:dc:b4:5b:50:2f:ec:2c:d8:c5:fc:d7:
         c1:16:a5:3a:7e:cb:51:e0:fb:1f:ef:60:11:dd:d1:95:22:72:
         57:fa:a9:5c:9c:78:a1:ed:04:3d:95:77:85:e0:aa:f3:cd:1c:
         4f:6d:08:0f:93:da:df:0b:99:a2:68:8d:d8:14:df:54:dd:10:
         0d:59:db:ea:9f:60:8b:09:bc:9c:91:44:2e:6a:ad:29:07:f2:
         a9:9b:b8:70:a8:25:bd:cb:4d:f1:72:fb:f4:9b:bd:41:b8:ba:
         f5:fc:61:96:2e:36:44:d3:6f:bb:41:c7:e0:b4:7a:62:ec:44:
         d1:f9:b1:a3:f4:dc:c6:d5:e5:8c:f2:1e:1d:ad:94:8e:f9:d4:
         de:dd:f4:82:2a:2a:6f:3a:b4:6f:48:8e:ec:26:44:15:c1:f7:
         4b:5a:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----