Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64315ee5-f893-3cf9-a062-9ef98a227065.roa
File:                     64315ee5-f893-3cf9-a062-9ef98a227065.roa (raw, json)
Hash identifier:          JJ0+bHwtQ24m6U/x/p4itOwEGsYN8cEYPnjysVkBLJg=
Subject key identifier:   F3:6E:D1:62:14:68:48:32:78:16:CA:86:3D:0B:EB:FA:16:7C:7A:EC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842A7392298F832D2AA49EFB280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64315ee5-f893-3cf9-a062-9ef98a227065.roa
Signing time:             Mon 24 Jul 2023 13:00:19 +0000
ROA not before:           Mon 24 Jul 2023 13:00:19 +0000
ROA not after:            Sun 22 Oct 2023 13:00:19 +0000
asID:                     54600
IP address blocks:        166.1.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a7:39:22:98:f8:32:d2:aa:49:ef:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 24 13:00:19 2023 GMT
            Not After : Oct 22 13:00:19 2023 GMT
        Subject: CN=d08b7f6e-5fdb-43b9-9ef4-bff34bfce105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:4a:1d:73:d5:f4:82:6d:3a:5d:c6:f6:46:
                    50:93:84:56:aa:38:1d:14:35:d3:4e:3c:74:0f:3b:
                    17:e9:39:a8:c9:d5:3e:e8:04:73:53:46:5e:40:08:
                    56:23:73:9b:66:85:96:19:84:9a:19:09:f5:25:18:
                    e6:e0:ce:3d:64:71:d1:fa:2b:64:60:7c:ad:df:44:
                    83:89:85:ed:59:a7:de:40:3b:a8:7f:fd:47:57:ad:
                    95:27:91:be:7e:22:3b:3f:bc:be:31:81:a0:5d:03:
                    4b:f5:65:3d:d8:c4:d6:bc:5d:20:ac:90:05:e9:9c:
                    45:9c:38:c9:df:8c:38:4f:17:02:98:42:2d:0c:e2:
                    2b:ae:1a:14:50:29:cd:a8:51:97:86:4f:b5:f7:d1:
                    dc:26:d9:f8:6c:00:05:72:f8:8c:e0:11:1b:e9:13:
                    d9:26:95:bb:43:ef:f5:08:c6:47:71:a9:51:93:e1:
                    ea:a0:a3:dc:20:b2:ad:71:61:f1:62:93:54:79:95:
                    a0:c9:c7:df:94:d7:83:e1:45:d8:f3:13:a7:2d:3c:
                    12:72:7a:d5:ed:c7:80:04:7b:ce:a7:50:c3:88:5d:
                    8d:a5:43:ab:0b:66:59:a7:c8:e1:0e:77:a7:54:91:
                    6e:f3:19:84:a1:ff:65:87:6c:fb:3c:a5:a3:d7:de:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6E:D1:62:14:68:48:32:78:16:CA:86:3D:0B:EB:FA:16:7C:7A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64315ee5-f893-3cf9-a062-9ef98a227065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:91:de:73:3e:10:be:77:c8:2d:76:2b:18:05:0f:c8:37:
         18:32:d5:ac:60:18:bc:c0:a6:bf:fe:74:3d:8c:79:31:0f:ac:
         82:fd:35:cd:5d:6b:fd:b1:c1:34:9a:c6:db:45:b5:4a:0f:81:
         95:7d:dc:19:f5:3f:f9:7c:c3:4d:d4:98:d5:74:d8:cd:90:fd:
         6f:79:0d:e4:cb:c1:7b:ed:81:b6:6a:c9:49:32:73:23:4f:45:
         23:d7:1a:fe:a0:d3:7d:8c:df:f4:c6:68:5c:e5:a5:ca:fc:56:
         3d:ef:52:03:ba:f2:41:27:b8:19:67:39:74:63:2d:a9:3d:f1:
         71:cd:9e:f6:8d:16:ef:3e:7c:20:9e:7f:08:a3:00:5e:59:83:
         45:e6:88:45:cf:b0:46:28:e7:cf:9a:fc:d2:e0:06:d4:88:1a:
         48:43:ec:f9:cc:e9:fc:4f:ab:38:e0:03:9b:31:f2:73:da:8f:
         fb:2c:ac:93:ce:cc:ae:b9:4f:66:03:87:8e:4c:62:90:a4:da:
         2e:56:4f:80:e0:e8:c2:28:30:b6:21:ed:a1:10:92:cd:31:97:
         78:d4:f5:22:b0:2c:de:ff:d2:36:6e:51:2d:ff:aa:68:13:7f:
         ac:81:89:d0:5b:00:0c:0c:d3:df:59:46:39:36:70:ea:1e:d4:
         c2:4b:5c:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKnOSKY+DLSqknvsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDcyNDEzMDAxOVoXDTIzMTAyMjEzMDAxOVowLzEtMCsGA1UEAxMk
ZDA4YjdmNmUtNWZkYi00M2I5LTllZjQtYmZmMzRiZmNlMTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm9KHXPV9IJtOl3G9kZQk4RWqjgdFDXTTjx0
DzsX6TmoydU+6ARzU0ZeQAhWI3ObZoWWGYSaGQn1JRjm4M49ZHHR+itkYHyt30SD
iYXtWafeQDuof/1HV62VJ5G+fiI7P7y+MYGgXQNL9WU92MTWvF0grJAF6ZxFnDjJ
34w4TxcCmEItDOIrrhoUUCnNqFGXhk+199HcJtn4bAAFcviM4BEb6RPZJpW7Q+/1
CMZHcalRk+HqoKPcILKtcWHxYpNUeZWgycfflNeD4UXY8xOnLTwScnrV7ceABHvO
p1DDiF2NpUOrC2ZZp8jhDnenVJFu8xmEof9lh2z7PKWj197SDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNu0WIUaEgyeBbKhj0L6/oWfHrsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjQzMTVlZTUtZjg5My0z
Y2Y5LWEwNjItOWVmOThhMjI3MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbXkd5zPhC+d8gtdisYBQ/INxgy1axgGLzApr/+dD2MeTEPrIL9Nc1d
a/2xwTSaxttFtUoPgZV93Bn1P/l8w03UmNV02M2Q/W95DeTLwXvtgbZqyUkycyNP
RSPXGv6g032M3/TGaFzlpcr8Vj3vUgO68kEnuBlnOXRjLak98XHNnvaNFu8+fCCe
fwijAF5Zg0XmiEXPsEYo58+a/NLgBtSIGkhD7PnM6fxPqzjgA5sx8nPaj/ssrJPO
zK65T2YDh45MYpCk2i5WT4Dg6MIoMLYh7aEQks0xl3jU9SKwLN7/0jZuUS3/qmgT
f6yBidBbAAwM099ZRjk2cOoe1MJLXLs=
-----END CERTIFICATE-----
Generated at Fri Aug 25 19:18:31 2023 by rpki-client on console-ams.rpki-client.org