Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/658b0862-90d6-3375-8219-8ea15e4def9a.roa
File:                     658b0862-90d6-3375-8219-8ea15e4def9a.roa (raw, json)
Hash identifier:          43wQk+nd/9dLfUqpq13/6diw3CDgwYc9d+Nrti09YqQ=
Subject key identifier:   59:E5:B0:7E:DC:0A:8A:BA:37:D8:7C:C4:61:69:A8:41:60:C2:30:2B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858422CF35AC72B99C3D2C3822220
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/658b0862-90d6-3375-8219-8ea15e4def9a.roa
Signing time:             Sat 10 Jun 2023 17:51:10 +0000
ROA not before:           Sat 10 Jun 2023 17:51:10 +0000
ROA not after:            Fri 08 Sep 2023 17:51:10 +0000
asID:                     11798
IP address blocks:        166.1.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2c:f3:5a:c7:2b:99:c3:d2:c3:82:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 10 17:51:10 2023 GMT
            Not After : Sep  8 17:51:10 2023 GMT
        Subject: CN=936091e6-7693-400c-be06-5d5ecd524d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:77:14:d0:44:d3:fb:46:34:2a:a8:76:35:
                    35:f9:d9:61:e2:8a:ab:14:be:c2:fc:29:a8:e1:69:
                    fe:81:ec:8b:8f:83:31:81:b9:34:03:0c:5a:91:dd:
                    21:b5:24:ea:4c:fa:bd:90:88:bb:82:56:44:cf:12:
                    dc:e2:7e:4d:d3:35:4b:7d:16:51:20:f3:f0:10:4d:
                    a2:78:bc:c4:1c:4c:0c:99:ef:e2:c1:7d:50:75:96:
                    7e:1a:c7:fa:a9:a4:d1:6b:2d:c1:f8:e7:a4:76:54:
                    d0:b6:d4:ae:2c:70:72:29:5f:75:e0:0e:63:06:19:
                    67:c0:e6:51:5f:39:1b:87:b3:0e:3b:9d:52:5d:e3:
                    2e:9c:50:c9:2a:72:f1:5e:b2:34:27:49:fd:8c:2b:
                    77:95:d7:f5:7c:47:f2:14:c0:5a:47:2c:a7:91:d2:
                    6b:24:c0:cd:33:eb:41:a5:71:ef:63:f3:a9:44:d9:
                    63:92:4f:ad:3e:32:d3:32:bb:ad:c5:1c:94:c5:75:
                    dc:6b:f3:54:af:32:23:a4:da:02:60:31:d5:d2:a7:
                    c2:87:aa:36:b5:40:be:43:f6:87:3c:9a:ed:83:6d:
                    a2:ea:ce:d8:fd:13:25:75:fd:70:f9:99:4d:7b:73:
                    4d:56:ff:ea:8a:f3:57:d9:0b:55:5c:4f:58:b6:c6:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:B0:7E:DC:0A:8A:BA:37:D8:7C:C4:61:69:A8:41:60:C2:30:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/658b0862-90d6-3375-8219-8ea15e4def9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:42:60:c4:b4:35:70:bb:59:28:75:e4:55:9d:28:de:90:24:
         d1:a4:a5:0b:36:e3:7c:e5:1c:8c:1b:e9:62:f3:46:8e:2e:2d:
         e0:14:18:1c:08:f7:81:e2:e6:ba:11:60:60:5a:78:18:a3:f8:
         e1:ad:cd:e1:dd:3d:8d:b7:5d:88:21:91:5f:6b:1c:98:14:95:
         d7:35:0f:9e:6a:d0:29:04:14:19:55:e2:67:10:0d:84:05:34:
         f5:85:00:db:92:0e:84:16:8e:47:35:13:3d:44:ff:ac:44:c6:
         fb:7a:d5:0b:a8:64:1d:bc:67:03:70:88:8c:3d:04:15:04:08:
         9d:b3:95:89:29:bd:8c:77:d5:96:85:e6:76:24:e2:43:84:09:
         56:90:5c:1c:ba:15:6d:e6:72:5c:67:dc:d3:e8:de:d2:3c:08:
         cd:ee:77:c1:16:b6:a9:f6:1e:20:55:ad:ca:61:28:12:78:29:
         db:16:62:31:66:55:8b:d7:d7:74:d8:2f:03:51:23:90:e3:75:
         b6:0b:ce:1a:28:e2:63:96:d3:3d:78:82:17:49:96:44:2e:a8:
         09:3c:dc:3e:18:42:3f:d6:e2:1f:e2:ac:64:ba:82:b9:f5:d3:
         53:bb:91:60:6e:9a:ee:bc:bf:f5:8c:f7:cc:d2:7b:ae:69:81:
         6b:df:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----