Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ba505fd-e47c-3546-9936-d8ba3286e277.roa
File:                     6ba505fd-e47c-3546-9936-d8ba3286e277.roa (raw, json)
Hash identifier:          We3bFrjT1+HNvhHjz5QN2ChZFl4PzSNsoIXlHJowZV0=
Subject key identifier:   35:B3:57:75:84:E2:A1:0B:3F:CB:7E:BC:C6:D4:94:AA:27:A2:3A:2B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446EB19BC30A24775692200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ba505fd-e47c-3546-9936-d8ba3286e277.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sat 12 Aug 2023 04:26:18 +0000
asID:                     834
IP address blocks:        108.165.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:eb:19:bc:30:a2:47:75:69:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 12 04:26:18 2023 GMT
        Subject: CN=7da250a3-3b4e-441f-831a-7822fa0355b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:09:2e:93:fe:6d:4a:40:aa:c3:5c:ad:56:
                    ca:ba:d6:da:d9:c4:85:c4:2e:1e:04:81:d2:2c:88:
                    f0:c1:08:65:e9:6d:6d:f3:36:65:f8:7d:35:93:25:
                    dd:bf:e6:86:c9:6e:c5:3b:26:e7:5c:66:c0:02:51:
                    43:a9:8b:0f:da:2f:9d:8e:49:90:7f:c9:4c:54:75:
                    5c:70:00:ba:14:da:eb:9c:65:c6:2a:81:3d:31:34:
                    f7:0c:fc:70:56:80:de:2a:6d:f6:90:4a:fc:f3:86:
                    8b:8f:ed:c9:a3:11:8e:54:da:ca:c8:00:ef:6f:10:
                    08:82:bc:0d:ca:50:a6:e2:6e:b0:f0:3b:2b:1b:07:
                    3e:f4:16:43:69:5b:07:c2:54:0b:c7:f5:28:73:ff:
                    38:3a:da:7c:16:e3:e4:23:b4:41:97:66:12:e9:2c:
                    fa:e4:92:de:c5:fa:3b:dd:41:a1:3f:b4:40:41:c1:
                    21:a6:80:51:92:b1:1d:c8:f0:a2:ed:e3:c1:f2:b9:
                    1c:55:e3:d9:8f:91:f2:63:e6:ff:67:32:4d:ba:32:
                    0c:95:7b:fc:49:8f:b1:a8:6b:30:69:77:38:4a:75:
                    f1:ae:9c:04:3a:7c:99:4a:df:21:9d:ad:6f:94:e1:
                    36:ef:58:1a:69:78:c2:66:d2:3e:26:28:64:64:9f:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B3:57:75:84:E2:A1:0B:3F:CB:7E:BC:C6:D4:94:AA:27:A2:3A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ba505fd-e47c-3546-9936-d8ba3286e277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:10:d2:42:96:4f:01:6e:8b:8a:da:37:b8:88:0f:1f:6c:b6:
         d6:b2:6f:23:88:22:3b:df:ea:e9:b3:22:0e:a8:64:98:c7:9f:
         fb:9f:ce:d4:f4:dc:81:42:b0:46:d9:59:66:39:a7:f5:fe:fa:
         0f:09:30:44:18:63:7d:99:8a:eb:59:ca:6f:7a:88:03:f5:2a:
         2f:4c:ab:93:d4:e3:5e:30:38:a0:53:88:36:66:84:8a:3d:81:
         89:ed:ec:c4:ad:ee:8f:d9:a2:ce:c0:d9:c6:19:cd:83:cf:ea:
         10:91:80:5c:9e:73:b1:c3:08:1d:16:aa:41:07:99:47:17:67:
         d9:32:15:ed:8b:66:aa:3b:b7:1e:d9:81:29:fb:ee:d6:1f:a2:
         c0:37:dc:e2:cf:cf:92:3c:df:8e:4f:10:52:1d:15:49:1a:b2:
         9d:19:c3:87:21:c8:d2:be:af:d9:84:ce:5b:72:89:cb:79:04:
         58:e6:d6:c6:7d:05:85:44:81:a6:97:1f:2a:21:c4:8e:ce:44:
         fe:f8:b0:af:93:88:38:f3:c1:f6:24:87:b7:66:4b:8a:00:b6:
         af:9b:03:f9:67:c6:fc:9c:37:40:50:8f:a4:15:ed:66:c8:64:
         05:03:bd:63:c5:ec:76:6a:b5:58:45:e9:04:01:3a:b5:3a:70:
         57:cd:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----