Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6df08c16-b50d-3767-b7c4-f27e90c07276.roa
File:                     6df08c16-b50d-3767-b7c4-f27e90c07276.roa (raw, json)
Hash identifier:          xhedqNiyicnNUavpLqIMDQ0P1K1NAWrH9SiwVaFibf4=
Subject key identifier:   07:3E:DC:55:00:C9:37:B3:F1:D5:60:B5:AA:FF:D4:5E:24:CB:1C:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858402BA7E90F897A9BF55769DA80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6df08c16-b50d-3767-b7c4-f27e90c07276.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 12 Mar 2025 04:00:00 +0000
asID:                     7489
IP address blocks:        166.0.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2b:a7:e9:0f:89:7a:9b:f5:57:69:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Mar 12 04:00:00 2025 GMT
        Subject: CN=33e4cca5-86c9-4efe-b94e-2c522e2e917b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:0f:0c:4c:67:df:fa:a4:3c:13:4b:fa:43:
                    35:33:f1:24:79:b0:8e:80:fc:42:7d:d1:66:ed:d8:
                    3e:23:4a:3c:ff:51:45:03:88:af:26:e9:69:13:35:
                    4e:b1:9d:90:a9:dd:9b:6e:87:6b:4e:6f:f8:a4:73:
                    1f:1e:88:1e:d7:26:87:06:0f:6c:21:ee:8b:69:1f:
                    a5:90:1f:63:85:74:11:1b:91:ce:b2:58:fe:cd:9d:
                    b7:21:4e:f3:c2:83:e1:d5:bf:c1:8d:e1:4c:66:90:
                    a2:d3:35:b9:07:81:f9:5d:8f:70:61:f7:ca:aa:ef:
                    98:c8:a9:da:3f:1d:97:9f:68:d4:9d:fd:e5:5f:c0:
                    b9:ea:95:9e:29:03:e8:b7:0b:49:29:07:4f:ae:ff:
                    c9:2b:fc:10:3c:0b:38:6d:a6:60:70:58:93:a6:5a:
                    0c:bb:a9:49:c0:c8:08:2b:6d:cd:90:a9:56:d1:48:
                    3d:8f:5a:11:65:fc:e5:67:90:5d:f7:8c:8c:39:df:
                    b5:f4:91:8c:99:a6:58:39:7b:72:ca:8c:0d:23:47:
                    ea:b6:26:3c:71:60:6a:3e:36:68:c9:b1:9e:6a:84:
                    92:86:34:a6:3d:11:23:8b:8a:dd:f4:43:69:ff:1d:
                    ee:cc:f9:c1:0a:a4:94:95:18:8c:61:c2:95:05:e3:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:DC:55:00:C9:37:B3:F1:D5:60:B5:AA:FF:D4:5E:24:CB:1C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6df08c16-b50d-3767-b7c4-f27e90c07276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:20:bb:1f:78:cb:f9:0a:83:c0:8e:c1:3b:c6:62:e5:b0:4c:
         62:53:31:2a:6f:26:f6:cf:04:b0:f1:6b:57:08:40:41:f1:10:
         0c:d0:00:e0:ae:1e:74:ca:95:ef:20:33:a8:17:f7:a3:cb:e0:
         1e:2d:68:fb:7e:60:2a:43:07:95:46:e8:ad:60:f4:98:88:0c:
         9c:18:10:71:a5:4d:11:4b:4b:60:85:40:50:38:16:9f:87:10:
         87:3e:64:8a:fa:e0:22:31:57:db:96:53:b2:b8:ca:70:16:cd:
         27:2c:ab:4e:4b:19:38:0d:37:d0:21:38:80:1b:6e:3e:84:8c:
         0f:bf:1e:e0:4e:67:61:a3:61:8a:de:14:a6:41:4a:8a:b8:cf:
         a9:11:bd:ea:59:3a:ee:1f:b5:a5:80:2f:40:d1:d0:9a:3b:14:
         5f:75:ed:cb:80:bc:0c:ac:1a:93:40:b9:f6:2a:56:96:9e:ad:
         ef:8b:39:80:30:79:f8:7a:1c:1d:50:88:68:e9:2f:3e:6e:7b:
         1e:f4:65:06:e5:45:c1:a1:b5:ec:ef:64:e8:52:4f:2b:09:7a:
         cf:14:7e:d6:12:74:bd:0d:97:11:27:99:4c:2e:c3:b6:bb:0e:
         8a:32:37:4e:6f:84:82:5b:e3:59:0f:78:b9:0a:95:bc:5c:93:
         97:47:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----