Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/760bb16b-7ac8-3c15-bb8f-bc7db87d2efc.roa
File:                     760bb16b-7ac8-3c15-bb8f-bc7db87d2efc.roa (raw, json)
Hash identifier:          ctiGqMcAJyIUIarid6ueGrbyX5JZuNcYfjWYf5fbqMI=
Subject key identifier:   53:A6:4B:CB:4D:81:EF:08:12:9B:E9:5D:EF:4A:32:88:35:C6:19:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845593789E090F161D3E0065400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/760bb16b-7ac8-3c15-bb8f-bc7db87d2efc.roa
Signing time:             Wed 27 Mar 2024 16:44:55 +0000
ROA not before:           Wed 27 Mar 2024 16:44:55 +0000
ROA not after:            Tue 25 Jun 2024 16:44:55 +0000
asID:                     15287
IP address blocks:        166.0.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 17:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:59:37:89:e0:90:f1:61:d3:e0:06:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 27 16:44:55 2024 GMT
            Not After : Jun 25 16:44:55 2024 GMT
        Subject: CN=f00a1eac-3a87-42c6-9f97-f14654f5fa93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:56:d0:cb:1b:fb:32:e8:88:cc:b4:43:e7:
                    9f:79:b8:57:28:a5:05:8c:bc:50:ee:7b:df:ab:3e:
                    87:f3:88:05:87:17:ff:9c:a6:1d:bd:68:b3:97:3f:
                    79:35:08:7f:64:7d:30:3b:40:81:fe:b2:79:1e:d0:
                    13:56:3b:72:b1:17:8d:d0:c8:ba:94:0e:ad:58:d8:
                    aa:b6:ce:c6:3c:b1:cf:6c:74:1e:c7:a0:85:60:8a:
                    0a:9f:f7:05:91:8c:be:67:ba:2c:f3:34:35:d4:20:
                    61:f8:3c:5b:fe:22:d4:df:e7:38:cd:96:32:05:da:
                    0f:89:99:73:9a:ae:d2:d5:9e:21:9e:f9:38:49:d2:
                    13:36:55:d2:0e:76:77:0d:61:a9:86:a0:c2:e7:33:
                    ab:b6:5f:ba:ec:8a:1a:54:b7:b9:86:3e:9a:c5:a5:
                    fb:4a:d4:35:96:e6:c1:90:b7:32:c7:0b:5f:ca:11:
                    73:a3:4b:dd:d9:c7:67:d6:49:be:cb:b9:cc:22:18:
                    ef:7f:07:9f:1c:5b:27:12:ab:fe:57:c7:58:75:e9:
                    0c:89:f2:4d:ce:4e:7d:b3:0d:ab:5a:0b:17:88:0b:
                    f4:fb:7f:01:34:2d:16:c9:dc:fb:36:65:8e:c5:28:
                    7e:5c:a4:74:b3:3f:6a:c1:46:91:14:fc:2b:55:88:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A6:4B:CB:4D:81:EF:08:12:9B:E9:5D:EF:4A:32:88:35:C6:19:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/760bb16b-7ac8-3c15-bb8f-bc7db87d2efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:46:48:ed:89:a9:2f:14:2e:43:39:d9:86:d8:6e:de:23:e2:
         ad:35:4c:e6:58:01:46:c2:05:08:8e:be:18:ff:c3:3e:58:2a:
         54:ed:7a:cc:3b:26:4d:bd:04:bd:f3:b5:d9:01:f7:24:9d:c9:
         22:6f:86:b5:64:a8:60:8b:d7:de:e3:a5:ff:8c:c5:c1:d2:e8:
         cd:c7:a2:7e:80:0f:96:b5:a0:ab:a9:75:7d:6e:f7:1c:97:85:
         f1:0c:1c:20:27:8e:ef:f8:09:d8:ef:9b:8c:4c:6a:c0:31:5a:
         e2:60:46:a9:72:0c:92:ee:ed:99:db:17:68:67:29:43:23:7c:
         40:88:ec:98:eb:06:85:02:25:7c:09:a8:12:66:d9:3e:51:aa:
         fa:5b:70:a2:ad:e3:77:f9:42:eb:cf:51:33:32:95:39:c8:96:
         12:d6:d6:ac:e6:e3:24:c1:9c:8b:38:3c:99:31:c7:81:fe:64:
         56:93:4a:5e:a1:f7:06:1c:4b:d2:61:af:07:b2:70:2e:68:4b:
         c5:18:81:ae:74:8c:ad:48:9e:3a:48:af:54:b1:06:a8:f9:44:
         3d:65:fe:1c:d6:2c:d6:11:f9:28:72:d5:6c:fd:c1:4e:29:ab:
         79:e2:52:58:e8:72:50:7e:2b:72:b5:d1:95:36:73:b8:06:8b:
         0e:bf:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----