Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dfc3e1b-fb82-3f4d-99cf-cb9fa637773c.roa
File:                     7dfc3e1b-fb82-3f4d-99cf-cb9fa637773c.roa (raw, json)
Hash identifier:          K93zMjIwQtA2C/niEQVQ1Ie5xOLbLY8wPUtTGrh7U84=
Subject key identifier:   4F:06:2F:00:AE:4B:2B:83:03:6A:5B:FE:0B:76:AE:8B:EA:8E:2E:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841FD47EF510228E903F6CFB100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dfc3e1b-fb82-3f4d-99cf-cb9fa637773c.roa
Signing time:             Wed 24 May 2023 16:02:47 +0000
ROA not before:           Wed 24 May 2023 16:02:47 +0000
ROA not after:            Tue 22 Aug 2023 16:02:47 +0000
asID:                     399471
IP address blocks:        166.1.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fd:47:ef:51:02:28:e9:03:f6:cf:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 24 16:02:47 2023 GMT
            Not After : Aug 22 16:02:47 2023 GMT
        Subject: CN=b46f159d-45c2-45a2-9d08-95fb2296ed59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:84:7a:7b:c8:b4:14:45:90:5f:2f:e1:06:
                    f2:85:c9:dd:0c:25:d3:ab:96:7f:f3:44:24:f2:f7:
                    75:33:64:2a:ed:12:04:2f:83:da:08:d4:66:b1:1d:
                    d5:36:ca:06:fa:b9:4f:7f:bd:85:90:56:bd:c3:22:
                    0b:0d:c6:e0:c1:f7:c1:74:6b:a4:58:80:2a:b6:67:
                    6f:df:ee:7a:d4:5b:23:d3:fc:48:36:54:db:bc:df:
                    0a:81:f6:89:dd:5d:37:8d:c0:d0:0d:2b:dc:4c:2a:
                    5b:48:64:31:ab:fa:95:95:65:52:c7:a5:db:de:b1:
                    09:5a:60:f1:61:44:bc:f9:e2:91:1c:d6:70:85:8c:
                    e1:89:7c:4f:b9:bb:43:6f:e0:9d:cf:56:e9:9a:39:
                    02:6b:24:a3:ba:4e:d7:39:ca:96:2a:d3:e9:79:f4:
                    9e:35:68:ce:e0:2c:1f:25:1c:6e:fd:73:63:20:01:
                    9f:5d:ad:3a:5b:dc:07:c9:39:a6:fe:34:ab:6c:60:
                    c4:38:40:81:68:66:ed:c9:7b:c0:88:d5:fc:03:8e:
                    37:fa:3e:aa:fe:e0:fd:6d:34:e0:48:a3:c0:bf:a5:
                    9a:5b:1e:bb:09:8b:85:e9:70:ec:b4:04:b7:bc:33:
                    83:46:50:67:8e:5d:de:e2:29:b1:4b:ce:db:7a:30:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:06:2F:00:AE:4B:2B:83:03:6A:5B:FE:0B:76:AE:8B:EA:8E:2E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dfc3e1b-fb82-3f4d-99cf-cb9fa637773c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ca:25:2a:58:97:20:99:d8:07:fa:49:bd:be:d6:6a:88:d5:
         fa:5c:a0:29:2a:a3:94:4e:7d:ad:a5:98:d3:fd:95:5f:41:7d:
         04:a8:93:57:fc:0c:a6:c9:c0:a7:47:99:1d:3a:0c:37:48:aa:
         ee:8d:ed:a8:98:bb:51:c8:f7:87:e8:c6:5d:96:d0:60:dd:b0:
         56:26:39:5b:4b:ae:5b:2b:59:89:56:c2:5b:8d:97:14:6a:49:
         6e:da:03:91:b0:96:16:ce:ea:52:8d:41:0b:76:33:c3:d5:dc:
         d1:a0:84:7a:1a:f3:f6:34:3f:7d:12:85:4b:2f:93:e2:a2:28:
         8f:ae:24:4d:91:08:02:e1:42:53:c8:58:36:1d:33:01:11:25:
         71:5d:12:49:52:b3:0e:c7:7c:d5:a9:08:54:4b:32:e5:1d:2e:
         3a:fa:36:7e:39:70:7d:48:6c:64:e6:20:be:5f:e8:71:c2:2c:
         86:65:51:40:50:dd:1b:1c:05:3d:8c:25:66:4e:ed:e3:c1:02:
         92:ee:fe:b8:23:da:89:27:00:53:ae:44:e0:0b:3b:02:79:88:
         c0:cc:85:7a:b8:82:97:7e:94:68:8a:ad:37:c4:3b:05:0d:60:
         75:f2:82:99:6e:b8:90:95:1a:ca:cc:db:da:b1:f5:53:4b:6b:
         67:59:16:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEH9R+9RAijpA/bPsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUyNDE2MDI0N1oXDTIzMDgyMjE2MDI0N1owLzEtMCsGA1UEAxMk
YjQ2ZjE1OWQtNDVjMi00NWEyLTlkMDgtOTVmYjIyOTZlZDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNyEenvItBRFkF8v4QbyhcndDCXTq5Z/80Qk
8vd1M2Qq7RIEL4PaCNRmsR3VNsoG+rlPf72FkFa9wyILDcbgwffBdGukWIAqtmdv
3+561Fsj0/xINlTbvN8KgfaJ3V03jcDQDSvcTCpbSGQxq/qVlWVSx6Xb3rEJWmDx
YUS8+eKRHNZwhYzhiXxPubtDb+Cdz1bpmjkCaySjuk7XOcqWKtPpefSeNWjO4Cwf
JRxu/XNjIAGfXa06W9wHyTmm/jSrbGDEOECBaGbtyXvAiNX8A443+j6q/uD9bTTg
SKPAv6WaWx67CYuF6XDstAS3vDODRlBnjl3e4imxS87bejDNKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8GLwCuSyuDA2pb/gt2rovqji6zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2RmYzNlMWItZmI4Mi0z
ZjRkLTk5Y2YtY2I5ZmE2Mzc3NzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDKJSpYlyCZ2Af6Sb2+1mqI1fpcoCkqo5ROfa2lmNP9lV9BfQSok1f8
DKbJwKdHmR06DDdIqu6N7aiYu1HI94foxl2W0GDdsFYmOVtLrlsrWYlWwluNlxRq
SW7aA5GwlhbO6lKNQQt2M8PV3NGghHoa8/Y0P30ShUsvk+KiKI+uJE2RCALhQlPI
WDYdMwERJXFdEklSsw7HfNWpCFRLMuUdLjr6Nn45cH1IbGTmIL5f6HHCLIZlUUBQ
3RscBT2MJWZO7ePBApLu/rgj2oknAFOuROALOwJ5iMDMhXq4gpd+lGiKrTfEOwUN
YHXygpluuJCVGsrM29qx9VNLa2dZFt4=
-----END CERTIFICATE-----