Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f639589-9f1b-3fd1-9e30-947330e3535f.roa
File:                     7f639589-9f1b-3fd1-9e30-947330e3535f.roa (raw, json)
Hash identifier:          rLt+G0tMqz0lDGi3TS8Xr3dS8C0vjlfztQWA6dXE9fQ=
Subject key identifier:   1B:F2:49:EB:00:35:0E:8E:32:AE:97:B6:1F:65:76:02:EB:92:6F:DB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446FDB1F7937CC8DAAFDF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f639589-9f1b-3fd1-9e30-947330e3535f.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 08 Aug 2023 01:05:25 +0000
asID:                     834
IP address blocks:        166.0.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:fd:b1:f7:93:7c:c8:da:af:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  8 01:05:25 2023 GMT
        Subject: CN=34f1a27d-53bb-4fb6-89ee-d67b09c10c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:a2:2f:d5:b7:6b:18:87:cf:7c:2f:51:31:
                    7f:aa:36:0c:9d:0a:d1:2a:5d:fe:17:20:ae:96:bb:
                    8a:63:8d:79:f8:61:25:16:06:58:4d:14:ed:76:3b:
                    60:09:e1:09:db:b4:26:eb:e1:80:a4:7d:91:2d:59:
                    93:24:47:70:d3:88:c8:a4:79:2f:84:2a:c9:2e:e0:
                    1b:bc:89:08:d0:00:7b:18:9a:db:4b:b0:bf:a3:62:
                    03:b4:1e:47:1c:cb:96:a1:98:cb:5b:d9:26:23:88:
                    c5:d4:dd:a8:0e:4c:91:eb:c2:bc:90:80:ff:52:a8:
                    0d:94:83:f1:8c:a3:8a:b7:57:dd:4f:09:e7:bb:a6:
                    b1:b3:7b:86:0e:1e:e5:d0:99:32:fa:37:a5:b3:9d:
                    3b:bb:4c:e3:3c:af:7a:d3:05:50:4c:04:fe:da:97:
                    24:57:c3:08:7b:fe:11:b2:08:c1:cc:a9:d6:3a:c0:
                    5e:59:06:ef:c8:42:bd:5c:5a:cd:73:f4:74:2a:9f:
                    aa:c5:3d:84:2f:c2:e7:40:06:14:c2:50:d2:29:54:
                    4c:48:d7:51:c0:72:a4:d8:45:6c:eb:3b:8c:b7:da:
                    7e:e9:bc:98:d0:a8:33:b5:e0:67:02:af:38:55:7d:
                    b5:c0:d7:a1:d4:d8:97:03:45:d4:2a:5e:86:90:76:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F2:49:EB:00:35:0E:8E:32:AE:97:B6:1F:65:76:02:EB:92:6F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f639589-9f1b-3fd1-9e30-947330e3535f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:67:7d:56:05:e9:33:61:aa:bc:5a:4b:f6:f8:5c:04:e3:
         26:28:ee:51:60:f1:78:ec:ca:4d:78:62:37:99:3b:4f:97:f7:
         f7:c5:4d:ff:31:c7:e3:ba:a9:08:a0:4b:68:aa:50:91:a3:73:
         3f:d4:6e:ca:52:dd:66:16:1d:55:2f:94:80:df:08:8e:c6:bb:
         5f:d9:e9:e2:1e:cb:73:8d:73:c6:11:cc:31:26:dd:0c:05:7d:
         9a:c0:f1:78:8f:44:69:06:fd:66:2a:0b:2d:bc:57:74:46:37:
         8d:c5:e5:bb:d8:50:2b:41:2d:59:3b:0f:dd:43:a3:1a:db:dc:
         19:15:fd:d0:c9:e9:e2:38:e1:cb:71:4f:6e:3e:8a:59:e8:28:
         6a:2e:51:d9:d3:a5:47:07:6d:de:fc:57:88:d8:cb:ea:c9:bc:
         82:3b:64:e5:41:05:36:ab:06:d7:30:77:3e:39:48:74:90:30:
         6d:fd:6d:5a:ea:84:4d:b2:c8:e1:2b:57:a3:b7:f4:9b:43:7b:
         d2:cf:30:cd:e2:71:69:f4:51:70:e9:d3:4a:8e:8f:a6:83:b6:
         8b:f5:c1:2b:33:7a:e0:5e:9c:f9:fe:50:3a:2d:df:4a:b2:d4:
         06:ba:fe:38:a4:8c:4e:fc:ae:a6:6b:99:60:62:f9:b5:64:6f:
         21:17:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----