Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82304aea-0c6e-3e44-9cff-607953ce93c7.roa
File:                     82304aea-0c6e-3e44-9cff-607953ce93c7.roa (raw, json)
Hash identifier:          DslAZbil0C3IMnTbW+D9XGIjBoN/fPXtsDhBQnA2yZk=
Subject key identifier:   3F:B4:60:2E:17:C2:10:58:9A:BA:4A:B8:46:0F:B5:50:BE:0D:39:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584210E6B17627F8607657B5FE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82304aea-0c6e-3e44-9cff-607953ce93c7.roa
Signing time:             Wed 31 May 2023 16:43:01 +0000
ROA not before:           Wed 31 May 2023 16:43:01 +0000
ROA not after:            Tue 29 Aug 2023 16:43:01 +0000
asID:                     14956
IP address blocks:        166.0.94.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:10:e6:b1:76:27:f8:60:76:57:b5:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 31 16:43:01 2023 GMT
            Not After : Aug 29 16:43:01 2023 GMT
        Subject: CN=3fd220ce-548b-442a-af78-d66a9c56ceb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:52:e0:54:f4:2f:e5:b8:64:d2:2c:ba:f7:
                    5f:21:4f:58:29:24:60:47:22:56:fa:48:f8:af:3b:
                    38:b2:50:8e:c9:af:4c:0c:16:6f:c2:10:88:ad:a2:
                    3c:a0:28:32:b4:be:62:cb:e7:2e:28:71:b9:54:38:
                    01:82:5c:a0:8c:ee:d8:4e:4d:7d:24:5e:90:94:65:
                    92:93:e2:8b:69:b9:42:4a:65:2a:5b:c6:b4:c2:d8:
                    3a:68:c8:5d:29:36:28:8a:78:68:a9:2f:f9:55:dd:
                    6c:7a:1d:34:5f:36:7c:a9:31:bf:94:b4:e2:69:5e:
                    4e:7f:71:c4:d1:63:e5:94:29:be:81:df:ea:d4:67:
                    77:2b:8f:b0:59:8f:54:24:85:a3:42:b4:03:a5:95:
                    0b:e5:51:21:8a:0a:2a:74:7c:95:d6:c3:3b:52:49:
                    ac:f4:4c:38:7c:87:52:3f:3e:dd:f2:ba:3c:df:44:
                    70:f3:32:55:00:e8:6c:65:27:8b:55:11:7a:50:04:
                    85:52:fa:11:af:00:df:14:63:47:b9:19:22:8d:1e:
                    1b:9f:cd:d3:2a:67:8d:c7:5e:e1:f8:da:ae:77:9d:
                    18:7e:7d:e6:7c:95:6c:66:bd:34:07:ac:aa:57:7a:
                    59:2f:af:71:57:08:05:c0:f5:99:a9:86:83:49:9e:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B4:60:2E:17:C2:10:58:9A:BA:4A:B8:46:0F:B5:50:BE:0D:39:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82304aea-0c6e-3e44-9cff-607953ce93c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:22:b5:39:b7:b6:d2:5c:a5:65:ae:0a:cb:90:a3:50:28:24:
         72:0d:aa:e0:a5:a9:f1:98:c6:ce:ca:74:4e:09:0f:2d:4d:4e:
         6e:e2:46:95:7d:59:f1:19:13:68:cd:9a:59:25:81:b9:39:71:
         d5:24:06:11:51:02:4f:d8:71:70:81:90:d5:ef:88:44:ad:f4:
         a8:cd:ee:50:4e:76:d7:65:d5:b1:64:c1:01:86:30:87:21:5f:
         b3:8f:1f:38:23:a4:4a:0a:44:12:89:7c:2c:2f:bb:2a:3a:76:
         87:52:e1:8a:aa:3b:f9:53:56:6c:c8:1d:20:3b:f2:e2:29:e5:
         d1:96:bf:6e:8a:8f:78:75:33:a7:f6:bb:6d:6e:65:5a:44:01:
         6e:27:fa:1e:a4:c4:9f:4f:35:27:57:08:25:aa:fb:ba:2a:8c:
         11:05:a3:6f:f8:74:8a:3d:6f:7c:1d:8f:f2:4a:0f:15:70:89:
         01:64:5a:02:d3:16:87:59:69:4b:39:e8:ea:9b:2f:a2:83:6a:
         52:4c:be:98:45:4f:13:a0:4c:76:40:dd:e9:f6:55:6e:79:bd:
         f7:5c:a8:fb:de:5d:e4:5c:d2:f1:31:ae:c4:e3:e4:00:21:92:
         b7:00:48:4d:5e:6f:42:2e:6a:91:f4:f9:7a:8e:e1:ea:8c:f2:
         0e:a9:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----