Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83b464e0-c05c-36c9-bed0-8047ad6031a6.roa
File:                     83b464e0-c05c-36c9-bed0-8047ad6031a6.roa (raw, json)
Hash identifier:          w56vRVfHwkzfObQG5kp6yLdrMCA9YczvwzA8kjPdvnU=
Subject key identifier:   6A:36:56:27:78:60:1D:66:47:29:E4:54:17:25:AF:26:A3:7E:0A:D3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844AF7053D127E4B5F01D799FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83b464e0-c05c-36c9-bed0-8047ad6031a6.roa
Signing time:             Fri 26 Jan 2024 21:11:55 +0000
ROA not before:           Fri 26 Jan 2024 21:11:55 +0000
ROA not after:            Thu 25 Apr 2024 20:11:55 +0000
asID:                     11798
IP address blocks:        166.1.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 22:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:af:70:53:d1:27:e4:b5:f0:1d:79:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 26 21:11:55 2024 GMT
            Not After : Apr 25 20:11:55 2024 GMT
        Subject: CN=16ccedbb-1172-495f-a78f-6ff264db9a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:95:cd:fa:0b:1d:eb:54:30:31:11:5a:eb:
                    33:3f:d0:50:48:62:c0:5e:83:a5:b5:30:36:a8:12:
                    8e:46:95:c1:4c:18:96:c9:e3:d8:83:c4:cf:6d:34:
                    28:70:2c:a7:e7:89:5a:ab:ae:b3:66:61:82:b9:f7:
                    89:99:e1:ad:86:8c:2f:ff:d4:cc:a2:79:7a:6b:bf:
                    cf:3b:17:57:e0:f9:74:47:fd:00:dc:2f:91:2e:21:
                    32:b6:a7:32:a0:7d:74:dc:3e:db:26:38:44:3b:0e:
                    c4:6a:93:3a:e8:2d:b4:dd:60:76:e0:13:5a:c9:4a:
                    28:84:7c:bc:5a:4b:93:43:0d:9c:78:01:90:81:91:
                    64:13:c9:48:77:83:1a:f9:b5:2e:b6:98:48:20:6d:
                    5b:6d:cc:24:b7:57:21:2d:a3:cc:cd:65:87:f2:15:
                    7d:7a:9b:38:8f:a6:2c:da:b2:df:87:40:dc:63:c3:
                    99:9b:1d:7a:79:be:f9:85:b0:c2:07:f1:fd:f8:18:
                    b1:f0:43:fe:eb:7f:0e:d0:16:3e:4a:7f:bf:bc:7c:
                    3a:5c:a1:9f:99:bb:6d:a4:36:0e:33:46:5f:85:fe:
                    12:a4:c4:eb:9d:d1:62:50:83:6e:cd:d0:5b:74:5b:
                    86:b7:a7:77:a2:b5:c4:17:0a:ca:be:6f:66:76:17:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:36:56:27:78:60:1D:66:47:29:E4:54:17:25:AF:26:A3:7E:0A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/83b464e0-c05c-36c9-bed0-8047ad6031a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:25:48:63:37:98:20:22:54:06:7f:3d:98:81:4b:b1:71:
         e1:af:cd:b6:9b:17:e7:bd:e9:60:a6:9d:f1:2e:5a:88:8f:df:
         72:27:97:a8:6c:e5:33:93:e6:5f:b3:d0:01:17:00:a7:13:8a:
         25:10:db:47:f6:6d:7b:05:19:f8:c4:af:bb:c9:c1:29:d3:3e:
         3e:bf:c2:be:57:fb:0a:79:23:59:5d:39:5a:37:cf:b8:8e:27:
         83:e2:44:33:19:ef:d9:c6:70:36:58:a8:75:70:29:f3:e6:c0:
         96:2f:6e:59:86:1f:ed:02:66:75:9f:b0:74:83:df:8d:82:e4:
         f5:bc:2f:bb:a8:db:9c:44:38:d5:04:df:0f:db:3d:76:f0:fb:
         59:48:81:5a:35:b6:b9:41:67:63:13:44:91:63:c2:f8:58:e9:
         9e:23:e5:66:ca:bf:64:b9:15:09:3e:d1:13:1e:3a:0b:b8:b2:
         b2:bc:00:7c:49:e4:06:b5:1a:45:89:4f:28:ef:43:c8:e7:2d:
         fd:95:aa:4f:8d:00:0e:fd:cb:a0:a1:66:bb:68:7b:7e:86:93:
         9f:2f:0b:c1:00:22:65:62:ae:29:ec:21:30:8d:ee:e0:71:db:
         9b:85:e9:bd:1d:5f:2f:ae:0a:45:a7:11:62:8b:54:d0:f8:92:
         09:bd:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----