Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/867b2fec-0209-3638-be37-6d2452313ac9.roa
File:                     867b2fec-0209-3638-be37-6d2452313ac9.roa (raw, json)
Hash identifier:          GrW5TpS1Pc/NqlC8YuNZ9BafKHw5IPw8x9OX4RT8CD4=
Subject key identifier:   ED:0C:48:C1:BE:97:B9:16:A3:54:A0:2D:C0:32:14:BF:D6:5E:7A:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E447060095CE40070B129510
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/867b2fec-0209-3638-be37-6d2452313ac9.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 20:57:18 +0000
asID:                     211584
IP address blocks:        166.0.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:06:00:95:ce:40:07:0b:12:95:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 20:57:18 2023 GMT
        Subject: CN=3b836e43-b0cc-42ad-8c9c-5fb157edc5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fe:9a:00:54:0f:2a:ba:21:3e:85:30:d1:bc:
                    9d:5b:97:aa:7d:5f:b6:22:2b:ba:e2:b4:61:10:53:
                    30:85:1b:91:c5:69:90:81:52:5a:67:0e:43:25:bc:
                    4d:89:44:d6:9d:70:6c:4a:67:b5:5c:5b:5d:24:a4:
                    32:d6:9d:f3:81:c6:f6:15:ce:9b:7f:c7:01:b9:22:
                    8d:62:d6:2d:c8:4e:d5:2a:69:8e:cf:04:fc:60:89:
                    c4:e8:af:db:5c:64:90:fa:64:a8:6b:4d:3b:b5:8f:
                    d5:48:1c:41:f0:75:46:fd:da:b3:e9:8f:03:8d:b1:
                    11:e2:2b:a7:a7:71:a9:e5:db:37:ad:08:a6:17:c3:
                    cf:8f:c9:2d:9d:9b:c7:e2:b4:cd:4e:23:09:d4:f6:
                    a3:16:cf:5e:d2:ca:83:07:ad:be:c5:47:31:de:6c:
                    50:99:a2:01:70:b0:4c:3e:55:a2:80:57:b4:ce:2a:
                    28:19:4f:26:9b:55:db:01:37:47:40:ef:cb:ab:f0:
                    da:14:c3:19:45:19:36:2c:0b:f7:02:f7:5e:2d:2d:
                    ed:b8:fa:f3:d5:d3:62:df:93:0e:56:36:54:c1:dc:
                    a9:65:c4:f2:3b:ab:ee:74:b2:71:04:7b:0f:fe:3b:
                    f2:fe:b3:f0:93:21:5f:28:69:3b:9c:6b:8e:5b:73:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:48:C1:BE:97:B9:16:A3:54:A0:2D:C0:32:14:BF:D6:5E:7A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/867b2fec-0209-3638-be37-6d2452313ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:90:fb:42:dd:d4:f0:64:65:b9:15:08:3b:9b:7b:d7:a1:
         fa:f7:6b:8e:eb:9a:7f:66:d5:fe:68:7e:aa:a4:00:d4:a5:ac:
         fe:56:a8:8c:97:7b:71:64:dd:c2:32:06:68:b7:d6:02:d7:98:
         07:bd:6d:f8:59:0a:74:ee:5b:34:27:f0:50:2f:38:8e:93:5d:
         dd:9a:b8:ad:51:bd:a9:1c:e1:a3:85:73:2d:ba:c1:6d:32:30:
         a6:11:28:5a:1f:af:10:be:df:d4:e7:48:6e:df:9f:27:5e:02:
         73:55:32:c1:93:fa:da:45:f2:1c:6a:fd:5b:3c:c8:91:a1:a1:
         df:94:4c:43:e5:77:5d:3f:46:78:ed:a3:0d:c2:51:60:47:8c:
         e5:84:74:20:57:11:8a:0b:96:9f:2e:dc:a6:dd:35:5b:81:10:
         10:f1:d8:b7:02:3a:bc:fe:66:ea:5e:3e:cb:c0:34:b0:48:33:
         82:56:71:d1:92:a6:36:7d:36:c1:50:13:02:03:d0:0f:aa:fc:
         af:79:24:13:3a:11:e2:c1:0e:3e:e4:d8:d3:d2:b3:2d:e7:83:
         f1:00:dc:05:79:87:bd:21:0e:3a:10:30:11:ee:1f:bb:37:7f:
         5b:43:0b:2e:55:83:1b:a8:70:3f:c6:73:12:8b:67:46:2d:52:
         5a:f4:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----