Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89830575-d828-3e00-93a1-4004faaa801d.roa
File:                     89830575-d828-3e00-93a1-4004faaa801d.roa (raw, json)
Hash identifier:          te5PKl1l6QlfIXrMgTtIGnrGL92ZgPkHWd70ZwOq+Fc=
Subject key identifier:   6C:C6:0B:50:0F:50:B2:D6:83:69:BF:A3:82:6C:FF:C5:47:B3:DC:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584336FF602F92B868DD7A0C2BE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89830575-d828-3e00-93a1-4004faaa801d.roa
Signing time:             Thu 14 Sep 2023 01:00:23 +0000
ROA not before:           Thu 14 Sep 2023 01:00:23 +0000
ROA not after:            Wed 13 Dec 2023 02:00:23 +0000
asID:                     834
IP address blocks:        166.0.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:36:ff:60:2f:92:b8:68:dd:7a:0c:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 14 01:00:23 2023 GMT
            Not After : Dec 13 02:00:23 2023 GMT
        Subject: CN=12ab7540-2cb8-48ad-b8d9-b31df5f4380a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:47:51:70:42:31:a9:fa:3d:d6:c9:72:f3:
                    b7:61:0c:8c:4d:87:5d:bb:81:b1:fd:78:55:6f:13:
                    e8:a5:15:40:1b:e4:ca:32:83:cd:8a:0f:e7:4b:df:
                    3a:cf:04:d1:5f:ce:4d:fa:e7:87:24:be:c0:b7:43:
                    11:06:6c:b4:b0:1c:ac:e3:55:1e:b8:90:49:ee:53:
                    dc:ed:21:ce:6d:4c:79:60:75:0c:be:34:d8:56:29:
                    1f:2b:e0:b2:e3:3a:ec:c9:4d:5a:99:a3:cf:1e:4a:
                    30:3c:6b:4b:e7:13:d5:ac:6e:ed:1a:32:27:1c:0a:
                    eb:1e:07:a9:73:29:a1:27:86:c2:03:cc:48:7d:2c:
                    bd:aa:fe:e9:60:4f:c5:dd:65:41:0e:c1:62:58:d7:
                    ba:b9:68:0f:58:a4:b2:a3:9e:04:b8:a5:62:5f:eb:
                    a7:55:18:18:7d:db:17:00:14:74:24:6f:a1:80:c5:
                    14:9b:1c:45:2e:6e:0a:3a:f8:4d:6e:71:49:f7:40:
                    da:ac:8a:e5:84:3e:e7:18:b6:7a:29:10:3a:a2:77:
                    7e:aa:33:5e:56:34:ff:e9:87:29:e3:6c:69:4e:7d:
                    55:23:2d:8c:c1:d0:e4:ad:fb:75:b3:fb:a3:f3:d9:
                    7a:85:69:5c:52:39:af:d5:af:e5:92:e4:54:7f:08:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C6:0B:50:0F:50:B2:D6:83:69:BF:A3:82:6C:FF:C5:47:B3:DC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/89830575-d828-3e00-93a1-4004faaa801d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:60:4c:ee:96:59:11:96:ea:dd:0e:37:b2:03:3f:72:31:
         05:5f:d9:96:8a:db:25:80:a6:cf:43:ed:49:0e:83:4e:a0:d5:
         74:2f:3b:da:8d:95:3b:55:b0:7d:51:6d:c2:4e:48:47:55:c1:
         46:a2:f4:65:50:7a:05:8b:ba:f2:1f:cd:3b:bb:b9:69:6c:ff:
         81:71:96:eb:b9:9f:a6:32:68:a2:11:20:80:bc:92:bd:58:fd:
         57:72:00:9d:0a:25:94:3c:9e:cf:65:22:fe:91:28:d1:bf:62:
         5b:82:b9:ea:d0:d5:9f:c0:ee:de:e2:b0:5a:33:85:60:d0:3e:
         ed:88:56:b0:c5:a9:da:cb:2a:4f:0e:f6:ad:05:2d:67:7f:cf:
         a9:07:39:ab:2d:85:90:56:d8:05:ed:19:75:4d:0b:42:7f:86:
         1e:74:20:d3:a0:9a:52:2f:e2:5a:48:14:71:87:20:56:9a:c1:
         98:b7:9b:59:27:ac:70:ab:7a:f6:3d:92:ce:3b:f2:74:8d:ef:
         cf:83:17:ab:47:9f:73:e6:6f:75:3a:05:f1:a1:59:18:40:a2:
         f1:4c:2c:00:d9:89:7a:55:25:cc:2e:bc:5c:f6:5d:ce:b1:99:
         30:77:21:0b:9e:8c:9c:e5:34:67:34:7a:3b:f0:27:1d:3f:5d:
         5f:0a:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----