Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ad652e8-cf56-38ef-a015-f92938a407de.roa
File:                     8ad652e8-cf56-38ef-a015-f92938a407de.roa (raw, json)
Hash identifier:          J/2afXyIYRiUPaW9V2KBlOxVoPuRjwhmuNjwWt/PXHQ=
Subject key identifier:   32:55:D8:69:2A:61:8B:29:B6:B1:33:6A:21:CB:2F:E9:99:72:A2:3F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843362999EA1A5F11BD3266F2C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ad652e8-cf56-38ef-a015-f92938a407de.roa
Signing time:             Wed 13 Sep 2023 17:49:40 +0000
ROA not before:           Wed 13 Sep 2023 17:49:40 +0000
ROA not after:            Tue 12 Dec 2023 18:49:40 +0000
asID:                     36113
IP address blocks:        166.0.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:36:29:99:ea:1a:5f:11:bd:32:66:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 17:49:40 2023 GMT
            Not After : Dec 12 18:49:40 2023 GMT
        Subject: CN=d01ea821-f881-4b65-8cde-2f9eb5717793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:25:0b:4a:da:46:73:d4:13:22:2b:d8:df:
                    65:85:82:43:75:e9:18:bf:83:70:cd:2f:e0:9c:b6:
                    48:97:ea:cb:58:09:63:82:de:f3:e5:f4:45:04:6a:
                    98:89:ef:0c:15:00:53:79:50:be:64:4a:e1:6c:58:
                    06:81:6f:38:45:e0:1d:15:bc:ef:58:ed:f0:85:40:
                    dd:9c:91:cf:5d:7a:82:cf:10:79:9b:54:5d:bc:a3:
                    b0:a0:ce:f3:ba:33:25:2d:85:48:41:2a:87:e4:96:
                    71:d2:0b:bc:e6:63:41:bd:f1:80:c1:73:69:76:35:
                    bc:96:6b:8a:6a:ed:d8:22:57:49:83:95:f0:16:15:
                    28:b4:87:3e:39:c9:98:34:79:dd:f6:a0:d7:98:f3:
                    46:65:3b:26:24:dd:07:3a:58:aa:7e:19:b6:04:f1:
                    bb:62:b8:7b:7f:db:f8:0d:19:cc:bd:9f:60:9f:90:
                    0d:03:3c:f2:2b:72:53:f1:59:1d:f7:65:97:ad:7d:
                    96:71:93:fc:b8:81:31:1c:15:b7:3c:e4:07:4f:aa:
                    54:77:c5:4e:4d:c3:c0:dd:58:90:1b:33:6c:d2:06:
                    6e:4e:f3:e5:43:7e:f6:70:41:01:6b:f4:4d:38:09:
                    3b:b7:96:7d:fe:29:a0:88:1c:ef:2b:02:a2:ce:df:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:55:D8:69:2A:61:8B:29:B6:B1:33:6A:21:CB:2F:E9:99:72:A2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8ad652e8-cf56-38ef-a015-f92938a407de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:c3:5e:e8:83:67:83:07:28:6c:e8:5b:a1:fd:64:85:ed:
         32:11:02:dc:85:3a:aa:26:fc:56:43:40:df:b2:3d:c2:25:05:
         71:2b:41:43:ed:ae:26:25:ae:4a:b8:2a:70:02:f8:24:ad:83:
         92:21:0c:34:3a:c9:a0:17:55:10:98:6d:e4:1e:1c:fd:2e:f1:
         08:5f:b1:ea:5c:d6:46:e0:63:69:65:bf:f5:35:a0:50:5c:78:
         8d:8e:41:2e:5d:1b:1c:e1:b2:c8:b4:fb:38:fe:7e:f2:4b:ad:
         38:79:af:86:4b:dd:9c:65:8a:4f:c5:ef:a2:2a:ce:7d:17:dc:
         d5:32:d2:91:c3:47:d4:ac:15:55:73:c8:35:31:1d:0b:07:b9:
         ee:87:6d:2d:7f:3a:23:6b:86:17:8f:cb:88:74:75:88:cb:83:
         db:8d:17:a1:bf:01:df:30:9d:61:be:e5:75:3c:8e:bb:80:fe:
         10:17:04:fa:19:fe:66:a9:6e:45:99:8f:2e:b5:9b:f5:7a:49:
         a7:8a:c0:25:b6:b4:f0:18:59:15:4e:8c:b0:1d:fd:33:80:b8:
         40:a8:3f:69:50:fc:30:f2:e6:0e:68:0d:80:7e:4d:3e:61:39:
         52:29:c7:aa:e9:94:53:b5:3f:94:2d:b7:f0:77:0e:94:9e:4d:
         84:a1:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----