Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8d385450-5e14-3513-b8c9-94296213e449.roa
File:                     8d385450-5e14-3513-b8c9-94296213e449.roa (raw, json)
Hash identifier:          hTnCNADfoZ1LPn7i239UbaK+Cs9RtSRbWVWgmsqTvxI=
Subject key identifier:   71:BA:5E:61:A4:C4:2E:3F:45:8B:AD:B6:00:75:04:61:66:10:BA:15
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584237ED87F0F4D8DF6B46493780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8d385450-5e14-3513-b8c9-94296213e449.roa
Signing time:             Wed 14 Jun 2023 16:13:19 +0000
ROA not before:           Wed 14 Jun 2023 16:13:19 +0000
ROA not after:            Tue 12 Sep 2023 16:13:19 +0000
asID:                     11938
IP address blocks:        166.1.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:37:ed:87:f0:f4:d8:df:6b:46:49:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 14 16:13:19 2023 GMT
            Not After : Sep 12 16:13:19 2023 GMT
        Subject: CN=dd52f607-6a97-4f9c-8f89-79e085c8dbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:0b:4b:9e:83:38:4f:e7:1a:de:66:01:4a:
                    d8:53:d6:a9:af:d7:aa:d4:84:78:a9:80:3a:34:3a:
                    20:27:33:b9:d4:04:3d:11:da:ac:21:77:84:0f:f4:
                    52:7a:91:0c:05:c1:70:91:37:d7:69:ce:4d:bd:fa:
                    5b:e9:85:89:3e:d6:ae:27:06:97:92:9a:e8:9f:49:
                    d2:ca:8b:b5:6e:66:0e:c9:19:7e:4d:2b:a9:c8:1e:
                    b2:c0:0b:65:ad:5d:ee:0a:70:54:bb:9b:48:b4:7c:
                    b7:00:55:d2:ad:a2:4b:78:f8:ba:20:b6:44:9c:92:
                    fc:01:b1:f3:db:28:e1:8b:47:a9:4f:fc:47:cb:4f:
                    4c:04:9c:19:5a:95:1c:f5:4e:a6:10:e9:69:d9:58:
                    65:6f:0d:ec:2d:04:d5:d2:76:e9:24:95:a8:42:af:
                    9d:c3:41:42:25:51:13:69:fb:75:9b:d7:71:db:fa:
                    0f:07:3e:4a:ef:d1:2d:0f:08:b2:7b:85:90:c8:24:
                    91:b0:1d:35:6e:f9:c7:c2:88:17:0a:7c:67:eb:48:
                    10:e7:e4:c1:69:ef:9a:94:29:39:f7:d5:c5:6c:aa:
                    54:04:b2:c5:f6:62:97:6c:50:8f:22:1b:17:c7:7c:
                    9f:84:1a:7e:39:da:a0:c5:cc:e2:1b:16:40:0b:dd:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:5E:61:A4:C4:2E:3F:45:8B:AD:B6:00:75:04:61:66:10:BA:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8d385450-5e14-3513-b8c9-94296213e449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:65:a9:36:db:12:3d:ac:89:12:08:c2:be:36:f9:47:ae:
         27:cf:c6:3e:17:39:83:ec:23:d5:5f:a2:b0:be:2c:5a:6f:c3:
         81:84:5f:9a:9e:7d:87:86:60:67:79:85:bb:e6:94:ba:b9:3f:
         b7:e5:1b:1b:c7:c0:cb:e1:b1:b8:a4:82:2c:6e:7a:e2:f6:32:
         14:ca:7e:c1:f8:95:be:5d:fa:b8:16:22:a2:7d:9e:f5:79:f1:
         bc:a0:81:19:70:dd:a2:ff:12:92:f0:52:84:97:88:59:d7:cb:
         34:46:3d:9a:25:c7:f0:61:05:ff:76:c7:69:16:97:36:bf:d8:
         d7:12:39:02:83:ef:88:0b:0d:62:d5:de:ce:2d:72:ed:8e:61:
         2f:e3:0c:b1:0e:57:12:84:51:bb:6a:9f:d7:94:ea:d8:8c:fa:
         16:da:59:dc:87:7b:5e:65:63:9a:82:c1:13:8e:ca:a4:59:2b:
         d4:e5:a7:13:16:26:2e:71:bc:19:c6:02:7b:ce:f6:9f:a0:a4:
         3e:98:ff:23:3f:de:88:48:38:8c:a8:6f:ff:61:7a:02:1b:b4:
         b9:f5:28:2a:af:f6:a4:4f:1e:1f:45:4f:f0:a6:66:f2:f6:18:
         36:52:4a:eb:db:28:1f:04:ef:fc:a2:ec:84:16:7c:4f:c3:c5:
         9b:90:9e:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEI37Yfw9Njfa0ZJN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxNDE2MTMxOVoXDTIzMDkxMjE2MTMxOVowLzEtMCsGA1UEAxMk
ZGQ1MmY2MDctNmE5Ny00ZjljLThmODktNzllMDg1YzhkYmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/YLS56DOE/nGt5mAUrYU9apr9eq1IR4qYA6
NDogJzO51AQ9EdqsIXeED/RSepEMBcFwkTfXac5Nvfpb6YWJPtauJwaXkpron0nS
you1bmYOyRl+TSupyB6ywAtlrV3uCnBUu5tItHy3AFXSraJLePi6ILZEnJL8AbHz
2yjhi0epT/xHy09MBJwZWpUc9U6mEOlp2Vhlbw3sLQTV0nbpJJWoQq+dw0FCJVET
aft1m9dx2/oPBz5K79EtDwiye4WQyCSRsB01bvnHwogXCnxn60gQ5+TBae+alCk5
99XFbKpUBLLF9mKXbFCPIhsXx3yfhBp+OdqgxcziGxZAC92QcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHG6XmGkxC4/RYuttgB1BGFmELoVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGQzODU0NTAtNWUxNC0z
NTEzLWI4YzktOTQyOTYyMTNlNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0FZak22xI9rIkSCMK+NvlHrifPxj4XOYPsI9VforC+LFpvw4GEX5qe
fYeGYGd5hbvmlLq5P7flGxvHwMvhsbikgixueuL2MhTKfsH4lb5d+rgWIqJ9nvV5
8byggRlw3aL/EpLwUoSXiFnXyzRGPZolx/BhBf92x2kWlza/2NcSOQKD74gLDWLV
3s4tcu2OYS/jDLEOVxKEUbtqn9eU6tiM+hbaWdyHe15lY5qCwROOyqRZK9TlpxMW
Ji5xvBnGAnvO9p+gpD6Y/yM/3ohIOIyob/9hegIbtLn1KCqv9qRPHh9FT/CmZvL2
GDZSSuvbKB8E7/yi7IQWfE/DxZuQnps=
-----END CERTIFICATE-----