Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8dcff4c0-2310-3476-a311-06cec7a7e5d9.roa
File:                     8dcff4c0-2310-3476-a311-06cec7a7e5d9.roa (raw, json)
Hash identifier:          Y5Rf6ykeFUJwdTn0oiest8PJsdoF587IRR85zvX6MMA=
Subject key identifier:   C0:12:15:C3:A4:F9:CD:E5:95:AF:DD:2E:2D:5C:30:B4:AB:DF:5A:C7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845059125BB078513E68F1DA260
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8dcff4c0-2310-3476-a311-06cec7a7e5d9.roa
Signing time:             Mon 26 Feb 2024 17:37:34 +0000
ROA not before:           Mon 26 Feb 2024 17:37:34 +0000
ROA not after:            Sun 26 May 2024 16:37:34 +0000
asID:                     834
IP address blocks:        108.165.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 16:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:91:25:bb:07:85:13:e6:8f:1d:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 26 17:37:34 2024 GMT
            Not After : May 26 16:37:34 2024 GMT
        Subject: CN=f2755429-1924-4ded-8ddd-579d36b62d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:cb:29:84:26:75:88:71:e3:7a:75:19:d4:
                    a8:76:d9:36:da:35:fb:ba:68:9c:e8:8b:71:5d:78:
                    de:7a:fc:de:75:ce:22:5e:1d:28:e6:59:b9:3f:ce:
                    6e:7f:fc:64:90:fe:9d:3e:ee:5d:c6:2c:46:95:90:
                    0c:77:40:c9:6c:3c:7b:38:51:11:de:4c:d3:15:2e:
                    26:3a:16:ef:c0:21:7b:7c:92:50:4d:cf:64:88:89:
                    8f:72:5e:ca:90:0a:8b:5c:50:c1:b1:e5:bd:bb:95:
                    8c:d4:b6:78:d7:e1:16:cf:73:1f:32:bb:54:2b:69:
                    22:c7:1a:68:dc:06:c3:f3:27:88:3e:93:43:3b:1c:
                    0f:32:5e:15:96:49:09:de:af:73:cb:ab:11:58:5a:
                    01:d8:63:63:0e:33:ba:12:65:96:f3:13:66:09:3b:
                    9f:39:8c:65:3b:35:47:3f:c5:5e:34:04:95:fb:b8:
                    72:db:fe:7a:72:7d:c5:92:ac:e7:ec:73:d1:e9:cf:
                    0f:7e:4f:e8:91:55:d6:67:b4:47:68:80:42:80:57:
                    62:d6:ad:be:57:59:cf:d4:46:4c:1c:dc:cb:f6:98:
                    92:91:52:08:0d:1b:ac:72:fc:f6:5b:c1:dd:34:7a:
                    f5:a4:b3:30:0b:bb:1b:8f:8a:26:0b:92:e9:9d:7f:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:12:15:C3:A4:F9:CD:E5:95:AF:DD:2E:2D:5C:30:B4:AB:DF:5A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8dcff4c0-2310-3476-a311-06cec7a7e5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f0:d1:c1:6e:78:5b:a9:22:4f:cb:70:62:02:f9:02:16:ed:
         65:49:ee:a0:84:6c:b6:75:1b:c5:01:e6:90:16:e1:fd:69:20:
         2d:bc:38:39:26:e3:21:08:55:1a:5e:06:73:99:ef:c2:1d:35:
         21:1b:d4:cb:b9:a6:cd:18:fe:23:fe:ba:c9:ee:8d:0b:ff:33:
         2d:fd:5b:18:22:02:12:60:1e:50:ae:c8:85:dd:f2:a3:6b:dc:
         74:1d:61:fa:45:b2:02:eb:96:fc:a7:fd:df:f6:db:2d:38:47:
         06:3c:6b:29:cb:89:bf:e4:97:b0:a9:aa:59:9e:31:8d:bd:c9:
         e7:a8:5f:f5:70:7a:8d:b7:68:b1:71:9c:73:cd:0e:5d:c9:90:
         26:54:b5:c5:3b:83:9e:9c:a2:87:36:21:0e:86:f5:fb:35:0d:
         a8:bc:dd:4a:1c:dd:5f:e5:bb:fe:9f:e0:d8:51:29:45:6c:73:
         d9:95:18:96:4d:f6:86:87:d0:b1:f2:e6:86:7e:5f:91:c7:29:
         05:c8:be:c2:93:93:3e:1b:1e:8f:b3:ac:74:c6:7c:05:8e:27:
         65:94:d0:f7:ae:c5:d6:db:fd:37:92:a2:f4:d8:94:b0:05:3b:
         d6:d3:f5:d0:6d:53:88:62:6e:fe:c6:7e:2c:07:98:31:5a:bf:
         36:66:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----