Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8eae73bb-72d5-32e8-b460-8a64c166196e.roa
File:                     8eae73bb-72d5-32e8-b460-8a64c166196e.roa (raw, json)
Hash identifier:          ICXD/b+tzXjkFipk1Q3qEHOwLsasaAEtPSswW5IEApA=
Subject key identifier:   63:7B:5D:DD:6E:91:4E:1C:46:4A:BA:DD:71:8F:B7:A4:42:00:10:0D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843F12D840DFF3C531287B36C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8eae73bb-72d5-32e8-b460-8a64c166196e.roa
Signing time:             Sun 19 Nov 2023 17:33:43 +0000
ROA not before:           Sun 19 Nov 2023 17:33:43 +0000
ROA not after:            Sat 17 Feb 2024 17:33:43 +0000
asID:                     834
IP address blocks:        108.165.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f1:2d:84:0d:ff:3c:53:12:87:b3:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 19 17:33:43 2023 GMT
            Not After : Feb 17 17:33:43 2024 GMT
        Subject: CN=982f8ba8-b450-4ddd-98f2-2e6fd9423a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:57:60:7c:5c:cc:9c:c7:5e:f7:e5:7e:3e:
                    96:f3:17:0c:06:68:ea:97:cd:b9:04:37:de:d3:43:
                    fe:e9:12:04:68:43:0a:35:ed:df:fc:ef:c6:89:aa:
                    3e:ba:dc:c4:7a:c8:7f:68:af:46:a0:5f:a0:6d:63:
                    3d:41:78:99:0c:1b:92:23:1f:e8:1f:56:87:38:6a:
                    cc:87:e0:31:19:7a:c7:ac:cc:b0:86:26:40:37:c3:
                    9a:cc:8f:5e:2d:0a:88:a7:96:9f:ae:e5:61:60:1a:
                    c9:07:d1:a2:65:7b:e1:03:72:a5:30:8c:c1:dd:bb:
                    db:b3:36:71:0f:eb:9c:ae:dc:19:4a:82:48:57:52:
                    65:f7:ac:09:e2:32:c5:52:71:ab:19:82:3a:eb:71:
                    e8:5f:b5:9d:4c:b2:f8:da:16:ed:89:c3:01:9d:57:
                    9b:5a:40:80:37:8a:ba:98:e7:46:35:50:fb:15:b3:
                    75:f8:ab:73:48:93:24:7d:d9:29:70:14:4c:a2:6b:
                    8c:e5:9d:a8:0d:4e:44:e3:44:d8:7a:90:11:94:39:
                    0e:d2:c2:db:6c:cf:84:ae:b1:ff:12:00:e9:9e:09:
                    4e:ed:a6:22:8f:76:79:b5:9f:ec:c0:e6:41:99:b0:
                    e9:c2:ef:33:3f:a2:09:22:93:8c:a5:37:6b:f3:cb:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:5D:DD:6E:91:4E:1C:46:4A:BA:DD:71:8F:B7:A4:42:00:10:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8eae73bb-72d5-32e8-b460-8a64c166196e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:7a:2d:30:bc:6d:ec:87:92:5e:8b:04:cb:2e:42:ab:ef:
         05:94:0e:3f:07:e2:49:72:5e:8e:e9:70:1e:9e:f6:a6:1d:46:
         3a:23:18:74:67:23:a0:a1:10:84:5c:36:f4:0a:ac:23:be:b8:
         4c:80:ed:9a:ff:b1:32:91:12:22:b4:d5:5f:e2:d7:a8:13:21:
         36:36:9e:51:29:df:7a:a7:a1:b4:9d:4e:df:de:f7:d8:9e:24:
         59:ae:20:7e:e7:6b:02:71:4e:42:75:80:0e:4f:a5:76:ba:af:
         c0:00:33:6a:49:27:6e:6f:1d:f4:56:d1:c0:5f:3f:07:bd:47:
         a9:7e:6b:fd:cb:8b:83:30:21:61:bf:d3:fc:4f:1f:95:11:88:
         22:3e:2b:52:6e:5f:28:38:ec:63:04:18:44:f9:c7:82:46:69:
         e5:d6:6d:31:7e:f7:43:5f:ec:a0:26:2c:c3:2c:e6:7d:aa:4c:
         9a:ae:c5:1e:39:33:0e:13:cc:25:67:34:bf:67:1a:72:23:6c:
         7c:de:01:77:f9:3e:95:4e:c1:3b:6b:48:38:79:fc:9e:81:c1:
         88:3b:45:9f:5c:9b:19:30:b6:fd:01:7f:f5:ae:7f:49:56:6a:
         cd:2b:e3:08:fb:65:14:a8:41:38:0d:b9:c3:8c:80:1d:73:65:
         82:10:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----