Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/92767299-0afc-3be8-806d-cc46c469b6cb.roa
File:                     92767299-0afc-3be8-806d-cc46c469b6cb.roa (raw, json)
Hash identifier:          pYF0PZnakh4KimfdgLTejtDkdQTUkkDJmKp7+/H0Fkw=
Subject key identifier:   95:56:AC:79:83:D4:EF:86:0B:B1:F7:A9:86:E8:F5:09:B6:99:13:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842F60C997088340F1008333000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/92767299-0afc-3be8-806d-cc46c469b6cb.roa
Signing time:             Mon 21 Aug 2023 18:39:30 +0000
ROA not before:           Mon 21 Aug 2023 18:39:30 +0000
ROA not after:            Sun 19 Nov 2023 19:39:30 +0000
asID:                     21082
IP address blocks:        166.1.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f6:0c:99:70:88:34:0f:10:08:33:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 21 18:39:30 2023 GMT
            Not After : Nov 19 19:39:30 2023 GMT
        Subject: CN=037dc01c-f57c-4742-aa49-b5092bf007c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:90:24:aa:ce:5f:92:95:b6:47:31:f6:4f:
                    de:71:e9:78:56:a3:78:e2:9e:2c:43:c1:20:f5:20:
                    c9:af:cf:81:d3:7d:08:8c:3c:77:24:44:7e:54:4e:
                    4f:e7:58:69:5d:4f:86:13:96:49:cc:33:b7:47:3b:
                    56:79:09:13:3d:3d:b9:47:c4:ff:20:9a:28:bf:91:
                    9e:d4:0b:4a:be:71:55:ae:69:cd:2a:74:67:fd:1a:
                    74:e7:7e:d8:80:0c:83:37:64:b5:15:15:75:19:a2:
                    51:f3:ed:f7:1e:6d:47:4e:7d:9d:83:88:03:6b:61:
                    5e:f5:ff:4f:dc:7c:9e:42:55:cd:bf:ac:70:d8:5d:
                    ae:70:37:48:19:de:b2:e0:c0:40:15:d1:ee:c3:3c:
                    73:17:dc:97:46:56:83:fd:9e:38:0d:79:de:eb:ef:
                    f7:fc:79:33:15:b7:e7:d0:69:61:24:1d:c2:7a:9a:
                    b7:a0:54:6f:1e:b9:cb:8f:d6:dc:87:a1:8c:60:89:
                    e5:77:b6:69:67:6b:dc:cd:df:7a:09:58:b9:55:72:
                    19:2e:0f:a2:d0:ac:a5:12:6f:97:44:53:5e:7a:67:
                    78:85:0d:c8:39:df:33:72:1a:e0:0b:b7:84:a3:97:
                    2b:61:de:4f:3a:2f:cb:37:0c:d6:b8:c8:8c:0c:b4:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:AC:79:83:D4:EF:86:0B:B1:F7:A9:86:E8:F5:09:B6:99:13:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/92767299-0afc-3be8-806d-cc46c469b6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:bd:7d:b9:64:08:87:31:ce:c8:bc:f1:76:af:ed:63:67:4a:
         2b:01:62:fe:50:df:2b:e2:78:29:02:11:b3:15:f4:80:1b:cb:
         b4:7d:29:eb:5b:45:08:e7:96:58:7d:7d:a8:76:f1:54:cb:96:
         d8:f1:82:7c:5c:65:3c:9d:48:7d:af:45:2b:fe:16:98:ba:a9:
         11:36:71:fa:01:d4:24:01:67:cc:82:f1:b5:7b:12:e0:07:32:
         d6:b6:83:c9:66:7d:0d:4f:ac:78:0f:b0:15:e3:71:6b:09:19:
         d9:67:05:74:e7:88:93:8b:bf:08:01:65:72:8c:96:4e:16:94:
         29:a1:8b:7c:73:1e:ab:6b:40:c9:94:75:36:a2:eb:bb:83:39:
         8d:17:a9:be:46:f9:28:eb:f3:64:c9:2d:b9:11:b5:58:fa:12:
         17:53:ba:5e:1b:20:12:68:7e:22:86:98:fe:0c:2d:a0:33:87:
         4e:57:97:3a:68:ac:82:dd:83:71:6a:13:27:b2:1a:7e:08:14:
         63:51:8f:0e:04:da:fc:71:d0:3d:be:6e:33:41:02:23:da:bf:
         6d:8f:23:c0:1c:f2:e0:32:5d:61:6f:7b:e7:61:26:06:3f:5f:
         1f:0d:55:5d:e9:3b:fe:cd:8f:90:86:8c:0f:81:19:cb:47:58:
         c3:6a:51:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEL2DJlwiDQPEAgzMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgyMTE4MzkzMFoXDTIzMTExOTE5MzkzMFowLzEtMCsGA1UEAxMk
MDM3ZGMwMWMtZjU3Yy00NzQyLWFhNDktYjUwOTJiZjAwN2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0aQJKrOX5KVtkcx9k/ecel4VqN44p4sQ8Eg
9SDJr8+B030IjDx3JER+VE5P51hpXU+GE5ZJzDO3RztWeQkTPT25R8T/IJoov5Ge
1AtKvnFVrmnNKnRn/Rp0537YgAyDN2S1FRV1GaJR8+33Hm1HTn2dg4gDa2Fe9f9P
3HyeQlXNv6xw2F2ucDdIGd6y4MBAFdHuwzxzF9yXRlaD/Z44DXne6+/3/HkzFbfn
0GlhJB3Cepq3oFRvHrnLj9bch6GMYInld7ZpZ2vczd96CVi5VXIZLg+i0KylEm+X
RFNeemd4hQ3IOd8zchrgC7eEo5crYd5POi/LNwzWuMiMDLTGjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVWrHmD1O+GC7H3qYbo9Qm2mRMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTI3NjcyOTktMGFmYy0z
YmU4LTgwNmQtY2M0NmM0NjliNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE69fblkCIcxzsi88Xav7WNnSisBYv5Q3yvieCkCEbMV9IAby7R9Ketb
RQjnllh9fah28VTLltjxgnxcZTydSH2vRSv+Fpi6qRE2cfoB1CQBZ8yC8bV7EuAH
Mta2g8lmfQ1PrHgPsBXjcWsJGdlnBXTniJOLvwgBZXKMlk4WlCmhi3xzHqtrQMmU
dTai67uDOY0Xqb5G+Sjr82TJLbkRtVj6EhdTul4bIBJofiKGmP4MLaAzh05Xlzpo
rILdg3FqEyeyGn4IFGNRjw4E2vxx0D2+bjNBAiPav22PI8Ac8uAyXWFve+dhJgY/
Xx8NVV3pO/7Nj5CGjA+BGctHWMNqUdI=
-----END CERTIFICATE-----