Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97df25cc-d393-3cbc-8bd1-f22395cacd20.roa
File:                     97df25cc-d393-3cbc-8bd1-f22395cacd20.roa (raw, json)
Hash identifier:          AKYZlofst57TxJaWVwBwBLKjzfdW6jYdiHyk1xhUcwQ=
Subject key identifier:   87:92:15:0F:F0:0F:56:09:89:BF:52:8F:D7:15:94:82:B9:D0:49:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842B0656F3706D97A7E3BF0ED80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97df25cc-d393-3cbc-8bd1-f22395cacd20.roa
Signing time:             Thu 27 Jul 2023 19:51:55 +0000
ROA not before:           Thu 27 Jul 2023 19:51:55 +0000
ROA not after:            Wed 25 Oct 2023 19:51:55 +0000
asID:                     11798
IP address blocks:        166.1.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:6f:37:06:d9:7a:7e:3b:f0:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 27 19:51:55 2023 GMT
            Not After : Oct 25 19:51:55 2023 GMT
        Subject: CN=f4643627-f1a7-41e3-a70d-6ec260d78ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:12:cd:cb:65:f4:7a:0c:10:0c:ce:ea:ea:
                    84:7b:37:ef:fd:85:07:26:1e:9c:04:7b:a1:6c:1d:
                    be:0f:92:df:72:04:94:c5:92:81:aa:3f:be:15:3d:
                    f5:49:ee:7b:88:7a:19:27:dd:4d:51:04:e4:ff:2f:
                    7b:e2:79:fd:db:4e:6c:30:df:60:81:41:8f:72:a6:
                    3f:7b:37:58:16:fb:03:a3:e0:15:85:7c:3b:20:f9:
                    05:6f:af:15:fb:ca:73:7a:2e:18:8d:13:34:13:43:
                    88:5e:75:01:f4:0f:81:42:d2:53:87:6d:36:18:df:
                    7f:09:74:c4:20:e7:9e:54:b4:ae:89:ac:f3:f8:af:
                    01:d1:fb:21:11:c9:5d:b3:83:ca:ef:77:e3:56:5e:
                    58:31:9c:fe:bc:1e:b1:11:16:97:4c:49:92:cb:b3:
                    de:93:8d:61:9b:33:93:4e:72:82:81:38:a6:d6:6d:
                    45:9f:86:a6:59:cb:b0:84:e1:c5:21:ff:aa:ca:d3:
                    78:9a:e5:b3:1e:3a:86:a4:4c:a6:d9:d4:4f:7b:8b:
                    a5:28:73:f3:83:97:a3:85:e3:c7:92:09:cf:18:e2:
                    e2:7d:5e:ae:9e:18:59:17:74:0d:47:b0:d7:af:35:
                    a2:b0:16:1b:83:c7:76:c4:bf:e1:7f:ac:e1:22:aa:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:15:0F:F0:0F:56:09:89:BF:52:8F:D7:15:94:82:B9:D0:49:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/97df25cc-d393-3cbc-8bd1-f22395cacd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:00:72:6b:7c:d3:0e:bc:e4:0d:91:13:34:92:dc:1c:c7:a2:
         7c:14:7d:45:6c:e9:bd:bb:10:98:d5:a4:7b:4b:2b:31:c6:b1:
         dd:cb:95:8b:08:17:2b:25:40:b1:b0:a6:93:e7:7f:7a:50:5e:
         6e:63:3c:dc:15:a6:24:68:26:3c:4d:16:7f:22:46:38:aa:26:
         c1:37:df:95:a9:4e:94:05:35:4e:38:7c:cc:36:dc:53:bd:13:
         35:ee:17:b2:df:8d:1e:3e:26:e5:c0:19:43:e3:2b:77:a0:91:
         0c:db:3d:1f:87:d8:38:a8:4c:a9:0b:e0:5d:04:2d:92:2e:3a:
         48:03:a0:19:37:fd:bb:0e:ed:82:f8:6b:24:ff:e1:d8:72:20:
         29:e0:00:02:da:75:34:40:2f:82:a8:a8:be:9e:c4:a0:7d:3f:
         92:54:b7:49:44:ea:f1:4d:4f:42:cb:fa:58:45:b6:de:71:7a:
         09:29:b4:1d:74:ac:6b:22:25:ee:ea:19:97:dd:40:6a:60:37:
         18:e2:93:77:8d:3e:9e:c7:6d:19:d8:c4:22:11:13:af:8d:e8:
         d3:be:46:de:e5:7f:c1:ed:51:a5:01:08:8a:93:30:b5:40:b8:
         82:1f:1b:15:57:3a:b9:6c:aa:3c:33:ff:ae:6f:d5:1a:88:22:
         5f:00:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----