Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cc0f989-b661-3c3b-84e1-52541cf6c789.roa
File:                     9cc0f989-b661-3c3b-84e1-52541cf6c789.roa (raw, json)
Hash identifier:          o8Yhl5vwOaPRl3TNMUTe7iGcQS+Z4xBWmOp5Etb+0Zg=
Subject key identifier:   67:F3:C0:7B:DC:68:84:7B:66:3F:2D:5F:0F:63:50:36:8F:35:44:EC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446E9866CF69F55126591C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cc0f989-b661-3c3b-84e1-52541cf6c789.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 08:49:36 +0000
asID:                     11798
IP address blocks:        166.1.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:e9:86:6c:f6:9f:55:12:65:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 08:49:36 2023 GMT
        Subject: CN=24198bf8-abbb-4ac6-a779-4738a978141c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:81:f9:66:f5:42:c5:4c:f4:26:d6:77:26:
                    dc:13:67:21:78:5f:b0:c6:dd:02:fc:15:53:51:62:
                    e9:48:9a:92:b6:05:9a:9c:04:03:c1:6c:55:9a:33:
                    7f:ab:96:bf:66:d1:ed:c7:e7:7b:2a:71:cb:b2:bd:
                    1d:33:b1:36:cc:14:a9:40:ec:b0:ef:6e:93:9c:ea:
                    36:1c:c9:70:0c:70:12:19:99:1e:83:19:73:19:e6:
                    ab:14:6e:43:67:fa:74:b8:92:a0:76:88:76:ff:01:
                    cc:84:c0:e9:07:09:bb:16:45:04:74:24:fc:6f:cc:
                    94:4a:53:dc:54:a0:7d:3b:9e:cb:ef:9c:66:42:82:
                    eb:54:b7:5f:b2:73:54:7f:1a:36:49:8a:8a:73:cf:
                    c4:a6:27:bd:a2:50:c2:da:bc:0b:74:15:34:10:9f:
                    37:aa:9b:25:50:12:aa:ee:9c:59:d0:03:d8:a1:f7:
                    3f:03:4c:68:5b:31:7e:c9:e7:1a:9a:11:16:53:1c:
                    27:7b:39:e5:45:30:db:ec:ca:9f:f7:3d:9d:ea:cb:
                    f7:c7:33:52:dc:9a:da:15:ce:12:07:a5:c9:fa:18:
                    e5:18:5e:82:20:5d:de:e3:d5:a9:c7:a2:8b:a4:c2:
                    c6:de:f4:c8:53:73:e0:62:ec:a5:63:57:41:dc:61:
                    48:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:C0:7B:DC:68:84:7B:66:3F:2D:5F:0F:63:50:36:8F:35:44:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cc0f989-b661-3c3b-84e1-52541cf6c789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:79:32:58:86:82:f2:34:56:2b:b8:6a:63:ca:b7:8e:b0:a3:
         83:58:6c:ae:cb:97:d3:17:a4:08:4b:6f:6f:f3:7f:44:3c:54:
         1a:24:60:8d:b9:a0:50:5d:7b:75:40:4d:59:98:1c:99:12:99:
         09:6c:cc:3f:be:d0:53:48:56:6e:24:02:21:e0:b0:1d:43:3a:
         86:be:21:f2:ad:3e:c8:f8:1c:b2:fd:12:08:48:7d:b8:95:34:
         6d:66:9f:3b:54:8e:95:2f:64:78:08:80:a3:fc:38:5b:2d:95:
         1e:37:6a:8b:01:30:80:25:be:bc:31:ad:7f:b0:1a:bc:07:a3:
         98:6c:62:5b:38:10:76:e1:aa:34:aa:e9:09:ff:2b:4b:c7:23:
         dc:7f:28:b4:0b:d6:bf:5f:53:18:c6:e1:a3:f7:3e:7b:be:17:
         8d:85:ce:a1:02:90:67:08:e3:43:89:a5:3b:d6:a0:1c:87:ab:
         31:8d:18:20:f0:16:b4:14:3b:82:ee:56:9e:18:62:1d:6b:d5:
         42:fb:ff:35:db:2e:5b:24:5f:a1:1b:3a:c9:fe:f4:2a:64:d8:
         25:d8:32:9e:7d:41:e9:67:e5:94:32:26:b7:a4:9c:b0:5d:78:
         7f:5b:9b:78:e7:61:d4:cf:ad:60:87:9c:8d:21:f2:0a:e9:2e:
         76:8a:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----