Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1ef13c5-d7a5-3078-b804-f13d54869134.roa
File:                     a1ef13c5-d7a5-3078-b804-f13d54869134.roa (raw, json)
Hash identifier:          XWydoL55r6WFJnLQ5u1G0dwsBWw6Wuve//xVkZQFE6A=
Subject key identifier:   28:BF:8C:02:FA:85:8F:11:5C:E1:CE:02:AD:6D:3B:66:7C:75:D9:FF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842DE4D44355535DBB91281CD5C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1ef13c5-d7a5-3078-b804-f13d54869134.roa
Signing time:             Sun 13 Aug 2023 06:30:24 +0000
ROA not before:           Sun 13 Aug 2023 06:30:24 +0000
ROA not after:            Sat 11 Nov 2023 07:30:24 +0000
asID:                     21082
IP address blocks:        166.1.67.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:de:4d:44:35:55:35:db:b9:12:81:cd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 13 06:30:24 2023 GMT
            Not After : Nov 11 07:30:24 2023 GMT
        Subject: CN=c8e5bd75-2482-4e05-9cf6-7e79990964e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:54:43:a5:c1:d8:bc:cc:28:23:a0:58:cf:
                    c7:94:9d:9c:64:27:51:a3:7b:38:b0:87:69:9b:5c:
                    db:cc:30:97:5e:60:4c:e0:b3:57:5a:24:bc:7c:d1:
                    7a:33:a9:3e:ac:e1:e8:53:50:de:72:91:90:29:84:
                    06:5b:77:ff:5d:74:6f:3f:6d:85:4f:3a:fd:aa:ca:
                    d2:d0:1f:cd:ae:66:63:40:e4:3c:77:66:e3:f7:d3:
                    dc:8d:bd:d9:7f:66:87:de:52:89:34:98:e0:ac:fc:
                    54:fd:7e:e0:e4:38:48:97:1b:cd:67:3a:ba:2a:26:
                    70:f1:b4:36:2a:2c:53:10:bc:a7:62:20:67:39:97:
                    ab:f9:ae:6a:02:76:e0:5b:6f:11:9b:87:57:56:cd:
                    d3:52:16:8c:2a:72:e4:0b:97:c5:a7:e3:cc:d3:67:
                    ce:ea:c5:b0:ed:6c:bf:41:7c:93:dd:99:a8:ba:a1:
                    9f:3e:f2:ce:7f:99:a0:ac:0a:e4:2a:b6:8b:ac:25:
                    33:31:34:e6:a0:2d:fd:a0:f4:b1:54:c4:fa:e9:ed:
                    e9:3f:5d:73:14:78:db:44:56:3e:fe:db:91:22:74:
                    f8:52:ac:2c:80:8e:09:da:49:40:e8:62:84:b0:9a:
                    bf:6e:2a:7b:6a:6f:ac:cb:47:f7:b5:16:20:7f:16:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:8C:02:FA:85:8F:11:5C:E1:CE:02:AD:6D:3B:66:7C:75:D9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1ef13c5-d7a5-3078-b804-f13d54869134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:24:87:83:59:bb:b0:a4:4c:e7:30:44:e5:7d:75:9a:4b:b2:
         c2:b4:02:d6:26:b4:86:d6:65:8e:bf:cb:55:57:ff:fc:b5:67:
         20:a1:21:e7:e0:32:7b:29:2f:1d:4a:fd:b8:82:14:64:1e:1f:
         a0:58:69:5e:bb:a2:56:7d:d8:97:86:5a:73:82:be:1e:c5:84:
         de:95:65:6c:a7:d1:13:35:a6:ad:27:31:93:e9:b7:2b:b8:96:
         b8:19:b9:94:3d:fa:b3:3c:dd:0e:1f:e2:54:5e:56:fa:ff:52:
         66:6a:64:81:9a:d5:55:3b:a6:79:9e:85:f4:b3:a1:39:35:36:
         73:a3:66:ac:ab:94:71:fe:21:41:b2:bf:26:dc:e2:5e:f5:3d:
         16:54:6a:95:16:3c:27:28:eb:86:59:e1:d0:4f:5a:4d:3d:ea:
         31:2d:34:66:3a:c5:ee:cf:b6:cb:bb:08:68:57:3e:ee:25:7f:
         04:05:6d:90:39:3b:12:81:a3:76:be:70:7f:08:b9:a1:a8:ce:
         fa:d5:7f:70:a4:99:4f:71:ff:9c:e2:08:e8:8b:87:4f:f9:ec:
         5d:e8:ff:54:ca:37:77:09:7a:93:4e:e6:6a:b7:db:ff:9f:b3:
         f0:16:0d:f8:ab:a1:d8:ee:17:55:97:86:4f:63:5f:91:df:05:
         8a:f3:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 16:55:55 2023 by rpki-client on console-ams.rpki-client.org