Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5edb781-7466-3362-a93c-38c8d808727f.roa
File:                     a5edb781-7466-3362-a93c-38c8d808727f.roa (raw, json)
Hash identifier:          JWHcA/4727llsTzTWsxnOgX5puIU3sJ1h++nDXptdNU=
Subject key identifier:   51:7B:28:09:24:52:6B:45:D1:FB:59:43:AA:D5:F2:2A:AE:CD:5F:3F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BD8E9BCE361D424FEAC21540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5edb781-7466-3362-a93c-38c8d808727f.roa
Signing time:             Tue 01 Aug 2023 13:00:19 +0000
ROA not before:           Tue 01 Aug 2023 13:00:19 +0000
ROA not after:            Mon 30 Oct 2023 13:00:19 +0000
asID:                     60721
IP address blocks:        166.1.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bd:8e:9b:ce:36:1d:42:4f:ea:c2:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  1 13:00:19 2023 GMT
            Not After : Oct 30 13:00:19 2023 GMT
        Subject: CN=5d58091e-318d-404f-92c7-b400c961a12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:2e:5c:8d:3f:18:5f:4a:80:c9:45:ef:1e:
                    d4:22:0f:5c:42:9a:6d:38:0b:96:fd:16:a2:93:6d:
                    31:0a:c7:45:d5:a5:b2:01:92:84:8d:35:2e:5e:3c:
                    84:16:79:6a:b0:38:b3:c0:a6:97:c8:03:3d:44:65:
                    1c:9e:ef:c0:41:7f:a4:16:16:c7:7c:58:aa:61:5d:
                    9e:39:75:e5:a8:e2:78:fd:81:3a:a6:7e:a0:81:30:
                    2c:a1:8f:28:d6:5e:58:19:0b:b3:83:53:69:9a:8a:
                    72:58:24:a7:0e:a2:e4:39:59:86:d2:18:71:0f:2c:
                    91:80:21:2b:7d:6a:3f:b8:e4:63:ff:b8:f6:99:d0:
                    09:23:bb:44:3f:9a:81:02:89:81:56:1a:27:94:24:
                    f4:74:e5:1b:6c:59:33:c8:d4:ff:e5:b4:1e:7a:12:
                    6f:47:03:2b:d1:93:9e:c9:b7:28:f5:f3:16:db:c0:
                    77:ca:2a:30:bb:a2:a5:00:fd:7e:16:57:8a:ca:d3:
                    fb:b1:b5:51:cd:ad:30:50:2a:de:8d:fb:21:d2:06:
                    22:5e:90:54:58:68:69:f2:73:fb:00:f1:cd:94:1d:
                    cc:af:f6:b3:45:a8:09:05:bf:88:9e:81:de:73:19:
                    7e:61:dd:79:5e:f3:5f:8c:aa:da:a6:b2:04:6a:b9:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7B:28:09:24:52:6B:45:D1:FB:59:43:AA:D5:F2:2A:AE:CD:5F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a5edb781-7466-3362-a93c-38c8d808727f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0a:88:de:94:d8:4f:56:20:ba:cd:ba:27:a6:1d:30:48:7c:
         ff:30:c7:e9:33:b7:bd:41:bd:e9:54:cc:1e:fa:15:c4:d7:35:
         a3:a5:10:a8:56:e9:a1:7d:13:b2:63:2e:a8:29:51:e4:1d:e9:
         53:4c:ac:49:b5:fc:93:67:5a:c6:86:d0:83:50:9e:e5:a8:b4:
         7d:61:62:04:6a:71:86:a6:ff:f8:82:17:41:3d:70:e7:0b:60:
         d2:aa:25:c4:ff:6e:93:85:94:fe:92:95:f3:91:90:1e:1e:6c:
         73:fb:a1:b1:a1:42:18:94:ec:b7:0c:85:ae:5b:0e:9a:b3:4a:
         d7:0d:1a:19:21:6b:cb:55:94:1a:76:03:c2:9d:6b:4a:86:57:
         fa:6c:a0:65:4d:d4:5c:e9:e3:66:e7:0b:80:b7:cf:70:ac:6e:
         a0:e6:87:84:25:78:41:28:61:af:73:30:79:cf:6e:b6:6c:6b:
         6f:3d:c0:c2:a3:bc:b8:a5:70:79:a1:c9:a8:c5:b5:63:bf:29:
         60:d9:c8:18:1a:2e:4e:46:76:94:d4:df:1f:be:f2:6e:2e:90:
         00:b0:79:1f:09:c7:87:45:07:f5:cf:a0:87:ae:55:d3:62:2a:
         62:ff:fb:1e:40:34:58:f8:b5:6d:23:c3:c1:78:90:34:67:44:
         29:01:da:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEK9jpvONh1CT+rCFUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgwMTEzMDAxOVoXDTIzMTAzMDEzMDAxOVowLzEtMCsGA1UEAxMk
NWQ1ODA5MWUtMzE4ZC00MDRmLTkyYzctYjQwMGM5NjFhMTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjwuXI0/GF9KgMlF7x7UIg9cQpptOAuW/Rai
k20xCsdF1aWyAZKEjTUuXjyEFnlqsDizwKaXyAM9RGUcnu/AQX+kFhbHfFiqYV2e
OXXlqOJ4/YE6pn6ggTAsoY8o1l5YGQuzg1NpmopyWCSnDqLkOVmG0hhxDyyRgCEr
fWo/uORj/7j2mdAJI7tEP5qBAomBVhonlCT0dOUbbFkzyNT/5bQeehJvRwMr0ZOe
ybco9fMW28B3yiowu6KlAP1+FleKytP7sbVRza0wUCrejfsh0gYiXpBUWGhp8nP7
APHNlB3Mr/azRagJBb+InoHecxl+Yd15XvNfjKraprIEarksJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFF7KAkkUmtF0ftZQ6rV8iquzV8/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTVlZGI3ODEtNzQ2Ni0z
MzYyLWE5M2MtMzhjOGQ4MDg3MjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwKiN6U2E9WILrNuiemHTBIfP8wx+kzt71BvelUzB76FcTXNaOlEKhW
6aF9E7JjLqgpUeQd6VNMrEm1/JNnWsaG0INQnuWotH1hYgRqcYam//iCF0E9cOcL
YNKqJcT/bpOFlP6SlfORkB4ebHP7obGhQhiU7LcMha5bDpqzStcNGhkha8tVlBp2
A8Kda0qGV/psoGVN1Fzp42bnC4C3z3CsbqDmh4QleEEoYa9zMHnPbrZsa289wMKj
vLilcHmhyajFtWO/KWDZyBgaLk5GdpTU3x++8m4ukACweR8Jx4dFB/XPoIeuVdNi
KmL/+x5ANFj4tW0jw8F4kDRnRCkB2ts=
-----END CERTIFICATE-----
Generated at Tue Aug 1 16:43:51 2023 by rpki-client on console-ams.rpki-client.org