Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae39ffd2-9b14-3507-9bfa-75ca96fce64f.roa
File:                     ae39ffd2-9b14-3507-9bfa-75ca96fce64f.roa (raw, json)
Hash identifier:          nAoC/0M+Czq3JeofJWn8lQ8fjeTWAttxji9xanYOjDc=
Subject key identifier:   30:43:31:30:B7:A0:B9:58:A0:07:8E:DD:4E:8A:8A:83:7B:17:1E:26
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841F0C84012B359009018916EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae39ffd2-9b14-3507-9bfa-75ca96fce64f.roa
Signing time:             Sat 20 May 2023 04:35:48 +0000
ROA not before:           Sat 20 May 2023 04:35:48 +0000
ROA not after:            Fri 18 Aug 2023 04:35:48 +0000
asID:                     834
IP address blocks:        166.0.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f0:c8:40:12:b3:59:00:90:18:91:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 04:35:48 2023 GMT
            Not After : Aug 18 04:35:48 2023 GMT
        Subject: CN=b038b2e2-9c3b-474b-b14d-d94481c6c3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:c2:b7:e8:16:18:41:01:fe:0d:5a:e0:b3:
                    8b:a0:01:0d:79:69:72:65:78:ab:bf:f6:8e:e2:64:
                    c9:da:c2:3d:a1:e9:d8:06:d9:a1:00:b0:d0:a7:a5:
                    fe:27:e1:84:f9:7f:66:de:06:1b:e5:95:75:af:de:
                    a4:9c:f7:57:52:8e:e1:d5:16:85:3d:29:9b:9c:87:
                    8a:4c:7a:ff:b3:3f:d6:64:da:d6:d0:0f:5c:a2:39:
                    98:31:7b:7b:a0:67:22:fb:34:89:53:a1:1d:7d:2d:
                    88:a9:dd:c6:2c:a8:16:54:2f:78:68:80:97:95:94:
                    a0:e7:80:f2:f3:4a:e5:46:ae:a3:01:0e:09:68:79:
                    4b:a6:a4:13:0a:10:08:2a:af:aa:b6:77:7f:e9:ae:
                    ba:9e:1c:cc:55:3e:94:b1:83:b4:56:b9:8c:a2:0d:
                    8b:1e:19:a7:6e:6c:e1:72:e0:0b:93:70:47:d7:c9:
                    37:8c:8e:51:77:56:fa:0c:c7:c1:d1:e2:2a:be:c7:
                    07:5a:ec:82:43:df:ab:b2:31:9d:88:9f:8a:84:09:
                    63:e3:04:63:c0:12:9a:d3:f4:21:aa:bd:97:db:a1:
                    b9:58:14:0d:f0:02:76:9b:df:4f:09:b7:cc:74:21:
                    53:4f:1e:9e:2e:8e:93:37:4d:56:5b:7c:a7:13:07:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:31:30:B7:A0:B9:58:A0:07:8E:DD:4E:8A:8A:83:7B:17:1E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae39ffd2-9b14-3507-9bfa-75ca96fce64f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:f7:12:2c:7f:7f:90:36:7b:7b:8f:38:dc:3c:a3:52:84:
         f9:91:24:6c:e3:25:1f:23:dc:36:ca:0d:22:88:b6:e0:b1:66:
         63:64:57:a4:5d:5c:86:d0:8e:f4:ce:cd:9a:85:ce:40:f7:80:
         29:9e:17:7c:22:2c:9c:73:b7:c0:2f:02:8b:66:94:1e:23:1e:
         44:53:fe:30:a2:07:26:1e:4c:72:70:4d:a8:42:6c:b1:37:ab:
         ad:d4:94:6c:4d:58:74:54:08:09:6b:e3:5c:a8:6e:22:f5:49:
         60:49:f8:27:11:cd:8f:39:0d:e1:61:f3:14:af:44:a4:8d:f2:
         1d:89:07:94:b0:13:b8:a5:a7:10:d6:a3:53:c9:30:2c:6e:aa:
         fd:28:58:cc:dc:93:34:d9:f6:df:c6:cb:7c:54:e8:71:cc:ff:
         3f:b3:66:e1:18:13:3a:c8:b3:e9:18:88:86:b8:9c:e0:d5:97:
         ff:8f:c5:66:bc:0c:dc:2a:de:2a:07:c4:50:d8:d3:58:e4:3f:
         a3:42:81:50:23:95:9e:c7:b0:a5:ed:58:96:26:d5:23:e4:20:
         62:29:fe:c5:bc:89:7b:09:91:9c:28:f4:9e:e0:92:70:9d:ed:
         8c:3e:7f:9b:33:96:26:2e:50:20:5f:2c:41:66:ac:b4:e5:3d:
         dd:a6:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----