Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b44b492f-b767-393d-a1aa-f02a7363e4dc.roa
File:                     b44b492f-b767-393d-a1aa-f02a7363e4dc.roa (raw, json)
Hash identifier:          II1KmsWX2ZzJIF6Vjyn2lAdr9nrXVkYzdAYqp5ywU/0=
Subject key identifier:   39:EE:B5:73:ED:E9:1E:99:C8:63:2E:F8:EF:CF:7A:71:0A:1F:F5:55
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858437CCA7C9CD41F0EBEB19FEC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b44b492f-b767-393d-a1aa-f02a7363e4dc.roa
Signing time:             Mon 09 Oct 2023 01:00:22 +0000
ROA not before:           Mon 09 Oct 2023 01:00:22 +0000
ROA not after:            Sun 07 Jan 2024 02:00:22 +0000
asID:                     834
IP address blocks:        166.0.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7c:ca:7c:9c:d4:1f:0e:be:b1:9f:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 01:00:22 2023 GMT
            Not After : Jan  7 02:00:22 2024 GMT
        Subject: CN=2cb4364d-030d-42b8-b930-cc0d4a3eac88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:cb:94:fc:7b:15:62:f6:1e:6d:7a:3f:26:
                    6f:f7:1f:49:00:86:cb:c6:16:d3:34:c6:9c:63:cb:
                    1d:48:d1:d3:96:22:6e:59:ab:1e:40:ce:c2:ac:0d:
                    c0:88:6c:58:26:60:ed:23:d3:78:4c:55:9d:b5:4d:
                    50:f4:7a:1b:ab:de:40:cf:32:66:96:42:9e:dc:99:
                    b8:de:20:73:ca:c2:cb:07:d4:f1:f4:b8:7f:d0:eb:
                    68:f4:93:83:cc:b1:1a:64:87:95:49:b4:f5:7b:6c:
                    23:c3:18:5b:13:3d:1c:c4:65:5e:1f:e4:37:1a:ff:
                    1f:d4:ba:24:db:8a:d5:84:a2:42:18:1c:18:bb:c6:
                    79:93:8e:e9:8f:07:ba:e3:0b:05:2c:a8:ce:e1:ea:
                    01:6c:57:9a:f6:03:a3:e5:1c:6b:46:50:db:0c:61:
                    35:38:c8:61:b5:60:bc:de:6d:e9:ce:92:7d:f1:7a:
                    6b:34:25:42:ce:de:d0:aa:e8:a1:4b:91:76:98:41:
                    64:a1:1d:22:35:63:46:b0:c5:d2:b2:39:77:8b:59:
                    00:ab:18:c4:84:e3:32:9a:cd:76:1d:58:87:eb:95:
                    28:ec:11:30:c1:73:93:79:dc:12:7b:f5:70:b5:4f:
                    49:a8:f0:ab:9a:68:6b:c6:5a:78:3a:06:5e:3f:9f:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EE:B5:73:ED:E9:1E:99:C8:63:2E:F8:EF:CF:7A:71:0A:1F:F5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b44b492f-b767-393d-a1aa-f02a7363e4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:d5:f0:b8:54:71:b0:6a:88:72:30:da:e2:a2:db:68:e4:
         e3:57:76:e3:a7:ab:32:7f:7f:d2:d6:fc:3a:42:fc:4e:f3:89:
         1a:e2:aa:52:9b:e8:85:54:66:4c:d3:04:33:d5:49:b9:e9:94:
         61:78:a7:05:b6:20:10:fd:69:4b:86:1c:8f:96:69:21:fc:26:
         d7:00:d9:06:ba:c5:d3:b1:2a:9a:28:f5:2d:e3:94:a5:00:25:
         c1:88:73:03:1a:af:59:d7:2c:3b:6b:7e:b6:00:17:f8:5c:74:
         33:b1:fc:39:b3:39:42:3e:8d:06:b0:93:67:98:6c:1c:c2:b3:
         17:b3:de:73:8a:46:79:3d:31:3d:c9:88:e3:98:4a:64:87:40:
         0e:e6:89:27:f5:ca:b3:3a:4f:cb:ca:b0:2e:08:d8:89:cd:66:
         a0:fa:b9:20:98:29:80:1b:58:4f:cf:47:f5:1b:83:4a:8d:a5:
         6d:87:ad:d7:a8:2e:f4:1d:96:2f:17:52:2a:36:66:0a:a6:90:
         c1:aa:32:30:ad:b9:f7:d7:52:2f:9f:03:56:15:57:58:2c:3f:
         03:ae:8e:3d:da:a7:5a:2f:a6:4f:91:42:dc:04:42:46:5a:57:
         cd:b4:27:30:4b:e9:20:e8:4b:50:71:9c:ff:78:a1:1f:58:ba:
         e7:dc:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----