Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b50e80ee-1241-3980-923f-b693beb2edd0.roa
File:                     b50e80ee-1241-3980-923f-b693beb2edd0.roa (raw, json)
Hash identifier:          MmjOtCFv9biz+tt2QFAfJsN2+jdtq4Ay9FAevyVoANQ=
Subject key identifier:   71:0D:4D:A0:88:CC:2B:11:D2:CD:3B:28:7A:19:72:F1:5E:A0:42:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842F3C4D8F77AC2E5F8F5CF78C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b50e80ee-1241-3980-923f-b693beb2edd0.roa
Signing time:             Sun 20 Aug 2023 23:03:19 +0000
ROA not before:           Sun 20 Aug 2023 23:03:19 +0000
ROA not after:            Sun 19 Nov 2023 00:03:19 +0000
asID:                     44477
IP address blocks:        166.1.96.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f3:c4:d8:f7:7a:c2:e5:f8:f5:cf:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 20 23:03:19 2023 GMT
            Not After : Nov 19 00:03:19 2023 GMT
        Subject: CN=410dda5f-b7b6-41ef-9d3a-7b012cb5daec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:75:aa:f3:3f:d6:0d:f0:38:eb:0b:f8:66:
                    58:ac:59:78:db:2f:ef:c7:ff:d5:da:68:f3:8a:59:
                    95:e0:02:83:bd:8e:b9:ee:80:d4:09:08:60:11:41:
                    fd:f0:ed:3d:ae:d1:b1:91:fe:c3:2f:5d:f5:04:a8:
                    1b:60:17:b6:b4:7d:f9:79:64:74:db:ed:e9:6e:eb:
                    fd:da:c1:2d:66:06:01:ed:7f:a4:23:31:87:64:e7:
                    a9:a1:a3:95:2b:fb:ff:43:1f:3d:be:2b:6c:86:b3:
                    03:81:9f:7a:8a:4b:4e:8f:fb:09:ed:8b:5f:50:73:
                    a6:7e:df:02:0d:4e:86:c5:93:8f:9c:64:8a:3b:c8:
                    e8:41:ad:3d:f0:23:0b:49:91:92:19:f9:1c:c7:b0:
                    43:a3:35:1f:27:a9:02:5f:51:ee:50:29:ac:c5:72:
                    68:37:8f:ce:e4:f6:22:9a:04:39:db:64:63:c7:b4:
                    5a:57:e4:11:fc:5a:f5:2e:7f:cd:43:4c:fb:2e:6f:
                    25:18:67:7c:d1:a3:c3:73:0f:f6:37:9c:e8:83:ec:
                    e1:e3:51:6e:32:d8:f7:35:8a:15:23:18:0c:19:c0:
                    9a:e3:b5:21:cc:6f:16:5a:52:f9:6e:20:af:af:73:
                    bc:a9:44:54:61:86:09:ca:88:79:ba:74:27:61:33:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0D:4D:A0:88:CC:2B:11:D2:CD:3B:28:7A:19:72:F1:5E:A0:42:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b50e80ee-1241-3980-923f-b693beb2edd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:be:36:f5:60:ca:29:45:b3:c1:20:da:46:3f:b4:5b:88:
         f1:33:5c:0b:9a:4c:74:91:08:4c:34:53:32:dc:7b:e8:14:5d:
         5a:d9:a8:ae:a5:b8:93:f3:04:e2:05:89:3e:bf:3a:2d:74:7c:
         b9:bc:38:5e:8c:56:3f:fb:ef:03:c0:0f:3e:03:8e:a5:ed:38:
         8b:ae:5b:62:18:cb:91:49:01:0b:c0:0f:78:8a:19:c7:99:da:
         74:2b:48:67:5e:b1:d7:c6:4a:3f:3d:4b:7d:19:db:08:0c:bf:
         13:bf:19:97:8c:19:75:c8:27:1d:d7:81:38:4c:79:2b:b3:9a:
         e6:f0:eb:01:e4:7b:94:d7:2d:cc:c8:6c:e9:77:82:5d:80:e4:
         e3:30:0a:21:65:2b:1e:bb:74:75:fb:81:8e:d2:f3:ae:1c:58:
         1b:9f:89:0a:d7:7f:10:7b:73:6d:9a:50:05:51:64:b5:b3:89:
         2d:1b:4c:9e:3b:19:d4:2b:a4:86:53:02:5f:a2:87:d1:46:3e:
         05:b8:fe:1c:b9:e0:a3:f1:70:8a:01:53:91:cb:64:bc:a6:cf:
         fa:07:dc:61:4a:29:0e:ae:29:dc:fa:c0:28:14:ed:82:30:12:
         99:2a:2d:e5:b0:84:0d:35:a6:60:86:14:75:87:0b:04:99:20:
         ca:b8:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----