Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8a933cd-b780-3891-9533-9d966f489d9a.roa
File:                     b8a933cd-b780-3891-9533-9d966f489d9a.roa (raw, json)
Hash identifier:          j3NTo0r4upTjPq/kIXC87NIvUuhsyE5cxMaZqcc3Q2g=
Subject key identifier:   E8:EC:27:20:BE:65:59:D5:9C:C3:8E:BF:63:AB:F8:6A:AF:A6:F6:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842CED141E18F2BBEC89F2FC880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8a933cd-b780-3891-9533-9d966f489d9a.roa
Signing time:             Mon 07 Aug 2023 17:23:25 +0000
ROA not before:           Mon 07 Aug 2023 17:23:25 +0000
ROA not after:            Sun 05 Nov 2023 18:23:25 +0000
asID:                     834
IP address blocks:        108.165.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:d1:41:e1:8f:2b:be:c8:9f:2f:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  7 17:23:25 2023 GMT
            Not After : Nov  5 18:23:25 2023 GMT
        Subject: CN=edee96b8-18b6-47e3-b211-cd78dd6be53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:fc:5e:0e:94:21:08:1e:ce:aa:e3:2e:01:
                    d6:04:9f:d0:37:a4:f6:93:90:bc:fb:cc:f0:12:14:
                    c9:ad:ce:30:54:b4:d3:57:69:2c:24:ac:cd:4d:ef:
                    8c:4e:09:59:63:14:be:a3:bb:db:8a:05:09:4e:da:
                    36:f8:48:46:0e:19:c4:82:4d:23:5b:4f:d3:2a:70:
                    83:38:16:5a:d3:18:85:cf:18:09:23:e2:15:50:66:
                    3e:55:1b:b8:16:ec:09:89:d0:5c:c9:05:7f:64:17:
                    e0:a1:52:ef:7d:01:fb:37:6e:a4:76:22:27:1d:b6:
                    47:e7:67:d6:53:29:9b:8d:3a:d6:ae:fe:5c:d8:fa:
                    2d:3b:0e:6f:a4:21:d7:c4:92:bd:e2:e4:40:de:3a:
                    b3:cc:0e:e8:16:e3:42:88:04:03:5f:7b:f5:ca:96:
                    41:a2:5d:76:6d:06:b0:0b:2c:38:63:1b:dd:d8:d3:
                    a5:b3:4f:dc:eb:32:5c:ae:e6:0f:ca:9c:b6:83:5b:
                    41:d4:19:aa:b1:77:d5:61:14:04:b9:a1:f1:4b:bf:
                    ec:5d:68:90:5a:39:52:81:98:d8:97:48:05:5d:31:
                    31:8b:df:83:49:0f:bf:5e:43:e8:98:13:61:82:e8:
                    2b:40:87:7c:1c:30:4d:18:3d:3c:04:48:ad:44:95:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:27:20:BE:65:59:D5:9C:C3:8E:BF:63:AB:F8:6A:AF:A6:F6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8a933cd-b780-3891-9533-9d966f489d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:c6:97:b3:0c:2a:f2:9b:ab:de:a9:82:ee:68:8d:fe:27:
         8b:2a:72:ab:ca:1d:70:04:04:e1:f5:ff:93:3d:25:df:d7:e8:
         96:00:0f:ed:15:ea:d5:f8:48:96:8b:c8:3c:2d:89:74:b2:53:
         d0:3e:54:ea:2c:07:b5:58:2f:e3:38:c0:b2:d0:91:fa:4f:1e:
         36:06:9e:3b:53:c0:e4:1b:4a:48:51:db:d0:11:63:fc:15:b6:
         b1:98:7e:39:67:a0:d3:0f:b1:05:fd:ba:c5:46:93:7c:b4:4c:
         fd:0f:6a:ca:dc:55:da:1a:bd:2c:ab:b3:62:8e:62:b2:7d:57:
         7f:8f:5f:97:e6:9c:10:08:fb:81:6e:80:43:bb:c7:b4:66:22:
         ab:e4:61:e6:df:64:7e:f5:6b:91:d8:cf:da:34:a0:d1:92:df:
         31:36:e3:e1:43:fc:b5:d2:e0:49:c2:8c:b9:aa:4b:ba:b2:ad:
         42:00:c9:c4:21:69:16:d5:61:0a:46:6e:0d:2c:c8:08:88:ad:
         bb:ec:9f:17:43:43:dd:ed:90:fb:8a:6a:02:da:1c:ed:3b:d6:
         99:4b:a1:96:29:0f:ae:b9:31:82:00:ec:93:e1:a3:27:12:94:
         da:d9:23:37:f8:a2:5a:34:6c:97:c5:05:1f:71:3b:e8:0d:0b:
         a6:60:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 17:18:06 2023 by rpki-client on console-ams.rpki-client.org