Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8ed8f60-dbd6-3f48-97ea-5515b3a46d55.roa
File:                     b8ed8f60-dbd6-3f48-97ea-5515b3a46d55.roa (raw, json)
Hash identifier:          m8tnTqTztzQPxdtfAAuyUgdN9CWBgdcfmG648D4pJDU=
Subject key identifier:   84:2C:DB:4C:75:AC:E0:AD:A8:D3:B0:80:C4:04:A8:50:05:D7:01:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858425439870D6AABF139294A7F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8ed8f60-dbd6-3f48-97ea-5515b3a46d55.roa
Signing time:             Sat 24 Jun 2023 19:29:04 +0000
ROA not before:           Sat 24 Jun 2023 19:29:04 +0000
ROA not after:            Fri 22 Sep 2023 19:29:04 +0000
asID:                     207633
IP address blocks:        166.1.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:54:39:87:0d:6a:ab:f1:39:29:4a:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 24 19:29:04 2023 GMT
            Not After : Sep 22 19:29:04 2023 GMT
        Subject: CN=8b8c09a5-cdce-4827-8134-cd4215adb397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:3a:9a:de:ca:78:8a:fa:47:11:f4:2f:e2:
                    08:bc:53:a9:c7:7a:8a:86:bf:c4:71:d7:04:b1:d7:
                    09:d5:ac:d2:ee:14:cb:67:fc:b3:54:6b:59:70:36:
                    4b:f2:2f:bd:bf:c5:1d:9d:0a:c3:b4:46:20:72:5c:
                    8b:51:71:d8:01:8c:e8:78:2f:c8:5f:60:81:b1:01:
                    c5:c0:8a:6c:21:99:04:34:cb:fe:33:a1:59:67:6f:
                    25:80:4c:14:e9:6f:e3:8a:54:22:b4:d8:49:a1:d9:
                    34:6a:12:73:0a:06:de:7d:09:47:d4:84:1b:37:57:
                    b7:76:20:5f:89:3f:b5:19:ed:1b:df:85:29:80:97:
                    7c:75:72:e3:b5:0a:6a:51:7e:5e:7f:56:4a:30:78:
                    21:a7:18:a6:31:f9:7e:15:cd:89:75:1f:5a:48:aa:
                    4c:e5:1f:72:8f:f2:3c:ae:55:a1:2d:f6:c4:06:0d:
                    84:8f:f6:43:df:71:31:c9:29:9b:d6:4d:c8:f5:d5:
                    a3:88:5b:2f:46:35:83:b9:a0:5f:c1:29:f8:86:a6:
                    66:3f:96:87:02:59:54:11:2e:58:16:69:41:d4:f9:
                    55:a0:dd:ae:a8:b5:e5:91:d7:2d:87:92:76:dd:a3:
                    83:db:7d:2f:f3:9a:f1:cf:26:39:d0:bf:4f:95:34:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2C:DB:4C:75:AC:E0:AD:A8:D3:B0:80:C4:04:A8:50:05:D7:01:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8ed8f60-dbd6-3f48-97ea-5515b3a46d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:51:e5:1c:81:16:a3:42:67:97:82:b0:13:94:00:d5:7d:86:
         e6:d3:7a:8a:d8:0d:c8:f8:57:da:10:4b:af:2c:24:36:c9:52:
         22:f6:52:f7:52:a6:3f:26:ca:80:6a:1d:40:4a:89:37:cb:e6:
         01:8b:a4:2b:86:1d:cc:62:33:47:60:d3:35:16:ed:00:c8:27:
         83:ec:55:c7:81:dc:b4:24:79:aa:ed:6a:df:95:66:41:a3:a6:
         66:47:7b:1c:6a:86:b3:e8:77:90:22:9c:a2:bd:62:2e:c6:28:
         0f:9f:2e:a0:4d:dc:f8:1c:d2:bb:80:c1:70:ee:6e:df:87:7a:
         87:72:6c:d1:78:85:f7:8b:ff:ba:6c:3a:be:71:73:49:e3:06:
         3a:95:f6:03:10:ad:36:b0:a7:e7:9b:83:9d:f3:07:3c:d1:57:
         45:f2:18:53:a8:1e:c5:63:cd:dc:10:19:2c:c0:00:5c:0a:2f:
         9e:dd:9b:11:00:fa:07:c2:75:ab:3d:e1:91:1a:21:79:16:f2:
         9a:5f:a6:d0:fd:b9:ce:df:3f:6e:da:fe:5e:ba:6a:5a:21:0a:
         2c:4c:6f:f8:43:08:9e:bd:e2:12:8b:82:f6:8e:90:14:18:15:
         e4:2c:88:6f:ac:a7:62:50:de:66:3a:ea:7e:e4:ce:45:66:23:
         ee:f2:1e:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJUOYcNaqvxOSlKf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYyNDE5MjkwNFoXDTIzMDkyMjE5MjkwNFowLzEtMCsGA1UEAxMk
OGI4YzA5YTUtY2RjZS00ODI3LTgxMzQtY2Q0MjE1YWRiMzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKo6mt7KeIr6RxH0L+IIvFOpx3qKhr/EcdcE
sdcJ1azS7hTLZ/yzVGtZcDZL8i+9v8UdnQrDtEYgclyLUXHYAYzoeC/IX2CBsQHF
wIpsIZkENMv+M6FZZ28lgEwU6W/jilQitNhJodk0ahJzCgbefQlH1IQbN1e3diBf
iT+1Ge0b34UpgJd8dXLjtQpqUX5ef1ZKMHghpximMfl+Fc2JdR9aSKpM5R9yj/I8
rlWhLfbEBg2Ej/ZD33ExySmb1k3I9dWjiFsvRjWDuaBfwSn4hqZmP5aHAllUES5Y
FmlB1PlVoN2uqLXlkdcth5J23aOD230v85rxzyY50L9PlTRVawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQs20x1rOCtqNOwgMQEqFAF1wG9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjhlZDhmNjAtZGJkNi0z
ZjQ4LTk3ZWEtNTUxNWIzYTQ2ZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNR5RyBFqNCZ5eCsBOUANV9hubTeorYDcj4V9oQS68sJDbJUiL2UvdS
pj8myoBqHUBKiTfL5gGLpCuGHcxiM0dg0zUW7QDIJ4PsVceB3LQkeartat+VZkGj
pmZHexxqhrPod5AinKK9Yi7GKA+fLqBN3Pgc0ruAwXDubt+HeodybNF4hfeL/7ps
Or5xc0njBjqV9gMQrTawp+ebg53zBzzRV0XyGFOoHsVjzdwQGSzAAFwKL57dmxEA
+gfCdas94ZEaIXkW8ppfptD9uc7fP27a/l66alohCixMb/hDCJ694hKLgvaOkBQY
FeQsiG+sp2JQ3mY66n7kzkVmI+7yHic=
-----END CERTIFICATE-----