Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9e99501-2927-3258-9728-15d7ca00293b.roa
File:                     b9e99501-2927-3258-9728-15d7ca00293b.roa (raw, json)
Hash identifier:          OTQNWw0RE1zgaxn09AkXsftNMlc821rZROSDyGv+zDI=
Subject key identifier:   6C:A5:7A:EC:EE:70:B9:4E:FF:F9:B8:2A:14:F7:9E:52:DF:67:DE:E4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858429CA3A9661ABBEC55DEBD2B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9e99501-2927-3258-9728-15d7ca00293b.roa
Signing time:             Thu 20 Jul 2023 18:01:07 +0000
ROA not before:           Thu 20 Jul 2023 18:01:07 +0000
ROA not after:            Wed 18 Oct 2023 18:01:07 +0000
asID:                     834
IP address blocks:        108.165.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9c:a3:a9:66:1a:bb:ec:55:de:bd:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 18:01:07 2023 GMT
            Not After : Oct 18 18:01:07 2023 GMT
        Subject: CN=94837775-955b-471f-a057-224c1ce46e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:4a:13:22:99:7c:da:5b:7f:fc:10:5f:d0:
                    a7:ec:2e:67:d0:1c:5e:6f:50:c8:d8:6c:a4:2f:ca:
                    cd:b2:21:c5:30:4b:19:4d:60:13:17:e6:27:1e:9f:
                    e3:bc:4d:a5:0f:50:5c:84:c9:69:b4:1f:63:61:07:
                    78:9d:51:7c:33:57:cd:62:22:85:93:c9:e5:fc:99:
                    fc:a6:e1:35:92:a0:c4:e4:ba:b1:57:02:bb:0b:f2:
                    a4:c5:52:79:a7:0d:a5:1b:51:1b:44:bf:40:67:fa:
                    c6:20:79:67:8f:f8:7f:d4:28:5f:60:97:9d:65:61:
                    c4:c7:6b:18:50:53:55:68:76:cc:81:b3:66:d2:0e:
                    59:94:4c:2d:7c:47:d2:f1:75:fd:0c:dd:a7:7b:ff:
                    e2:e9:c5:3b:51:40:6b:d9:cd:b9:62:fe:e8:a5:92:
                    9b:d2:e6:af:49:d5:29:3e:37:4d:c5:a4:9c:3b:cd:
                    0b:0e:1f:01:2b:f7:96:8d:a6:d0:50:6a:2a:4c:70:
                    ea:ed:a1:01:df:24:4a:7c:55:e6:b5:c0:9b:c7:74:
                    f6:81:93:e1:d0:12:5a:f3:4d:68:05:0e:38:38:d2:
                    bf:64:0d:a7:b1:c6:88:cd:78:02:07:52:c5:85:87:
                    35:ac:b9:3b:2d:08:0e:49:67:62:77:a3:d8:50:29:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A5:7A:EC:EE:70:B9:4E:FF:F9:B8:2A:14:F7:9E:52:DF:67:DE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9e99501-2927-3258-9728-15d7ca00293b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:dc:2d:67:49:af:d6:64:1c:5c:59:65:ec:f2:91:54:69:
         60:cc:60:09:bc:48:24:db:20:b1:6a:0d:f6:e1:29:86:3d:fb:
         03:dc:75:c6:c5:bd:38:95:f4:1d:e8:9f:ce:89:9f:9a:76:9c:
         80:9b:f1:3b:3c:6e:ca:cc:0b:0a:6d:de:a0:69:a2:7e:26:bd:
         2b:8e:03:61:90:90:9c:a6:30:e3:29:50:63:e4:ee:46:dc:2c:
         40:75:03:8d:bd:5f:5e:33:c0:78:66:47:d9:4d:3a:ff:f6:5a:
         83:f6:63:55:d3:7a:9e:02:60:b8:85:11:f2:24:a2:bf:81:06:
         0c:0c:56:3d:be:d7:2c:23:c5:59:78:59:f9:e7:37:00:c0:ec:
         52:3b:17:2c:b9:12:a4:ed:9f:b5:5d:c5:78:36:cc:04:4e:f1:
         f1:56:46:52:5a:9a:35:31:b6:01:c6:c4:3f:06:c1:08:45:f7:
         82:06:5c:d1:90:02:4b:ef:ce:9d:48:89:4e:e5:56:6a:f4:3c:
         31:6c:69:27:ac:8f:f3:31:56:c7:2d:c3:43:19:b2:3d:6d:6d:
         3e:e4:25:5d:f1:bb:37:0a:ae:3a:5a:41:82:bc:c4:3c:02:91:
         28:ce:4c:c1:38:60:17:e0:5a:ed:5b:16:91:44:f7:21:7a:b9:
         b4:10:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----