Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc847923-2ec5-365e-b7df-b70fa8fe8f6f.roa
File:                     bc847923-2ec5-365e-b7df-b70fa8fe8f6f.roa (raw, json)
Hash identifier:          zM0e9EnuEKooH4eMSNJtnWHqeKXv1Zc7pOSSPTbwXmA=
Subject key identifier:   4D:00:45:75:84:25:E3:F8:0B:10:92:0A:04:E9:7F:82:DB:6A:68:EA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842FB6E543CAA55168556CFDF20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc847923-2ec5-365e-b7df-b70fa8fe8f6f.roa
Signing time:             Wed 23 Aug 2023 16:55:27 +0000
ROA not before:           Wed 23 Aug 2023 16:55:27 +0000
ROA not after:            Tue 21 Nov 2023 17:55:27 +0000
asID:                     11798
IP address blocks:        166.1.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fb:6e:54:3c:aa:55:16:85:56:cf:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 23 16:55:27 2023 GMT
            Not After : Nov 21 17:55:27 2023 GMT
        Subject: CN=c9f1e058-6aec-4836-8046-2afa34f4de2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:83:11:a4:bd:89:da:0a:60:38:bc:aa:90:
                    91:ac:24:15:13:f3:e8:a8:1d:76:14:0e:04:6b:21:
                    93:68:9e:79:4c:a2:14:85:cc:06:c0:fe:99:51:9b:
                    ec:ac:ae:88:f8:60:14:3a:4b:59:52:89:51:3f:72:
                    1e:1b:76:84:e2:e9:58:61:ef:2a:21:8e:7b:7d:19:
                    46:ed:28:4b:5d:ae:fa:9d:aa:2c:9b:60:93:57:2d:
                    04:aa:31:d9:9d:0f:9f:ce:0d:cf:be:82:f0:55:a6:
                    bf:48:96:d5:57:7c:2d:2d:ab:be:cb:58:70:ac:0e:
                    fa:1f:6d:c1:ba:1a:ba:e7:04:3b:1d:6b:b8:eb:4e:
                    9d:40:20:f7:76:9d:c9:d6:7b:d8:a4:79:c6:b1:c6:
                    0f:63:dd:ff:37:25:e3:a0:fb:df:9e:4d:da:bb:f5:
                    44:7a:25:3e:fb:27:91:3b:03:0e:e1:a1:ad:7b:35:
                    e1:8d:37:98:78:d6:b0:c6:b9:1b:67:08:c0:c2:14:
                    98:9f:9d:77:fb:f2:2f:bc:a7:c3:48:f5:fc:95:5d:
                    20:b3:f9:e7:10:83:d7:24:16:0e:c0:d4:7e:c6:e8:
                    3a:c9:19:b9:90:94:b5:d3:21:ba:23:fb:03:7b:7a:
                    52:a7:66:03:7f:4f:b6:e9:2a:a1:28:18:50:bb:25:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:00:45:75:84:25:E3:F8:0B:10:92:0A:04:E9:7F:82:DB:6A:68:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bc847923-2ec5-365e-b7df-b70fa8fe8f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ab:38:60:58:0e:79:4c:c6:c6:d2:96:bd:83:2c:56:46:ec:
         41:50:9e:54:12:2a:45:cb:40:94:28:95:6b:66:83:c0:da:9e:
         60:d9:57:6e:6a:87:b0:a7:b2:42:15:d2:74:95:53:ba:44:7c:
         39:8a:85:7e:ae:76:e6:9a:5d:73:3b:d8:94:aa:39:c0:3d:35:
         f8:13:a1:b2:94:7a:77:0f:aa:88:96:23:fe:81:39:fc:e6:77:
         3e:72:27:9a:53:5b:02:b9:ee:95:0b:06:34:7b:65:73:0a:c6:
         e7:c6:8b:d6:d5:35:4d:1d:c9:39:57:e3:e5:fd:d1:a2:ce:6f:
         e6:00:bf:f4:58:06:18:f5:5d:71:3f:cb:75:73:23:fc:96:22:
         cb:64:b9:88:cc:d2:ce:63:e9:fe:0a:9f:86:8b:e4:66:cb:93:
         92:77:e8:91:49:1b:79:50:8b:dd:14:26:5e:90:13:8c:5f:93:
         ac:79:68:35:53:c7:83:ce:fd:59:f0:43:50:e9:4c:50:ea:3b:
         7a:54:93:ae:97:ff:2d:83:22:37:cd:ea:60:11:38:d7:90:10:
         ce:db:8b:d6:bd:d7:c0:d4:89:cf:ce:91:de:17:ab:67:3a:cd:
         5c:e2:50:df:d2:d2:6b:3c:a2:1d:60:7a:c4:6c:12:ac:61:d5:
         4e:c6:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----