Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0e1da8c-e646-3554-8f90-a48509e8f2d7.roa
File:                     c0e1da8c-e646-3554-8f90-a48509e8f2d7.roa (raw, json)
Hash identifier:          1J3eaSr8n4lmOslGwcPI4RNKY5MszMgwUK6PokOVm/Q=
Subject key identifier:   CD:B7:EB:73:2D:DE:98:D5:92:03:1E:95:5F:AD:3A:D3:6A:E6:9D:FF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E70B65E9F45BA833EF0A63F0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0e1da8c-e646-3554-8f90-a48509e8f2d7.roa
Signing time:             Tue 16 May 2023 16:53:01 +0000
ROA not before:           Tue 16 May 2023 16:53:01 +0000
ROA not after:            Mon 14 Aug 2023 16:53:01 +0000
asID:                     834
IP address blocks:        166.0.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e7:0b:65:e9:f4:5b:a8:33:ef:0a:63:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 16 16:53:01 2023 GMT
            Not After : Aug 14 16:53:01 2023 GMT
        Subject: CN=950db50b-eebe-413d-a21a-36453ae15e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:e8:4e:95:69:db:10:94:84:5c:08:2a:e6:
                    3f:63:17:5f:81:ee:3b:4f:38:b4:b1:ed:e0:87:9b:
                    9c:88:be:77:23:43:1c:c6:28:db:cc:d5:3e:ae:c4:
                    e6:ec:49:6f:be:37:22:77:04:85:40:cb:2e:8a:ae:
                    d3:42:ee:2b:50:6e:e0:37:2a:4a:48:b2:6b:50:9e:
                    0a:54:c2:0f:fa:3f:c1:56:95:94:3e:a8:8d:5b:e7:
                    a0:7e:d1:b9:7c:e0:38:cb:22:8e:f4:23:bf:e1:76:
                    41:e3:5f:fe:ea:7b:50:67:ad:21:04:8f:6c:ba:cb:
                    da:78:d3:87:bf:75:e2:46:56:78:f7:df:24:5a:15:
                    b9:27:82:0e:72:cd:0e:9e:a4:f1:36:fe:18:6f:75:
                    e2:b6:4c:e0:b8:50:9e:0c:38:d7:1e:d4:7b:0f:11:
                    29:c2:8a:6a:65:7a:9a:42:ed:89:7a:a0:dd:4d:83:
                    87:e3:bc:82:27:c7:31:98:51:2e:dc:59:78:16:d3:
                    a8:17:28:02:c3:5a:f6:4e:c4:20:02:45:84:56:ba:
                    a2:4f:7a:64:9f:1e:8b:85:23:8b:f6:b0:0c:6d:5b:
                    b8:19:8b:b3:14:a2:26:bc:04:12:47:66:c9:96:ba:
                    a0:0c:3d:9e:74:02:04:d7:0d:88:57:c7:db:a0:a0:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:EB:73:2D:DE:98:D5:92:03:1E:95:5F:AD:3A:D3:6A:E6:9D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0e1da8c-e646-3554-8f90-a48509e8f2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:14:9b:ab:35:29:6d:8b:85:05:57:b5:37:4d:6b:55:38:90:
         d4:2b:47:0a:34:a1:37:07:7b:87:ab:ec:37:1d:dc:f8:73:43:
         f3:13:4b:26:a5:1c:93:36:7a:17:d9:2e:cb:23:f6:71:06:dd:
         a1:c4:21:31:a0:46:43:ca:dd:c1:4c:2f:fc:d3:9b:b1:c1:97:
         6a:7a:d6:16:09:33:0e:ba:73:4e:f2:b6:5f:87:11:d4:1c:c0:
         78:00:c5:8d:0a:59:88:95:83:5a:fe:03:e9:dc:29:66:73:b2:
         94:d4:b7:67:5d:ff:6b:97:f6:45:49:a2:9b:b7:07:ce:54:3c:
         3c:f5:20:a3:4d:2d:6f:f6:5f:26:bf:f9:19:c1:9a:7a:d8:34:
         ae:94:98:5b:b8:33:e3:d9:41:04:d5:ea:b0:c1:a5:3d:44:54:
         f0:5d:47:23:da:5c:2b:7b:f6:bc:15:ea:48:05:8f:d0:25:00:
         18:56:54:50:3b:06:aa:3b:7c:d8:4d:01:85:1a:00:d0:e1:b4:
         82:1f:a4:bc:88:d7:83:fd:cd:00:cf:ed:c1:69:36:32:db:c7:
         fb:b0:71:71:28:1e:12:f2:e6:71:a6:ef:ea:91:32:37:76:bb:
         b1:b0:84:f1:bb:51:d7:4e:d4:f4:7f:eb:f5:e9:c0:0b:7c:4f:
         53:80:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----