Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0ff9867-664e-32b0-8044-b54a2774b4bc.roa
File:                     c0ff9867-664e-32b0-8044-b54a2774b4bc.roa (raw, json)
Hash identifier:          M1H+0phgoBUuzXtg6Q4OCuHkzhHSmKjbayJkFRFfQ3E=
Subject key identifier:   57:56:11:36:E4:27:F9:7E:E3:89:A6:89:C4:DA:71:D7:E2:09:50:93
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584510D80F549F0C92FBE4A19E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0ff9867-664e-32b0-8044-b54a2774b4bc.roa
Signing time:             Fri 01 Mar 2024 18:34:21 +0000
ROA not before:           Fri 01 Mar 2024 18:34:21 +0000
ROA not after:            Thu 30 May 2024 17:34:21 +0000
asID:                     834
IP address blocks:        108.165.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Mar 2024 16:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:d8:0f:54:9f:0c:92:fb:e4:a1:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  1 18:34:21 2024 GMT
            Not After : May 30 17:34:21 2024 GMT
        Subject: CN=1200ba41-7d4d-4b97-9ffa-28bf2d84dea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:82:61:d3:43:3c:c0:0e:64:0f:d7:c5:2a:
                    43:9a:fa:2d:33:b2:3a:c9:73:b0:bf:a7:43:2b:92:
                    43:ab:3e:d8:df:6c:cf:b6:64:20:5f:dc:eb:76:5c:
                    65:d8:59:ba:55:a8:2b:75:9e:f7:c7:e6:bc:9e:d4:
                    fb:ab:ea:aa:6c:2b:49:c3:30:60:35:7a:d0:c8:88:
                    e9:52:60:4d:c5:37:ce:84:bd:d5:d5:f5:10:fe:9f:
                    20:9e:85:43:5a:b9:26:54:2d:d9:52:ce:ea:40:4f:
                    96:d5:b6:74:1f:8f:2f:8a:f7:a7:dc:da:7c:d0:35:
                    d4:c6:10:f7:21:99:b1:c3:d3:52:1f:fa:47:99:13:
                    59:2d:e9:67:5a:17:28:6f:15:32:d5:69:47:da:ed:
                    da:05:77:9c:30:bb:f6:b5:64:96:2f:42:d6:32:eb:
                    04:a8:69:c3:37:f0:b0:ab:12:15:43:95:ab:5f:ac:
                    e1:a6:35:df:6c:d7:7f:92:11:7f:4a:61:14:ef:f8:
                    38:f3:94:83:f6:2a:95:2a:28:a9:66:fa:12:6b:a1:
                    60:93:e4:68:ef:d9:ed:05:90:de:99:41:f0:00:e1:
                    19:da:0b:02:eb:0f:47:c9:e7:cf:0e:a0:04:a0:0a:
                    e0:db:0b:e3:08:17:9f:ae:2a:62:a2:73:82:9f:d3:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:11:36:E4:27:F9:7E:E3:89:A6:89:C4:DA:71:D7:E2:09:50:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c0ff9867-664e-32b0-8044-b54a2774b4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:f1:89:7a:c6:94:6d:58:76:df:59:1c:ca:c7:5f:4a:f7:
         8c:a0:22:d2:16:9b:09:b3:e9:75:ec:88:80:83:6a:5f:34:35:
         48:00:b8:85:b1:63:e6:ca:94:41:f6:36:47:f2:07:78:6c:d3:
         51:31:92:73:51:b8:e0:d4:b9:49:f0:42:21:10:4a:60:f4:2a:
         8f:53:eb:d7:29:db:52:2c:ab:95:26:d3:50:97:c7:3a:e0:4b:
         92:da:4c:8a:f7:cd:68:cb:ae:87:53:83:80:a6:20:10:e8:c6:
         ce:18:9a:39:fa:e8:46:24:00:c6:6c:fb:08:32:1a:8f:33:0b:
         fd:e0:9f:99:80:f7:1a:d7:bc:09:d7:2c:ec:03:32:01:cd:6a:
         d4:ef:c6:b0:b3:fc:d8:08:35:99:15:0d:00:f2:b8:6d:f1:a5:
         52:f8:49:26:f1:58:5f:f2:2a:b7:6d:44:48:4a:14:18:39:91:
         c5:b4:e7:30:fe:5c:f8:fa:6b:96:22:fa:29:a9:07:62:dd:d4:
         da:5d:d8:c6:ac:f3:ea:35:93:44:ec:ee:50:c4:0e:3a:4b:d3:
         0a:ef:46:e8:f4:2f:ed:fe:a4:9e:9f:a6:e0:07:3b:04:5f:d4:
         96:38:c5:9a:d7:c6:4d:60:e4:38:1e:67:1d:b8:67:1a:d6:f3:
         fd:f1:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----