Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c18c8640-53f8-3997-863e-30a9d6276266.roa
File:                     c18c8640-53f8-3997-863e-30a9d6276266.roa (raw, json)
Hash identifier:          T8YCj7mYK3kitT72OF057+e2j1enQzpKMJLHRGKGeAI=
Subject key identifier:   84:4C:0B:F1:77:63:24:AC:89:B2:34:2A:14:C7:02:52:52:EA:87:27
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843871C432A6B046F4B9D116400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c18c8640-53f8-3997-863e-30a9d6276266.roa
Signing time:             Thu 12 Oct 2023 17:43:16 +0000
ROA not before:           Thu 12 Oct 2023 17:43:16 +0000
ROA not after:            Wed 10 Jan 2024 18:43:16 +0000
asID:                     834
IP address blocks:        108.165.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:87:1c:43:2a:6b:04:6f:4b:9d:11:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 17:43:16 2023 GMT
            Not After : Jan 10 18:43:16 2024 GMT
        Subject: CN=57268b81-aedd-4d59-94e1-a559961d9a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:43:80:9f:e5:ba:43:3e:61:ba:77:6d:85:
                    4f:b1:ab:27:88:65:83:80:38:c0:8c:4c:98:26:bd:
                    0e:e5:cf:a3:c2:ab:a5:11:8f:36:91:f2:0b:e3:9b:
                    4d:47:cc:70:16:e4:c9:a8:dc:5a:b6:c7:b1:bf:0e:
                    fd:a2:66:60:43:8c:f9:b7:e5:3b:3c:9b:f2:3e:67:
                    e7:6e:c4:9c:e4:cd:a5:cb:27:ba:ae:4f:d2:0b:b6:
                    77:fb:df:e3:9b:27:1a:a1:a8:6d:02:4a:20:19:25:
                    68:97:83:0b:d9:29:66:11:3f:f5:5f:95:47:7d:2c:
                    4f:fc:a1:52:e2:bf:f9:68:8a:4f:72:94:e7:a1:db:
                    89:39:0f:ff:37:84:55:f0:df:c7:f2:32:af:7e:0f:
                    bc:8f:d7:4f:e1:69:63:90:55:4c:bc:eb:f9:6e:6e:
                    07:57:34:cf:68:ef:50:9e:5c:8d:d1:5a:c3:dd:9b:
                    b6:12:5e:0a:d6:4c:fc:15:62:2e:e9:74:2a:6a:05:
                    72:84:f5:57:e1:fc:6d:d9:c3:53:8e:d7:0b:fb:2f:
                    de:f8:a3:9b:82:28:49:4f:e5:c7:db:f0:72:a2:a2:
                    9a:50:c4:76:f7:d4:99:6e:61:75:6a:dc:36:cb:59:
                    05:fd:6f:91:a1:0c:d9:8b:86:70:08:3a:e8:21:86:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4C:0B:F1:77:63:24:AC:89:B2:34:2A:14:C7:02:52:52:EA:87:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c18c8640-53f8-3997-863e-30a9d6276266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:40:23:7b:07:91:52:7c:cf:04:4b:c4:63:da:f7:27:97:
         ca:f0:a9:2b:eb:01:8d:c0:ba:2d:fb:2c:22:55:06:8a:36:bc:
         69:64:8d:ad:8c:d8:c3:52:a9:03:9d:44:da:2a:61:77:6a:38:
         df:0b:3d:84:c8:5b:82:22:93:bd:56:0e:6c:17:49:05:d4:ca:
         8d:ef:fe:56:2d:f1:42:b5:dd:20:93:5b:3d:a7:de:fd:a3:b3:
         19:05:dd:c2:5a:2f:14:c7:fe:3b:10:68:3d:90:b9:49:7e:18:
         a6:f8:9b:d1:c8:63:ff:bf:98:a6:f9:88:2d:a5:68:92:ba:70:
         a6:9c:41:69:63:0f:37:1b:2a:89:7f:d8:09:70:8e:71:3a:0c:
         2e:e1:c4:f7:95:21:9b:c4:2b:47:da:a8:7a:6e:c8:2c:dd:48:
         58:a4:3e:35:85:93:4f:7b:50:e6:d1:23:2b:51:b1:78:ac:11:
         a4:71:ce:d2:0b:31:8a:1b:c8:54:b6:73:d6:4f:5a:69:4e:0b:
         0c:4e:ed:85:fa:36:92:d2:a1:43:9c:ec:a5:e5:0c:c5:5b:f0:
         aa:22:b7:99:c6:bb:5a:6d:ee:f7:03:7a:6b:36:dc:19:a1:69:
         c0:0c:42:4b:42:48:ee:d9:d1:87:a9:b2:f9:51:c1:35:b4:5c:
         92:b4:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----