Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c20a175e-8c17-3fad-bb81-cd86b0a7afd7.roa
File:                     c20a175e-8c17-3fad-bb81-cd86b0a7afd7.roa (raw, json)
Hash identifier:          f2Mm7HUeDsR0kUPK12sc0oJ6tYZSMCJx3RqOE2cD70w=
Subject key identifier:   71:E5:DF:C2:FF:AF:A8:8D:5D:2F:C8:9A:27:DA:C4:44:A2:85:38:36
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584291698D34D5500C3A2F9892A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c20a175e-8c17-3fad-bb81-cd86b0a7afd7.roa
Signing time:             Sun 16 Jul 2023 17:30:09 +0000
ROA not before:           Sun 16 Jul 2023 17:30:09 +0000
ROA not after:            Sat 14 Oct 2023 17:30:09 +0000
asID:                     11798
IP address blocks:        166.1.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:91:69:8d:34:d5:50:0c:3a:2f:98:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 16 17:30:09 2023 GMT
            Not After : Oct 14 17:30:09 2023 GMT
        Subject: CN=7b67c2fa-f3ab-4d44-bed6-a20134744635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:7d:3b:85:5b:bd:a5:bb:ca:ce:7d:e0:5e:
                    30:1b:7b:61:af:2c:28:c8:05:3c:63:d5:3a:df:73:
                    24:dd:67:78:44:55:d2:c8:41:16:fa:12:2e:7e:62:
                    dd:55:14:96:1d:b0:1d:68:f6:37:c2:7a:cf:fc:b0:
                    16:a0:46:cb:11:bb:40:cd:eb:c5:a9:e8:73:39:91:
                    a0:77:62:b5:9b:00:c7:4d:ff:4a:14:ab:64:58:57:
                    a3:61:49:0a:ec:b4:e9:8e:31:ad:e1:91:88:97:dd:
                    07:0d:9b:df:d1:8a:ca:56:b0:b8:c0:77:e2:7c:2a:
                    10:e9:66:a4:c5:98:c7:3d:00:fa:f4:60:f4:97:a0:
                    e6:c3:2c:95:7d:db:fd:98:a5:54:7e:88:d0:cb:aa:
                    75:4b:d6:a5:38:d4:42:9d:0d:32:a0:b5:e9:3e:b7:
                    5d:b4:f8:78:26:c3:54:78:cc:28:42:e6:8f:ae:f8:
                    88:b9:17:b2:56:76:1c:8c:1b:8d:0d:09:58:9c:df:
                    a0:57:5d:89:76:db:60:d0:9f:52:28:f9:9a:7b:78:
                    cc:55:3b:d8:c2:21:e9:a0:dd:05:36:47:15:95:13:
                    1f:39:56:04:c2:f1:f9:89:14:f9:30:3f:c4:66:f4:
                    fd:20:eb:96:1c:ce:98:b2:e9:ae:fe:b0:fe:5f:34:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:DF:C2:FF:AF:A8:8D:5D:2F:C8:9A:27:DA:C4:44:A2:85:38:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c20a175e-8c17-3fad-bb81-cd86b0a7afd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:61:76:cc:bb:5f:e4:e6:9d:df:16:c9:57:89:df:f6:d6:
         23:29:39:7c:ae:73:d9:ac:f4:71:e0:13:ca:b4:6b:eb:82:25:
         73:a1:b2:6c:65:16:3c:2e:bc:d5:f8:c5:e2:ca:88:c7:a4:fd:
         d6:d6:1f:2e:95:d0:97:33:7d:78:2a:d3:2d:98:62:93:24:59:
         50:87:5b:5c:62:b8:8a:ff:38:4a:65:8a:14:99:a9:a9:29:b4:
         85:c9:63:d1:c8:10:59:1c:d9:bb:74:41:17:24:5e:23:65:10:
         8a:74:3b:89:6c:28:07:ed:f4:1d:20:40:69:e7:8c:d1:e4:de:
         4a:63:a3:98:e0:01:94:db:99:5b:d4:2d:f5:b6:f3:1b:1e:51:
         7d:11:f3:d6:d2:37:bd:59:7b:ba:c7:8c:c5:f6:38:5f:b9:a2:
         d9:ae:8c:6f:05:96:33:ed:45:ec:24:2f:6d:6e:a5:31:6d:2a:
         60:36:b0:c3:63:f9:49:2b:be:c4:ab:02:d8:5e:e7:16:53:3d:
         6b:04:ba:50:72:f4:71:e4:98:bc:d1:d0:f7:64:8a:74:16:e8:
         04:cc:47:e6:08:df:f3:11:8f:72:21:4f:d8:93:9f:13:8a:99:
         d0:0f:27:05:91:0d:c9:a1:50:ad:80:b4:19:8d:9a:05:91:78:
         d5:2a:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----