Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c2d4d877-bd06-3943-82af-9894b6599c5c.roa
File:                     c2d4d877-bd06-3943-82af-9894b6599c5c.roa (raw, json)
Hash identifier:          V/BXnXWr9vlxNKmW+K7ToveOW9YfS0eCL1nU3nSP6Gg=
Subject key identifier:   EA:A6:22:87:51:35:7D:59:BA:8F:1C:62:FD:44:DD:9F:8F:AD:5C:9A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584357ABBC69711E5D60BE8B5080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c2d4d877-bd06-3943-82af-9894b6599c5c.roa
Signing time:             Mon 25 Sep 2023 17:53:33 +0000
ROA not before:           Mon 25 Sep 2023 17:53:33 +0000
ROA not after:            Sun 24 Dec 2023 18:53:33 +0000
asID:                     834
IP address blocks:        166.0.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:57:ab:bc:69:71:1e:5d:60:be:8b:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 17:53:33 2023 GMT
            Not After : Dec 24 18:53:33 2023 GMT
        Subject: CN=5794ef7a-5706-4cae-8284-a520b18f183d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:e9:f9:a7:8c:29:6f:5e:8d:6b:14:78:8a:
                    d5:fd:7d:c9:e6:d3:9d:aa:8f:2b:48:6b:82:f8:0a:
                    80:96:dd:f7:6e:69:2c:76:a9:6b:c1:51:ad:1c:b2:
                    88:6b:e5:6f:3a:46:fe:ec:6f:9a:e9:fe:e9:8e:14:
                    79:99:72:b8:49:bf:e2:01:6d:cb:dc:62:80:a5:d1:
                    66:0d:a8:e9:6f:bc:23:e4:22:2a:d6:49:7e:c3:56:
                    0e:33:4c:76:d7:97:6c:27:b3:9b:8f:0b:0d:c5:94:
                    e1:2f:72:1d:dc:8b:96:95:dc:eb:9c:38:57:30:b8:
                    62:65:81:48:f4:e0:99:9a:3c:ab:23:b9:97:10:be:
                    ef:05:a6:2b:ef:6f:3b:05:3f:d6:2b:96:b2:6f:7c:
                    9f:d3:31:ad:55:20:0e:0c:76:a2:ef:8b:f1:82:fa:
                    6b:27:c2:df:e6:0b:76:d8:44:2f:66:e8:62:87:2d:
                    93:97:38:14:85:8e:f7:5e:59:19:7b:06:6f:d9:45:
                    be:1c:da:36:6c:97:d6:9f:54:3c:09:f2:36:59:7b:
                    f9:40:35:7d:06:d0:8f:ea:1b:53:12:21:cb:b2:43:
                    0a:57:36:ec:f7:79:08:b4:3f:14:c3:99:ef:66:cc:
                    2e:dc:74:e7:bc:80:1a:f4:0b:31:12:f4:e6:ab:10:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A6:22:87:51:35:7D:59:BA:8F:1C:62:FD:44:DD:9F:8F:AD:5C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c2d4d877-bd06-3943-82af-9894b6599c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:3d:61:a0:77:1a:7b:13:d2:36:49:7e:6f:b9:36:0e:af:
         79:1e:08:c8:8c:e8:0c:68:47:ec:de:52:70:d5:51:34:ad:c7:
         29:99:12:01:3e:70:83:8e:91:0b:da:eb:f7:f9:a0:43:79:13:
         64:dd:01:a6:c9:53:e4:cb:ab:11:5c:60:70:8c:09:a0:c9:65:
         41:c5:76:80:8d:dd:7f:32:b7:98:82:5b:9a:ed:bb:fd:25:95:
         0d:d8:42:f0:d6:cc:c6:57:c1:7b:99:c8:70:45:20:ad:0f:e2:
         bd:ef:9c:d6:59:0a:c3:a7:6b:20:da:cf:73:c1:f7:55:28:43:
         d3:84:ed:7f:17:36:5e:cd:da:e0:14:0c:5f:72:24:4e:37:3a:
         70:f5:12:e8:61:35:f2:83:20:d0:07:2c:a4:32:36:0a:a3:dc:
         fd:40:be:76:c5:47:c0:a3:98:b1:c9:80:cd:42:25:be:46:17:
         84:2a:1b:73:31:e3:35:82:07:d2:e5:78:be:78:db:6f:20:ba:
         e5:ec:08:2e:7e:4a:06:bc:81:19:d6:48:6e:e4:74:18:6c:53:
         3d:bf:39:0e:8c:a1:12:a0:09:a0:82:38:6e:36:94:f9:16:50:
         2b:86:fd:fe:4c:59:53:db:c6:fa:bd:a0:72:78:85:71:18:d0:
         f1:4e:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----