Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce1f06bf-d0a8-31db-9d82-6be3fe1afa09.roa
File:                     ce1f06bf-d0a8-31db-9d82-6be3fe1afa09.roa (raw, json)
Hash identifier:          K6PM4iRR8gCay//O6gQJho7AR77ve/GJdzGcB3JKRxA=
Subject key identifier:   84:7F:54:33:90:1F:12:DA:0E:1E:C3:A8:6C:01:09:61:A5:82:0C:49
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858429AA90C63254D598403609FE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce1f06bf-d0a8-31db-9d82-6be3fe1afa09.roa
Signing time:             Thu 20 Jul 2023 01:00:17 +0000
ROA not before:           Thu 20 Jul 2023 01:00:17 +0000
ROA not after:            Wed 18 Oct 2023 01:00:17 +0000
asID:                     211439
IP address blocks:        108.165.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9a:a9:0c:63:25:4d:59:84:03:60:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 01:00:17 2023 GMT
            Not After : Oct 18 01:00:17 2023 GMT
        Subject: CN=163d0632-1a0a-4054-ad97-e77042b223a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:2a:fd:b0:4a:de:76:c5:51:89:bc:c9:a8:
                    26:4a:df:3f:e3:4b:55:f8:9b:96:fc:d0:c7:67:66:
                    d0:74:e0:52:00:6b:98:ac:81:96:52:d5:98:5b:f4:
                    a0:5d:a4:e4:47:06:9c:db:31:c4:e7:df:95:8f:69:
                    0b:79:00:86:7a:ae:06:32:b1:32:7a:24:d1:0e:21:
                    db:c2:ff:e5:d8:7b:0e:34:12:b5:c4:0d:17:1b:f9:
                    65:d5:5f:fa:61:2d:b8:90:81:45:f8:7a:31:db:b0:
                    4c:61:14:51:4d:85:f3:df:7c:71:5d:35:0a:66:39:
                    4c:2d:a9:d0:b3:68:90:54:57:b8:a0:e0:b2:cb:0c:
                    49:2d:80:b6:da:9b:e5:c6:64:f5:1f:6d:c2:09:7d:
                    02:2c:08:5c:57:45:03:ef:53:7c:c5:03:4e:10:06:
                    7f:3b:81:3e:b7:9a:f1:9e:cd:32:8b:da:99:b1:d7:
                    fb:9f:5e:d3:a4:57:f0:90:36:d6:b1:93:63:e2:c9:
                    2b:96:93:fb:e5:ec:b7:43:02:dd:ad:a2:df:94:b3:
                    c9:30:27:81:26:7d:89:37:9e:ac:85:86:4e:7c:1d:
                    7e:65:74:28:a1:4b:49:cd:3a:32:95:31:84:91:c3:
                    fa:69:b3:10:8a:ad:6e:07:10:62:65:73:76:19:44:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7F:54:33:90:1F:12:DA:0E:1E:C3:A8:6C:01:09:61:A5:82:0C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce1f06bf-d0a8-31db-9d82-6be3fe1afa09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:55:45:d0:d4:7c:b9:b8:1f:b8:95:62:09:d5:2f:6d:96:
         a3:ef:a4:d1:14:73:05:4e:b9:5b:9f:51:b6:c3:c5:0e:c0:f6:
         42:58:55:91:ef:c2:16:5b:9d:33:73:ca:db:db:82:d0:5d:bf:
         0c:a8:0c:fa:c9:7c:71:8d:c1:ff:12:35:d9:6c:c7:9d:d8:31:
         21:a5:c2:f3:f7:1b:cc:e9:be:91:fe:35:fc:8a:45:c4:5d:27:
         72:c3:dc:c6:66:9d:80:a6:3a:83:81:d7:b2:21:25:3a:de:1b:
         3a:1f:74:b5:24:7d:e9:f8:bc:47:d4:38:ad:35:d1:6f:e8:f5:
         3b:d7:e0:0b:28:53:84:4c:d7:47:bb:17:19:26:e3:3a:fb:b8:
         16:22:83:37:0e:c8:8f:80:8b:6e:d7:00:72:90:25:80:0e:95:
         34:45:a0:43:06:63:a9:73:f2:a4:59:8e:0b:f0:fd:b6:eb:6c:
         f0:8d:b9:71:dd:36:3b:0d:67:63:be:dc:52:46:56:f2:67:2b:
         91:18:44:50:5a:43:7a:3e:99:e2:1b:91:e1:b6:f1:13:9b:7d:
         b4:a5:03:81:62:87:5a:47:d7:12:27:1b:99:d2:9d:25:be:00:
         6d:6d:9e:0a:f3:c1:07:91:4a:34:a6:ab:0e:da:22:1f:4c:38:
         75:a7:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----