Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d19eabb8-fdc2-327a-857a-7fcfb6af53ef.roa
File:                     d19eabb8-fdc2-327a-857a-7fcfb6af53ef.roa (raw, json)
Hash identifier:          n3fa/7qMtJ0BafQRG5xjkr4YSM/dHzZkyvlf6AQy39Q=
Subject key identifier:   5D:BD:96:C7:31:BE:FB:44:E6:7C:67:73:1A:B5:A7:6D:33:49:DA:0C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858421C17C856D6A22975DFC78980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d19eabb8-fdc2-327a-857a-7fcfb6af53ef.roa
Signing time:             Sun 04 Jun 2023 16:55:49 +0000
ROA not before:           Sun 04 Jun 2023 16:55:49 +0000
ROA not after:            Sat 02 Sep 2023 16:55:49 +0000
asID:                     834
IP address blocks:        166.0.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:1c:17:c8:56:d6:a2:29:75:df:c7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  4 16:55:49 2023 GMT
            Not After : Sep  2 16:55:49 2023 GMT
        Subject: CN=aba8c02d-35ae-4620-b209-22ef4ecc204d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:19:51:81:ce:39:5b:28:6b:f7:4c:43:b6:
                    bb:34:4d:b8:cc:c5:08:30:b9:80:fa:95:91:c5:ca:
                    95:a8:31:2a:97:e0:66:0f:e5:0a:27:62:33:20:e6:
                    0c:7f:0c:34:a4:ee:07:80:9d:4d:8b:4c:05:ab:7f:
                    77:58:c1:83:01:25:74:7c:14:fb:af:bd:1d:fa:96:
                    7a:5e:fc:63:e3:ed:ac:d7:28:b2:f8:a5:f2:cb:66:
                    34:25:3c:d7:a1:75:8b:9f:69:83:e1:e5:39:d0:47:
                    02:bb:56:0c:44:92:6d:ce:94:86:59:24:c5:bb:0e:
                    a4:7e:de:03:38:36:0b:49:0a:4f:95:3d:c6:ba:4b:
                    94:5f:1a:c5:bb:7b:05:2a:0c:0f:bb:57:74:60:b0:
                    9d:10:36:80:73:a8:9d:3c:62:a6:ee:ff:49:b0:f9:
                    aa:40:b3:a2:01:cf:9b:f8:90:28:f7:24:af:4c:6d:
                    84:ab:87:01:f1:12:8a:86:c3:a9:49:ed:93:5f:e7:
                    26:20:43:eb:db:ad:58:88:92:77:db:f1:e4:58:21:
                    78:13:a1:5a:e5:9d:7d:be:c0:06:80:46:3d:0e:06:
                    d3:19:61:17:e2:68:7e:58:af:5c:2c:f5:15:d1:21:
                    68:77:5c:11:e6:3c:5f:26:5f:73:80:6e:fc:71:e6:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:96:C7:31:BE:FB:44:E6:7C:67:73:1A:B5:A7:6D:33:49:DA:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d19eabb8-fdc2-327a-857a-7fcfb6af53ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:81:67:c7:d4:fc:25:29:51:37:89:78:97:ae:d8:af:62:a7:
         ee:b5:d8:66:9c:8e:59:8d:1f:f7:b4:70:01:9a:4f:e9:94:43:
         32:6f:9e:6c:a9:0d:f2:79:bb:1f:e5:79:5d:54:c8:93:2e:33:
         da:72:bf:1b:4d:b9:c0:c5:a1:8c:fe:e3:42:b3:85:65:6f:78:
         28:93:d1:34:c8:05:18:4e:1c:07:e0:d0:1c:e4:0f:38:e4:23:
         3f:41:0e:4d:b1:7d:2d:41:9a:45:63:84:03:81:da:1a:ab:19:
         80:77:09:f0:e9:2b:04:d4:7a:f6:0d:3b:8f:3b:ca:1d:96:d2:
         8f:6e:3a:a4:2b:72:38:38:38:85:df:e0:7d:81:3d:1a:87:98:
         c3:61:14:bc:37:1f:5d:6f:d0:6a:cb:65:fd:62:ef:98:bb:bb:
         8d:5b:82:d4:5b:1c:43:ea:ec:a1:97:51:0c:03:cf:70:f6:3c:
         54:83:9b:71:57:b7:0a:48:a8:30:6b:2f:7e:11:64:d8:22:cb:
         1f:1b:23:25:a6:bb:c5:09:2f:a3:68:c3:34:c9:78:18:f1:61:
         0d:09:8f:9f:5a:b5:d4:86:b5:4c:ca:65:dc:c2:d8:70:4a:9c:
         e0:52:0d:7c:e3:0d:7e:58:89:da:56:90:1d:6d:9a:00:73:a5:
         30:92:9e:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIcF8hW1qIpdd/HiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYwNDE2NTU0OVoXDTIzMDkwMjE2NTU0OVowLzEtMCsGA1UEAxMk
YWJhOGMwMmQtMzVhZS00NjIwLWIyMDktMjJlZjRlY2MyMDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEAZUYHOOVsoa/dMQ7a7NE24zMUIMLmA+pWR
xcqVqDEql+BmD+UKJ2IzIOYMfww0pO4HgJ1Ni0wFq393WMGDASV0fBT7r70d+pZ6
Xvxj4+2s1yiy+KXyy2Y0JTzXoXWLn2mD4eU50EcCu1YMRJJtzpSGWSTFuw6kft4D
ODYLSQpPlT3GukuUXxrFu3sFKgwPu1d0YLCdEDaAc6idPGKm7v9JsPmqQLOiAc+b
+JAo9ySvTG2Eq4cB8RKKhsOpSe2TX+cmIEPr261YiJJ32/HkWCF4E6Fa5Z19vsAG
gEY9DgbTGWEX4mh+WK9cLPUV0SFod1wR5jxfJl9zgG78ceYWAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF29lscxvvtE5nxncxq1p20zSdoMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDE5ZWFiYjgtZmRjMi0z
MjdhLTg1N2EtN2ZjZmI2YWY1M2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCBZ8fU/CUpUTeJeJeu2K9ip+612GacjlmNH/e0cAGaT+mUQzJvnmyp
DfJ5ux/leV1UyJMuM9pyvxtNucDFoYz+40KzhWVveCiT0TTIBRhOHAfg0BzkDzjk
Iz9BDk2xfS1BmkVjhAOB2hqrGYB3CfDpKwTUevYNO487yh2W0o9uOqQrcjg4OIXf
4H2BPRqHmMNhFLw3H11v0GrLZf1i75i7u41bgtRbHEPq7KGXUQwDz3D2PFSDm3FX
twpIqDBrL34RZNgiyx8bIyWmu8UJL6NowzTJeBjxYQ0Jj59atdSGtUzKZdzC2HBK
nOBSDXzjDX5YidpWkB1tmgBzpTCSnj8=
-----END CERTIFICATE-----