Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4ac13d6-ed29-3243-b9c1-0fc2949f4d9a.roa
File:                     d4ac13d6-ed29-3243-b9c1-0fc2949f4d9a.roa (raw, json)
Hash identifier:          WhSa7sTS00Ph5R7Iv1qU8vKS9Ta2NBQgvP+p5c7RHAQ=
Subject key identifier:   23:B3:A0:82:25:EE:E9:CA:7A:9B:45:3F:6E:2F:8B:7F:B7:FC:31:DD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858429482DF04ABDD04C7D5F0F480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4ac13d6-ed29-3243-b9c1-0fc2949f4d9a.roa
Signing time:             Mon 17 Jul 2023 20:08:35 +0000
ROA not before:           Mon 17 Jul 2023 20:08:35 +0000
ROA not after:            Sun 15 Oct 2023 20:08:35 +0000
asID:                     211318
IP address blocks:        166.0.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:94:82:df:04:ab:dd:04:c7:d5:f0:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 17 20:08:35 2023 GMT
            Not After : Oct 15 20:08:35 2023 GMT
        Subject: CN=a226de13-1c92-401e-acea-8011a55f1699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fd:a6:ee:5d:03:d6:b6:36:16:5e:98:8a:25:
                    5d:8d:a0:55:a6:61:99:86:36:b4:d2:23:92:ff:8e:
                    1e:a7:d6:30:d9:07:1c:d3:79:6c:b1:19:49:4b:3a:
                    bf:2e:d1:2e:46:b7:79:2c:6a:f0:1d:4a:fa:6c:6d:
                    81:ca:d4:ba:b6:eb:e9:97:b4:54:80:80:e2:16:6f:
                    25:b1:db:5f:ee:bc:0b:76:f6:45:3d:e9:b1:68:c6:
                    0a:28:31:55:f1:63:22:fe:df:85:d2:e2:46:03:cb:
                    cc:18:ff:98:3c:13:08:47:a8:9b:bd:0d:c7:a1:83:
                    5f:8e:6d:8e:da:11:e9:17:d2:58:13:e2:02:b6:39:
                    9e:e8:16:67:13:d6:de:0b:3c:64:6e:91:6c:4a:4a:
                    bd:49:26:16:78:83:04:b6:d8:3d:59:2a:9c:2d:da:
                    33:1b:41:80:41:57:1e:45:e5:84:7e:0d:db:aa:9c:
                    8c:3c:9e:89:fa:c2:af:f9:25:ab:56:4b:14:8c:f2:
                    03:9d:a0:49:28:a3:51:fc:82:65:de:3e:7b:a8:7a:
                    1e:8a:5a:e1:a8:a5:c4:80:1d:6d:31:cd:95:11:aa:
                    44:5c:dd:03:fc:75:12:cb:a3:36:c1:b0:dc:25:7e:
                    52:10:61:78:a8:71:03:07:e2:ed:00:81:ab:20:2c:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B3:A0:82:25:EE:E9:CA:7A:9B:45:3F:6E:2F:8B:7F:B7:FC:31:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4ac13d6-ed29-3243-b9c1-0fc2949f4d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:82:9e:ae:ba:7c:f9:1e:79:74:43:b0:a5:ff:21:c1:8c:
         95:a3:a2:30:82:ca:42:35:11:5e:57:43:04:b5:57:e4:28:98:
         f4:f4:52:61:91:8d:e3:96:f9:f8:5a:ea:d7:cd:5e:a8:e0:d7:
         7b:95:b7:ff:84:30:64:22:f6:e9:e5:d7:08:f1:bd:ff:bf:35:
         c5:37:96:78:92:00:a8:97:14:a5:5c:21:c5:19:c9:53:91:aa:
         5b:d8:46:2a:28:1e:88:a1:80:87:9b:d7:f5:48:7e:2d:45:6b:
         60:2a:c2:93:70:33:80:22:83:30:b7:75:f2:b3:4d:17:53:0a:
         9c:e3:7c:ad:19:97:73:03:a5:7e:ac:0d:f5:b9:52:2f:70:f8:
         20:4f:df:fd:d8:79:45:75:64:19:02:df:89:78:81:74:23:ab:
         42:2e:17:98:75:4d:5a:1b:3a:81:a3:4b:cb:27:73:64:f6:ac:
         5f:c3:7e:31:40:e4:48:bb:96:b9:63:19:61:e8:19:db:da:e5:
         f8:de:2b:e0:00:d5:22:fd:0c:5a:5f:f5:5d:83:58:fb:48:48:
         9b:5d:f4:e4:cb:57:41:27:4b:86:02:76:56:e7:76:f9:15:6f:
         55:2b:33:91:33:72:47:11:fc:51:70:0d:a2:38:c4:c5:7f:a9:
         30:36:5a:1a
-----BEGIN CERTIFICATE-----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