Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dac40534-630c-3558-bf94-52dc3a148f49.roa
File:                     dac40534-630c-3558-bf94-52dc3a148f49.roa (raw, json)
Hash identifier:          wC0AB0oP2pmTMYipaJt+BMlj1eudEFzlMoA9KBQMVVY=
Subject key identifier:   7B:A1:7E:57:A4:98:7F:0F:04:7D:A2:1F:AA:B7:87:55:4A:63:F8:A9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E44701FEF21C774FDF6DE200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dac40534-630c-3558-bf94-52dc3a148f49.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Wed 09 Aug 2023 22:30:23 +0000
asID:                     43260
IP address blocks:        108.165.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:01:fe:f2:1c:77:4f:df:6d:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  9 22:30:23 2023 GMT
        Subject: CN=251ca6bc-f1b3-4fee-aa71-a3686ea4468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:32:b2:b1:2e:4b:6f:3c:65:b4:95:4a:90:
                    51:96:ba:63:72:ca:39:13:34:32:7a:91:8a:8f:b9:
                    88:c6:0d:d5:df:75:7f:25:42:03:81:a4:75:be:07:
                    06:fa:41:1c:32:1c:17:56:4d:5d:31:7b:61:7b:87:
                    b0:f3:e1:8f:c7:d8:a9:9d:e1:d3:38:4f:97:33:9e:
                    f6:21:e0:e3:97:36:fc:37:04:37:80:6f:d1:1b:07:
                    55:45:a7:dd:e6:c2:e1:db:55:9c:cf:12:08:cd:30:
                    09:9c:91:8f:96:81:0b:11:bb:f2:bd:b6:7f:42:83:
                    5b:cf:02:f7:e9:d0:1a:0e:b6:bb:db:ea:4a:7a:c7:
                    89:20:08:81:b7:76:3b:f4:d2:c7:08:45:ba:d1:70:
                    02:75:1b:dc:b2:2f:c2:60:05:75:5c:77:87:29:2b:
                    c2:69:b4:3d:9b:29:e6:6a:92:64:30:b1:a2:46:3f:
                    8d:b7:db:14:be:43:79:12:4d:ed:00:1e:9a:46:62:
                    88:6a:01:00:16:2a:26:4b:1f:78:4f:7c:49:57:c6:
                    04:1a:20:d7:ee:87:2e:ff:58:16:f1:25:5d:28:c1:
                    2c:f0:c2:87:c4:d5:29:08:3b:0b:21:fa:49:d5:e5:
                    2a:8f:50:bd:81:06:7e:42:f0:7e:0b:46:ff:51:c0:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A1:7E:57:A4:98:7F:0F:04:7D:A2:1F:AA:B7:87:55:4A:63:F8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dac40534-630c-3558-bf94-52dc3a148f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:2b:5a:d6:b0:b8:e3:a8:e6:48:ae:c0:90:54:93:76:ab:
         f4:a9:23:6f:39:53:52:2c:73:0b:a7:02:44:cb:e2:0c:2c:12:
         32:43:68:8f:62:e7:a5:ff:28:3b:50:54:5d:b9:05:3c:5a:8e:
         c0:91:6e:3b:46:c0:ee:17:a9:48:ea:47:32:33:64:fd:49:f8:
         56:ed:b8:83:42:2b:09:94:a5:94:e0:f7:ce:7c:ee:99:27:b8:
         a3:28:a7:93:6c:db:39:52:64:23:a5:30:d9:b4:09:cc:78:5e:
         2e:8d:03:fc:b6:3e:b2:1c:20:ed:f6:f6:60:40:46:46:bd:1b:
         67:67:b9:95:3d:c5:04:ec:3d:e0:72:63:ab:51:84:e4:b7:65:
         27:97:05:ae:2f:4c:df:92:f4:3d:0c:1f:12:17:de:93:4f:ed:
         fb:65:28:35:c0:a6:81:53:d0:98:76:f5:c1:ed:bd:0b:f2:c5:
         ab:b2:ad:fe:67:18:4c:37:b9:d0:94:1a:c4:4e:11:fb:e6:78:
         e2:92:f1:aa:44:a2:c5:35:be:34:fd:7d:5f:7e:0e:f3:83:4e:
         41:28:c0:e1:be:1d:0e:2c:0a:aa:89:3d:24:e8:56:f5:6c:e3:
         8e:03:c4:66:7e:06:c9:79:ed:09:e5:4c:18:ce:0b:55:bf:05:
         64:9e:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----