Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd56788f-6973-39d7-baa8-2c44d69fe469.roa
File:                     dd56788f-6973-39d7-baa8-2c44d69fe469.roa (raw, json)
Hash identifier:          O6CzLRwRQOdm8z+pdzNk7annAcAEbFHwHrxvH8FAWC0=
Subject key identifier:   91:06:EC:3A:72:68:0E:49:56:25:F0:B2:03:9E:99:29:53:C5:D2:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842218BDF447A9FB9EF6F7EE180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd56788f-6973-39d7-baa8-2c44d69fe469.roa
Signing time:             Tue 06 Jun 2023 15:48:46 +0000
ROA not before:           Tue 06 Jun 2023 15:48:46 +0000
ROA not after:            Mon 04 Sep 2023 15:48:46 +0000
asID:                     38337
IP address blocks:        166.1.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:8b:df:44:7a:9f:b9:ef:6f:7e:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  6 15:48:46 2023 GMT
            Not After : Sep  4 15:48:46 2023 GMT
        Subject: CN=a371d80b-6006-479d-81c7-b826791464ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:f0:79:2a:92:ee:f9:c1:40:9d:48:55:c2:
                    2c:e6:3d:29:94:d8:e4:b7:24:2b:5e:65:83:d7:e5:
                    db:45:4a:df:88:b3:43:08:19:54:5c:5f:6d:43:4b:
                    5b:9f:d6:fb:31:78:2a:11:5e:83:3d:ec:45:81:be:
                    9d:c2:8c:da:c3:6e:56:81:b2:ca:90:75:15:fb:31:
                    b2:35:46:ce:c5:4d:bf:5b:c2:8e:d2:cf:52:99:13:
                    ed:78:25:88:64:2d:37:71:a4:f4:40:38:9b:28:d9:
                    fb:42:19:2f:fa:29:d8:52:e1:f3:05:c9:87:0c:9b:
                    2e:62:53:89:0e:a0:df:e3:91:06:1e:72:5a:b8:17:
                    d1:5b:00:ed:7b:92:17:ee:68:71:19:60:84:ab:0d:
                    70:98:00:c5:76:bb:df:a1:05:07:7c:3b:e2:0a:e6:
                    d2:ff:52:26:e1:61:61:e0:12:04:ff:ce:87:5c:d6:
                    65:36:c7:ea:9d:c4:4e:c4:53:b1:d8:2c:6e:68:1b:
                    c0:9f:8d:70:54:ec:24:e6:f5:ef:c3:9b:a7:c5:fb:
                    fd:fb:d8:35:71:61:91:2d:10:28:af:53:26:bc:d2:
                    af:59:18:c9:89:dd:04:9d:f1:53:55:9c:85:47:d0:
                    73:f1:59:7c:d9:a0:af:a4:2d:57:08:e7:47:8f:01:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:06:EC:3A:72:68:0E:49:56:25:F0:B2:03:9E:99:29:53:C5:D2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd56788f-6973-39d7-baa8-2c44d69fe469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:21:fa:63:54:fb:c3:44:68:28:7f:26:7c:35:fd:5e:d3:
         79:18:a0:c5:72:8a:6b:10:19:05:7d:9f:11:5a:41:ee:ac:24:
         4d:82:1b:32:7e:19:44:ea:21:ef:99:4f:e1:01:f5:96:8f:e9:
         0f:b3:39:bd:3a:32:69:23:88:84:d7:40:be:45:8e:d3:c7:3d:
         70:03:de:3e:e5:a1:b6:96:e9:1a:92:c6:5d:02:32:6e:4c:a7:
         3e:15:9e:1c:78:ed:c1:4d:ef:2a:1e:79:f4:a8:a6:b1:d2:c3:
         a7:60:ce:c6:61:03:be:a6:36:06:d9:62:96:a5:5a:38:01:f2:
         db:04:2e:6c:f9:46:5d:69:53:cf:57:e0:4c:f1:6c:38:08:fc:
         e9:cb:ad:39:a5:3e:2d:9b:c3:4b:92:c7:77:1c:05:f2:72:cc:
         0f:43:bd:35:7d:24:1b:03:1d:50:e0:c8:04:c6:26:15:7e:5a:
         79:35:50:06:d1:c9:d3:e4:5f:f4:11:07:70:72:b7:32:27:6e:
         ec:4c:54:f8:99:d5:46:fc:e2:ff:88:bf:9a:60:c2:ba:9b:2a:
         d7:74:06:53:8c:ea:2f:f9:91:9f:a9:a5:ad:92:ef:80:11:ca:
         68:37:d2:16:8e:f8:4b:34:01:07:84:fa:f2:23:16:06:ea:78:
         a1:d6:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-ams.rpki-client.org