Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd5ffb97-edaa-3ad3-abff-9ff5bc0111c7.roa
File:                     dd5ffb97-edaa-3ad3-abff-9ff5bc0111c7.roa (raw, json)
Hash identifier:          4RryetVmY6tgRT1M6awAyqpOZto2vqavD3MNM8iow5g=
Subject key identifier:   6F:19:73:59:2D:39:96:29:ED:7D:A3:A4:E0:20:E8:CA:3F:DB:CE:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584230E334055514D4E4FA1D3D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd5ffb97-edaa-3ad3-abff-9ff5bc0111c7.roa
Signing time:             Mon 12 Jun 2023 03:41:51 +0000
ROA not before:           Mon 12 Jun 2023 03:41:51 +0000
ROA not after:            Sun 10 Sep 2023 03:41:51 +0000
asID:                     7018
IP address blocks:        166.0.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:30:e3:34:05:55:14:d4:e4:fa:1d:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 12 03:41:51 2023 GMT
            Not After : Sep 10 03:41:51 2023 GMT
        Subject: CN=252eeecb-ee3d-42ce-8e2e-757aa53867a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:2a:e2:db:14:70:fc:82:21:63:62:0f:4a:
                    3f:48:9c:54:f4:90:83:db:c9:f0:9a:3a:8b:c8:82:
                    8f:cd:f7:68:eb:9b:0f:44:a5:93:af:7d:a7:18:de:
                    b1:67:2e:31:0b:32:97:33:b9:03:75:1b:14:f0:1f:
                    8d:5b:e0:be:de:20:15:13:9e:33:bd:df:4d:66:0b:
                    40:43:d8:32:60:79:b9:ff:50:ab:90:94:07:a6:95:
                    c7:3b:eb:f9:cb:8c:36:7c:bb:52:38:ec:62:c1:f7:
                    77:28:25:7e:b6:a5:11:3d:4c:e0:b6:b4:fb:dd:b7:
                    bf:f0:98:63:48:3a:86:ef:41:ab:a1:d2:64:75:14:
                    58:3f:5d:24:3a:a6:a2:b5:35:bb:05:41:be:ee:9a:
                    8b:fa:ff:41:4a:d1:3c:43:c5:0b:21:13:bc:bb:9b:
                    72:05:e0:5d:a8:c9:0a:10:3a:1c:b0:76:8e:87:8d:
                    2d:83:b4:b4:2c:e2:c9:03:4b:f6:0a:b5:be:73:49:
                    92:4d:7b:b4:aa:df:f3:16:90:4e:a7:7b:3b:08:bc:
                    a8:f9:70:d0:76:c0:ae:c6:b6:a0:2f:2d:df:e2:a2:
                    9b:b5:b5:2b:be:aa:d6:7e:5a:65:49:3f:46:49:98:
                    98:15:1d:4f:7b:7d:4f:65:38:b8:41:36:5f:51:40:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:19:73:59:2D:39:96:29:ED:7D:A3:A4:E0:20:E8:CA:3F:DB:CE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd5ffb97-edaa-3ad3-abff-9ff5bc0111c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:50:8b:61:33:77:da:c1:fb:c5:49:cc:6f:89:57:be:cd:
         17:7e:9f:96:10:ca:b3:e8:a2:42:4b:33:75:72:ca:73:c2:e0:
         de:2f:f1:bc:f1:0b:79:97:d3:12:93:5c:3b:77:09:d4:d6:78:
         41:e3:d5:72:33:26:b9:c7:7e:9f:3c:a8:6a:32:e6:bb:c9:9f:
         02:5e:95:7a:f9:ac:64:44:32:db:0b:e6:ad:59:44:02:a8:74:
         df:50:8c:80:86:e2:75:36:0d:a8:bb:6d:a2:9c:3e:c4:40:67:
         25:8c:8b:41:30:97:0d:a5:13:fc:ca:c0:dd:bc:1f:b3:c0:87:
         19:b9:8a:e0:14:45:8b:8c:d5:74:5d:51:7c:3f:2c:20:ee:cc:
         30:f6:6c:b1:5f:11:8b:97:75:66:12:13:ca:97:80:2a:4f:62:
         3e:a8:67:a5:aa:52:ab:35:23:99:19:ad:ac:34:87:13:68:97:
         0b:d1:63:f4:2c:66:c5:d5:f4:17:a0:8a:52:48:69:28:42:a7:
         c0:4b:88:8e:2d:83:d4:77:d3:7a:39:0e:67:38:44:94:0f:e0:
         f5:be:81:41:2a:c4:5e:96:43:71:0f:40:30:58:d0:0d:72:da:
         17:5c:81:62:1d:f9:cd:14:3c:58:b6:a8:9a:c9:53:56:8f:32:
         c6:76:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----