Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e058404e-8c3a-3bdb-ad1c-05cde504d0ff.roa
File:                     e058404e-8c3a-3bdb-ad1c-05cde504d0ff.roa (raw, json)
Hash identifier:          jR55o17Dc6jBTXXukyfb5tbu7g2dFOvxEqOGD1J6TbU=
Subject key identifier:   56:F7:36:8A:82:99:2E:30:AB:87:75:0A:A1:19:60:81:0E:82:96:FF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858448B927364BA90D19BA348BBC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e058404e-8c3a-3bdb-ad1c-05cde504d0ff.roa
Signing time:             Sun 14 Jan 2024 00:51:35 +0000
ROA not before:           Sun 14 Jan 2024 00:51:35 +0000
ROA not after:            Fri 12 Apr 2024 23:51:35 +0000
asID:                     11798
IP address blocks:        166.1.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 22:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8b:92:73:64:ba:90:d1:9b:a3:48:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 14 00:51:35 2024 GMT
            Not After : Apr 12 23:51:35 2024 GMT
        Subject: CN=b6c58563-6b3d-4177-86e1-2f15d6083caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:6b:1d:e2:6e:65:23:86:69:03:3f:75:6b:
                    d6:36:59:55:c7:ea:de:a8:93:70:e5:b7:5c:ec:84:
                    3e:52:de:74:5a:a0:79:ca:80:76:3d:69:44:c6:82:
                    af:a3:46:dd:1d:b8:30:ef:b2:52:94:26:77:c2:f9:
                    b5:3f:25:08:44:6d:8f:f5:25:17:6f:89:a3:26:c3:
                    39:75:67:eb:81:06:69:bd:52:28:68:cd:3a:f9:b7:
                    8a:c7:8e:b2:5a:5b:41:70:97:bb:ff:f8:21:c6:08:
                    99:2b:41:17:96:b2:7c:2b:7c:8a:3a:4f:6e:aa:95:
                    d1:ed:e1:65:1c:8c:a2:9c:41:18:f3:e1:98:60:c8:
                    ae:92:f1:10:ba:d3:99:0a:bc:5d:27:e4:69:d7:fb:
                    80:6f:b9:54:89:6c:c2:fb:60:3d:36:94:18:78:94:
                    35:2b:62:10:06:45:92:67:ab:a5:ae:de:ed:2a:8f:
                    98:c8:ec:24:80:ef:ff:e7:3f:72:7d:21:12:e5:01:
                    2e:36:83:83:5d:6b:84:23:04:4f:02:70:5c:84:2a:
                    a3:a9:a8:7f:22:e9:e9:53:e4:f9:eb:88:85:2a:d3:
                    16:6d:1f:93:3b:44:13:d5:32:e9:c9:8a:93:2e:da:
                    7a:c5:b8:23:d6:b3:49:62:2d:c5:45:16:5c:90:2c:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F7:36:8A:82:99:2E:30:AB:87:75:0A:A1:19:60:81:0E:82:96:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e058404e-8c3a-3bdb-ad1c-05cde504d0ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:a1:44:44:e7:97:b7:da:48:32:88:6c:c3:c8:60:ec:75:
         67:fe:55:12:b5:49:5b:79:ed:bc:64:b4:8f:30:a0:05:61:bd:
         87:f4:f7:f1:d2:17:3c:a4:7d:51:22:c3:41:2f:8b:5e:fe:a1:
         55:58:d9:3e:e2:35:72:29:95:0a:e3:0e:44:dc:de:af:09:ad:
         9e:43:08:c7:7d:24:e8:9a:84:09:fd:91:5d:5e:aa:5b:f5:82:
         9f:09:1e:b5:99:77:91:7b:9f:ff:89:9e:e9:77:1c:e4:b3:26:
         84:c2:b8:d0:da:5e:c9:06:d2:90:b4:ab:f6:ab:c8:c0:ec:fd:
         19:14:d4:ae:f6:da:bd:76:1e:c7:c7:28:ab:b5:b5:3a:a3:44:
         cb:73:18:a7:96:9d:af:be:fd:33:78:f0:77:ce:ac:05:80:e5:
         97:d7:df:3c:97:be:d1:0c:89:3f:d8:62:8f:73:7b:5e:89:ae:
         e6:31:75:43:7a:04:1b:e6:08:26:02:20:09:9a:88:ce:af:1c:
         1d:64:89:07:f3:97:e9:5f:18:d4:c1:01:13:39:62:f9:35:64:
         c4:35:7c:73:2b:b3:a0:61:c5:a3:10:f2:a7:bd:80:28:9d:4a:
         7b:ec:ef:c1:ef:b7:5e:bc:c0:5d:ca:43:13:a7:2f:56:36:3d:
         17:7a:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----