Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e07177a7-cbed-3f00-9cb9-83f26d013b7f.roa
File:                     e07177a7-cbed-3f00-9cb9-83f26d013b7f.roa (raw, json)
Hash identifier:          cR6mU/YQqBjJ90D/pz1CkF3MLv5VkqZ/S5+pEISUSOk=
Subject key identifier:   F1:DF:0A:83:A8:B0:E7:C6:E6:78:6D:24:FB:76:FC:C1:3D:BE:A0:95
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BB1AD8907827581302AA5600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e07177a7-cbed-3f00-9cb9-83f26d013b7f.roa
Signing time:             Mon 31 Jul 2023 15:55:31 +0000
ROA not before:           Mon 31 Jul 2023 15:55:31 +0000
ROA not after:            Sun 29 Oct 2023 15:55:31 +0000
asID:                     23470
IP address blocks:        166.0.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bb:1a:d8:90:78:27:58:13:02:aa:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 15:55:31 2023 GMT
            Not After : Oct 29 15:55:31 2023 GMT
        Subject: CN=aca88155-e054-4514-a6d3-7c92bb188db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:18:2f:97:b6:e9:91:fe:69:69:7d:35:21:
                    e8:b7:22:00:f3:4a:3a:e5:14:ca:1d:89:63:8a:b8:
                    d9:05:25:aa:31:40:18:95:c0:a5:9e:9f:be:88:ca:
                    d6:8d:12:ae:0f:ba:a7:b5:48:a7:17:ee:09:22:66:
                    e7:fa:36:5c:e3:13:57:11:6d:77:0e:43:ad:67:ad:
                    67:fe:b1:a2:8a:27:7d:01:be:ff:7d:fc:c5:03:47:
                    10:9f:57:05:50:26:d0:48:43:90:39:12:92:5c:de:
                    e5:21:f9:58:42:e2:5d:fc:d0:2c:45:8b:c7:4d:0d:
                    3e:04:e6:13:4f:13:90:e3:0e:b7:c4:85:1e:c6:d7:
                    07:47:44:88:65:c6:0e:e3:80:ed:32:59:2d:66:10:
                    38:81:86:d0:2a:45:35:99:4d:e3:d4:82:67:db:53:
                    7b:b6:98:ce:2f:f7:4b:02:93:01:90:d3:56:10:00:
                    8b:e6:6c:ba:20:56:52:be:63:a1:0f:0d:31:e3:fa:
                    ec:66:75:d8:06:74:0b:bc:7e:e3:91:85:e4:49:f8:
                    6e:6f:b6:21:d6:55:35:81:b7:6d:4d:6a:15:49:74:
                    8b:08:36:bb:36:6c:ed:2f:5f:ce:8a:50:ce:e8:bd:
                    63:05:f3:40:74:40:62:20:e1:6b:5d:65:96:69:b3:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:0A:83:A8:B0:E7:C6:E6:78:6D:24:FB:76:FC:C1:3D:BE:A0:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e07177a7-cbed-3f00-9cb9-83f26d013b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:db:9f:1b:0b:48:6e:49:74:cd:74:d3:d9:5b:10:f7:10:
         87:47:dc:29:e9:f0:01:e1:b6:23:2c:7b:d8:c2:16:30:f8:bf:
         45:ac:e4:1c:e4:c2:c5:4f:cb:fe:5b:76:90:18:d4:bb:16:7a:
         5a:7f:55:9b:84:5b:81:bb:d2:32:bd:9c:8d:11:39:47:3c:37:
         9c:04:31:4b:89:88:0e:cd:c1:3c:fe:6d:79:42:53:29:eb:0c:
         ae:fc:a8:6c:86:d9:a0:f0:5f:46:08:c5:ad:a4:25:82:ca:c3:
         ae:d0:a8:83:65:db:e3:17:f7:8a:34:0f:e0:fe:0b:48:df:40:
         77:ba:8b:82:ec:e3:61:01:69:b7:98:e0:2e:d3:11:ac:64:39:
         42:9c:c8:57:a6:01:09:65:8b:e8:30:7a:9b:42:c5:ba:44:d7:
         81:a9:e7:5d:d4:7d:d7:78:af:16:59:3b:46:bc:69:d4:e6:7f:
         9c:d1:70:1b:92:82:fc:ba:cb:7c:ef:ab:76:24:9b:51:d5:8b:
         ad:eb:02:e5:9e:ba:c7:c9:7f:f2:b3:1b:3e:9c:5f:6d:a8:e8:
         86:55:bd:15:ac:06:a4:90:5c:f4:e4:52:bb:e5:48:c7:3e:1b:
         d8:d1:0e:ee:de:2c:d1:d1:55:13:93:7f:81:7d:da:ce:bd:d3:
         9a:68:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----