Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e16992d9-313e-3ab3-b1fb-b8daeb6aa73b.roa
File:                     e16992d9-313e-3ab3-b1fb-b8daeb6aa73b.roa (raw, json)
Hash identifier:          sPo+V8g74k7eI1OYmDl3l6fXwich7a21kX74i82mEzs=
Subject key identifier:   A4:6A:AD:CE:E5:33:55:E3:33:31:5E:9B:20:E6:9D:98:68:50:67:BA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843C10117FE6A90D6BE3C82F76C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e16992d9-313e-3ab3-b1fb-b8daeb6aa73b.roa
Signing time:             Thu 02 Nov 2023 11:25:25 +0000
ROA not before:           Thu 02 Nov 2023 11:25:25 +0000
ROA not after:            Wed 31 Jan 2024 12:25:25 +0000
asID:                     834
IP address blocks:        166.0.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c1:01:17:fe:6a:90:d6:be:3c:82:f7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  2 11:25:25 2023 GMT
            Not After : Jan 31 12:25:25 2024 GMT
        Subject: CN=67a07f84-a2fc-40be-b92d-fb83f6ccb187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:eb:27:ba:89:2e:6e:b1:b3:23:6b:ef:df:
                    d4:eb:7c:d2:1b:57:22:4b:be:91:56:0d:f8:43:cd:
                    a8:f5:4f:cf:7c:10:2b:b6:47:bf:30:fb:fb:52:0f:
                    ef:9c:d9:9a:9a:40:5e:92:2e:93:29:27:53:15:87:
                    4f:89:82:2b:7a:1a:e3:22:f6:58:7a:bf:84:87:ba:
                    60:69:af:5a:b6:fc:a9:a8:7a:24:a8:40:f3:f7:f4:
                    5e:d6:7a:5e:ed:bc:17:cb:c2:50:6d:b7:7d:07:80:
                    0e:ed:2c:4c:c3:86:7a:33:84:4e:34:8b:71:e9:c2:
                    68:fa:67:a7:3a:f5:c0:e4:5a:7a:aa:23:42:d6:df:
                    00:bd:5e:a9:9c:77:f3:da:86:0d:72:66:c8:48:ce:
                    de:cf:8d:a2:3c:85:b3:2e:c3:3e:7c:4e:32:78:56:
                    85:63:e4:99:42:36:d4:b1:76:c5:a4:50:55:63:13:
                    8a:33:47:50:92:1f:b6:36:f8:5b:27:42:c3:fb:55:
                    01:53:90:a3:b6:50:5e:e6:64:ec:f9:38:76:91:33:
                    25:7a:50:da:16:e1:6c:54:7d:4e:42:d8:ed:c1:77:
                    e3:80:e6:f7:ce:cf:1b:23:8b:2e:02:00:d7:bf:4e:
                    58:77:42:01:90:99:bd:9a:05:e8:e3:e8:a9:29:c4:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:AD:CE:E5:33:55:E3:33:31:5E:9B:20:E6:9D:98:68:50:67:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e16992d9-313e-3ab3-b1fb-b8daeb6aa73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:56:b0:6f:ce:2e:85:55:49:d9:8a:4f:2b:7c:f7:f3:28:7a:
         95:6c:07:9c:e0:e1:38:9d:1c:7a:58:d0:09:47:70:b5:c4:8c:
         32:d8:d2:48:28:24:eb:a3:76:b5:30:e8:72:18:d9:ed:40:33:
         e0:5b:6d:38:a6:e8:07:e0:4d:6c:1c:90:8d:a2:47:3e:e9:bd:
         6a:69:cb:a5:22:a6:c7:03:ac:e3:90:2b:16:b0:bd:d6:c6:dc:
         97:cd:d4:11:e1:c2:be:30:18:41:7b:58:99:9e:44:09:88:0f:
         2e:ca:bb:b8:0a:b0:b3:44:a1:40:df:56:bf:38:e9:4c:87:8e:
         29:45:f1:0c:81:e2:8a:b8:43:84:ce:5b:b7:a5:f7:2b:17:76:
         46:b9:5d:f1:23:33:09:3b:c3:c1:97:56:a5:01:4f:b5:1d:8d:
         fd:30:71:20:92:e1:f8:e4:ed:80:d9:1e:c7:70:39:42:fe:a3:
         c3:10:b4:ed:ff:62:eb:88:7d:97:86:b6:c3:d5:4b:3f:1b:6f:
         e1:ec:70:5a:88:52:79:36:c1:b4:90:93:bd:9c:e5:d3:97:5b:
         61:39:8f:ff:84:6f:75:b9:1b:3a:5f:7e:23:05:75:f9:c5:26:
         95:ae:45:bb:c4:b0:c1:ef:61:73:b2:f1:81:bb:75:e0:91:fe:
         3a:3a:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----