Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6a6c57a-e2c5-36db-990d-2757f59fc922.roa
File:                     e6a6c57a-e2c5-36db-990d-2757f59fc922.roa (raw, json)
Hash identifier:          868l0PDRfdoqM1vQ8FlNupwQSsA3sBlW7sK3oY5exDU=
Subject key identifier:   7C:F6:8C:A1:68:3C:8C:B8:DD:F7:19:A3:9D:A8:E4:4F:29:58:73:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842D9C8147751AA6C787B844EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6a6c57a-e2c5-36db-990d-2757f59fc922.roa
Signing time:             Fri 11 Aug 2023 15:38:49 +0000
ROA not before:           Fri 11 Aug 2023 15:38:49 +0000
ROA not after:            Thu 09 Nov 2023 16:38:49 +0000
asID:                     197450
IP address blocks:        166.1.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d9:c8:14:77:51:aa:6c:78:7b:84:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 11 15:38:49 2023 GMT
            Not After : Nov  9 16:38:49 2023 GMT
        Subject: CN=351ccf0b-d53b-448d-9952-002575c0010b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:17:53:19:23:52:c8:e3:a5:12:65:3c:1a:
                    8e:b6:7e:59:e3:be:55:04:8f:1c:96:93:c6:13:10:
                    02:53:2b:bc:aa:b5:85:89:09:a9:4c:96:88:20:dc:
                    6a:4a:54:8e:71:47:13:27:d4:96:19:a2:a4:7d:e5:
                    ab:f5:77:fb:a9:bc:e4:83:ca:8a:3a:b3:d5:6b:e8:
                    58:51:48:65:94:df:f4:29:8d:82:b5:b0:67:cc:23:
                    66:75:52:54:e1:aa:c3:a9:37:72:64:49:f9:55:0b:
                    25:d2:6d:d1:58:55:d8:6c:07:b2:32:44:a5:65:df:
                    c5:cf:ca:18:45:0b:41:b2:18:98:f2:7c:fb:00:2c:
                    02:c4:47:b9:78:84:48:07:82:0e:1a:28:58:6f:a5:
                    9a:b0:02:38:0d:73:50:64:82:ef:a4:43:17:25:92:
                    10:b5:04:91:8e:60:c2:10:fc:ff:d6:f6:8d:90:66:
                    ce:3a:36:c8:dc:10:5a:0a:24:52:66:10:3a:ed:87:
                    67:c8:97:b5:07:58:b9:37:07:62:0b:52:3a:3d:cf:
                    58:36:cb:d6:62:27:b1:b9:16:24:51:51:35:ae:fd:
                    ab:1e:09:7f:b1:00:5b:ab:1c:9e:93:6a:96:9a:97:
                    f6:a6:c8:7a:3a:55:51:53:bd:d2:f1:d1:7e:1b:72:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F6:8C:A1:68:3C:8C:B8:DD:F7:19:A3:9D:A8:E4:4F:29:58:73:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e6a6c57a-e2c5-36db-990d-2757f59fc922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:63:14:5c:8f:95:47:99:8b:84:d3:6a:aa:d2:70:1b:cb:80:
         c5:d9:44:75:65:f5:b8:08:eb:0e:80:d5:c1:9c:43:b1:10:91:
         38:e5:1a:2f:df:53:47:b3:4f:48:38:cb:9e:71:d7:5b:1e:23:
         7f:ea:61:79:c0:6c:c9:d6:30:93:6a:05:8a:68:bb:ff:de:b7:
         e4:75:b5:79:90:4a:81:7b:ea:d4:3d:ca:b0:97:65:75:c8:23:
         81:52:84:82:fe:41:1e:82:25:7d:3a:e2:90:c5:07:70:07:87:
         7d:5f:c4:b4:64:09:1f:d8:0f:38:2a:62:f4:bb:b1:51:2b:39:
         c3:b2:1c:fd:52:4f:eb:5c:3c:15:dc:7b:86:3b:cf:b2:1d:14:
         c2:aa:46:fe:39:b1:e6:1c:1c:af:f7:92:18:23:9c:43:8f:a2:
         0d:1c:94:87:85:38:85:55:9f:7e:53:51:22:93:f9:ee:b1:42:
         7c:51:df:00:d8:69:23:e0:5a:c5:bb:09:5a:8c:41:8c:51:6d:
         12:0c:e6:5c:22:a2:45:ea:d1:52:0e:f3:e5:28:92:d6:f8:52:
         75:21:d3:4f:80:3b:cc:b0:d2:3b:23:f1:d4:bc:9a:e0:22:bd:
         a2:b4:b1:ed:be:ef:1f:26:2b:0a:49:fe:fb:a5:3f:a4:dd:d7:
         d6:85:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----