Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee0100bc-981e-37ce-949b-220be4815bf0.roa
File:                     ee0100bc-981e-37ce-949b-220be4815bf0.roa (raw, json)
Hash identifier:          0KlxI5Nn97tGYP63IqmTYmuKu31BRV8U/by+TkpDuLM=
Subject key identifier:   E0:E8:3B:9D:56:4D:27:03:5A:9C:0A:44:0E:6E:A4:1C:53:F3:E3:37
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858425439E5A622AD72E6851D27D0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee0100bc-981e-37ce-949b-220be4815bf0.roa
Signing time:             Sat 24 Jun 2023 19:29:49 +0000
ROA not before:           Sat 24 Jun 2023 19:29:49 +0000
ROA not after:            Fri 22 Sep 2023 19:29:49 +0000
asID:                     207633
IP address blocks:        166.1.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:54:39:e5:a6:22:ad:72:e6:85:1d:27:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 24 19:29:49 2023 GMT
            Not After : Sep 22 19:29:49 2023 GMT
        Subject: CN=9b5f60b3-afc0-487f-b56f-a674421c1f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:10:73:09:c8:a3:65:11:e6:b6:56:7c:52:
                    a0:8a:e6:2b:ac:28:7e:26:03:e6:d1:1d:63:62:58:
                    c1:07:9e:02:33:07:04:61:4a:6f:2d:e8:7c:63:48:
                    b3:7e:f8:3e:bc:5d:1a:80:63:17:09:42:a1:0e:01:
                    24:dc:a6:54:07:2f:50:f0:23:89:82:ec:5a:27:e0:
                    04:73:0e:1c:5d:ba:d7:4c:c6:98:37:41:55:36:d7:
                    06:e6:72:95:43:16:24:e2:6e:3f:f2:b9:40:82:65:
                    c2:bf:41:e7:9f:a4:b3:f7:f8:78:6f:33:47:0d:0d:
                    ae:b8:21:47:22:2f:06:0e:a5:72:9e:a0:3d:ed:42:
                    08:65:bd:63:1f:d3:0e:fc:58:26:4b:6e:75:14:49:
                    a7:e8:84:2d:1e:64:a9:30:dc:a8:6d:cc:30:38:a2:
                    d6:4b:b1:75:86:91:8f:16:97:da:e2:fb:9e:75:c0:
                    18:45:c1:bc:d2:1d:60:02:a1:38:cd:3b:42:ae:f0:
                    2f:af:db:e9:f9:10:2e:1a:42:97:ce:18:cf:07:16:
                    32:21:1e:ef:1b:ee:ad:0c:39:bf:e2:7e:8b:d2:0f:
                    9e:e0:30:d8:00:6f:6b:1d:b1:7a:68:e0:e6:e7:54:
                    7e:65:26:ea:19:bc:4b:d9:a8:9d:c4:11:ea:2a:e7:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E8:3B:9D:56:4D:27:03:5A:9C:0A:44:0E:6E:A4:1C:53:F3:E3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee0100bc-981e-37ce-949b-220be4815bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:77:d8:73:33:db:2e:57:2f:8d:57:50:22:5b:61:d2:6d:b4:
         61:72:49:39:79:a9:ca:9b:2e:c0:21:7f:e2:94:68:77:ff:c6:
         99:9b:5c:14:24:99:e9:23:70:b3:60:9e:d8:df:82:27:c8:1c:
         1b:c2:9e:59:91:04:19:03:8e:d1:11:0f:18:10:79:58:8e:84:
         0d:2b:92:f7:e7:34:98:a0:6b:41:0d:c6:0d:01:ec:31:81:f4:
         b1:4d:bf:39:2a:c8:b7:92:7c:11:f0:ec:76:e5:9c:4c:5d:e5:
         08:eb:a4:2c:1a:65:8e:60:51:89:18:57:b5:33:4e:fa:9c:66:
         3b:51:a2:60:cb:96:9c:07:2a:78:dd:11:cf:8d:ea:ff:bd:47:
         4b:7f:bd:72:e9:52:ff:11:e0:30:1d:66:e3:b2:c2:e4:b9:fb:
         df:eb:0e:52:b2:87:9a:e6:4c:bb:64:d1:db:6d:b2:a5:65:c5:
         a8:43:6e:12:1a:61:13:28:12:40:59:dc:de:8e:d4:1e:5c:4c:
         7d:ec:e6:52:6d:5c:1d:7a:b6:e7:a3:7b:81:b0:03:38:b3:76:
         51:65:98:15:83:fe:a9:12:fd:fa:16:08:96:4a:17:b5:a9:00:
         e8:4e:49:c3:1c:d0:d6:28:c8:a6:20:0e:89:b1:5b:30:0e:1e:
         f7:f2:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----