Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0356063-1ef8-3de6-9969-1be169d4c486.roa
File:                     f0356063-1ef8-3de6-9969-1be169d4c486.roa (raw, json)
Hash identifier:          UF3MQV2BO3KrWa7I+DjqusPFCh893oG14YuHnL+w0Hc=
Subject key identifier:   C2:BE:06:87:6D:5F:17:F5:94:6A:EC:7F:C1:9C:E1:F9:E9:F5:03:B0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584376524E2C5D3E2D2CAA2F0DA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0356063-1ef8-3de6-9969-1be169d4c486.roa
Signing time:             Fri 06 Oct 2023 17:23:25 +0000
ROA not before:           Fri 06 Oct 2023 17:23:25 +0000
ROA not after:            Thu 04 Jan 2024 18:23:25 +0000
asID:                     39600
IP address blocks:        166.0.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:76:52:4e:2c:5d:3e:2d:2c:aa:2f:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 17:23:25 2023 GMT
            Not After : Jan  4 18:23:25 2024 GMT
        Subject: CN=50d99ff0-c09e-44f8-83c1-38f40ac1c9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:94:b0:23:d8:10:cf:c1:26:0b:32:dd:27:
                    69:26:b7:6d:d0:b9:0c:ef:ac:21:87:39:aa:e4:54:
                    83:3a:7a:20:bd:b3:c8:cc:4f:51:80:4c:18:43:d1:
                    e2:97:ca:22:7e:a3:19:88:41:89:f6:28:a5:92:f0:
                    c4:3d:10:61:54:5d:1a:50:75:93:26:26:24:58:2c:
                    53:26:37:12:4e:41:de:75:25:fe:a8:58:bf:fe:9e:
                    af:30:34:39:1b:bb:93:99:c0:cf:26:a5:47:b6:0c:
                    10:16:36:23:d5:12:c5:d7:88:a7:42:a6:95:95:66:
                    f7:3a:26:ad:d2:01:28:62:a6:20:48:05:12:63:0f:
                    48:63:ae:61:ed:4d:fe:8b:f1:be:06:11:e9:b8:96:
                    4e:b0:f5:d6:f8:7e:a6:32:3d:9d:9a:b9:d7:3f:eb:
                    f2:1f:05:d2:2f:7a:8f:0c:2f:38:a9:b1:a2:f1:d8:
                    9f:2b:59:30:44:88:92:5f:5c:8d:37:6d:d7:94:3a:
                    b9:87:e1:2c:44:b5:71:f0:e1:4b:bc:31:33:56:d9:
                    af:80:4e:aa:f4:9e:ba:61:df:f8:60:e3:fd:70:a6:
                    44:73:e9:10:d6:c7:fa:87:d0:fd:b3:f1:6d:e9:4e:
                    1a:0c:ec:ce:d2:3d:89:bc:cb:da:32:5e:9d:dc:d4:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BE:06:87:6D:5F:17:F5:94:6A:EC:7F:C1:9C:E1:F9:E9:F5:03:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f0356063-1ef8-3de6-9969-1be169d4c486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d0:3b:1f:ad:23:07:16:31:53:61:2a:86:05:7f:26:6c:0d:
         6e:b0:a1:4f:c0:8f:e6:94:d2:35:44:3a:6e:d5:2a:76:87:35:
         a7:dd:a7:1a:e9:90:c8:d5:d3:6a:af:d0:76:14:4f:96:fb:b5:
         4d:af:94:75:d9:66:2f:bf:d8:1c:fa:fe:95:41:fa:75:6e:00:
         17:ee:75:80:9b:9a:85:20:84:b6:b7:16:5a:5f:b3:ef:39:76:
         65:bd:a3:2d:ff:a3:a7:e8:1b:23:59:6f:89:34:9c:f3:55:8f:
         77:50:01:dc:77:69:c2:ca:51:33:b5:c3:42:75:ad:85:40:e9:
         6d:ac:1d:dc:49:d5:52:50:59:27:27:26:4f:7a:2a:b9:25:61:
         3e:1e:18:a2:50:22:d8:46:9e:d3:53:95:bb:45:32:0b:f0:ab:
         ba:96:38:9b:d1:27:b4:0b:cc:40:18:b2:26:bc:75:00:2e:bb:
         67:b9:08:41:91:71:91:40:67:90:28:bf:b7:7a:8f:6c:74:6a:
         57:16:8d:2c:40:e8:b5:42:b8:9b:ba:b0:5e:7a:5a:05:a5:64:
         db:6f:ce:60:2f:6c:46:b3:7c:25:6c:34:03:88:af:8a:e2:f6:
         d6:1d:42:9b:3e:50:f6:f5:e7:b2:bb:07:49:4f:e2:32:f5:23:
         12:4a:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----