Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f27d0c88-10a5-3d84-b779-52a2363c6539.roa
File:                     f27d0c88-10a5-3d84-b779-52a2363c6539.roa (raw, json)
Hash identifier:          3hbD45pvuctUxNo4CulIbFhXPZXl9ApPhx3mo1jN0jQ=
Subject key identifier:   04:03:45:C1:F1:54:F3:B3:E1:DF:96:4C:63:23:C1:5A:A4:6A:67:12
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584293AE5809B890ED68C140B480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f27d0c88-10a5-3d84-b779-52a2363c6539.roa
Signing time:             Mon 17 Jul 2023 13:00:19 +0000
ROA not before:           Mon 17 Jul 2023 13:00:19 +0000
ROA not after:            Sun 15 Oct 2023 13:00:19 +0000
asID:                     62390
IP address blocks:        108.165.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:93:ae:58:09:b8:90:ed:68:c1:40:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 17 13:00:19 2023 GMT
            Not After : Oct 15 13:00:19 2023 GMT
        Subject: CN=18c5d609-82f8-4627-a2ce-19d1a93cad58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:37:ed:79:d1:08:04:22:2a:1e:bc:e2:ac:
                    f9:73:46:23:d4:39:c1:e9:c0:29:ef:82:2c:6e:b2:
                    59:5d:e4:8d:85:c4:da:17:c6:93:d3:c8:54:b5:4f:
                    c9:90:a8:3b:3b:ae:83:2d:14:a4:f5:9d:b0:35:2a:
                    3e:fc:f8:44:3a:00:95:d4:72:2c:a9:c9:37:98:ae:
                    02:00:ec:7f:0e:4b:6e:00:ed:14:b8:da:de:86:5f:
                    20:2d:30:fb:f1:03:0f:0a:37:de:00:e9:f5:4d:75:
                    9a:89:e9:2b:f5:ab:2f:af:57:8a:10:82:11:7c:48:
                    73:67:c8:d2:de:e0:91:b6:c0:c3:c1:25:36:89:3b:
                    83:12:9e:a2:71:71:f0:15:89:d4:cf:c8:4d:45:d0:
                    78:0f:9e:2f:95:15:96:be:1a:e8:0c:b8:e1:27:a3:
                    d0:0c:ac:34:40:66:89:5d:6e:f5:12:f0:ba:ae:30:
                    81:6b:2e:84:45:42:32:bd:42:77:50:84:5e:2e:48:
                    b5:ae:71:12:ef:d7:44:b5:ae:bb:7b:e2:c0:28:e7:
                    b1:8f:eb:78:d0:32:1c:70:98:cc:d3:4c:5b:f8:75:
                    97:de:e9:8a:ed:9f:6a:9f:e2:ac:28:1c:09:b8:8d:
                    02:58:8e:97:38:38:3a:94:ea:ff:cc:b4:c6:77:59:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:03:45:C1:F1:54:F3:B3:E1:DF:96:4C:63:23:C1:5A:A4:6A:67:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f27d0c88-10a5-3d84-b779-52a2363c6539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:e6:d9:10:7a:4d:27:6b:f2:90:e7:1f:34:4a:15:92:fa:
         01:da:f1:7e:2e:5e:44:46:ae:53:5d:94:40:fe:a6:a7:87:f5:
         ab:57:b1:c5:8f:e4:4c:36:bd:55:9f:57:85:97:a6:36:14:93:
         63:78:17:22:1c:0b:d9:e1:f8:c8:1b:8a:11:31:95:29:83:fa:
         68:c7:68:c7:b8:d3:d8:11:1f:23:26:4f:f7:fc:fb:5b:35:f3:
         00:3c:65:80:95:de:f1:e2:0a:fa:e7:db:38:a0:09:3a:78:15:
         c1:7a:58:68:cd:9e:3d:7b:ea:19:dc:a3:b3:5f:a2:9d:f5:5c:
         d5:96:f1:fc:a2:b2:2c:e5:8b:56:c0:69:fd:08:98:d3:cc:cb:
         ab:ef:f9:3a:20:f9:f9:3c:84:7c:17:58:88:69:71:8c:77:4a:
         3b:ad:30:b2:f2:86:39:f8:59:48:2e:ad:d7:8a:6a:66:28:07:
         81:32:e2:fa:c2:18:a6:59:53:a5:a2:21:92:04:56:1f:03:95:
         b4:d2:84:6f:54:8e:78:19:4b:07:b3:52:36:57:a3:03:9c:e0:
         9b:2c:64:40:2d:23:52:03:37:2f:2d:0b:7b:65:1d:6d:92:e8:
         5e:c1:31:3f:86:fe:f2:61:f9:44:00:30:f0:dc:85:59:84:14:
         fc:fb:41:e4
-----BEGIN CERTIFICATE-----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