Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb6a9004-9f12-305a-8e1f-a828f5baaab2.roa
File:                     fb6a9004-9f12-305a-8e1f-a828f5baaab2.roa (raw, json)
Hash identifier:          ONe18QyKKivO2ie05n5J9DW4CYrYKyWv5DnocpEoBU4=
Subject key identifier:   F9:87:27:8D:75:38:C9:6C:1D:C4:A6:0B:18:7D:19:D1:83:E2:0A:25
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858432E04AFA9ABFA12860F3A7240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb6a9004-9f12-305a-8e1f-a828f5baaab2.roa
Signing time:             Sun 10 Sep 2023 19:48:50 +0000
ROA not before:           Sun 10 Sep 2023 19:48:50 +0000
ROA not after:            Sat 09 Dec 2023 20:48:50 +0000
asID:                     43260
IP address blocks:        166.0.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2e:04:af:a9:ab:fa:12:86:0f:3a:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 10 19:48:50 2023 GMT
            Not After : Dec  9 20:48:50 2023 GMT
        Subject: CN=b45a86d7-1f79-402e-989d-232ba48693ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:7b:df:5b:73:47:3d:42:5f:29:31:db:8c:
                    8a:3b:c0:2b:94:0d:fb:7d:78:d2:8b:62:d8:cd:f3:
                    a8:dc:a8:75:ed:8b:c7:36:68:31:60:3e:da:02:c7:
                    bd:5b:2b:d1:37:2c:70:5c:14:03:93:bb:91:28:33:
                    32:1a:0e:b3:d8:a3:8e:87:77:4f:01:e7:f6:8f:e4:
                    25:db:b1:7b:52:fb:04:d2:e3:e7:98:6a:0a:34:f4:
                    8f:4a:11:c6:34:5b:04:c8:61:45:26:12:a8:ba:74:
                    74:54:e0:fb:da:7b:9e:db:14:53:e1:e8:d2:52:7e:
                    1f:8e:1f:f1:cc:25:50:a1:97:d1:5a:b3:1c:06:de:
                    65:97:7b:06:8a:e7:13:28:7d:ed:83:9e:31:fc:a8:
                    89:71:44:0a:6b:3e:b5:80:66:1b:29:91:a5:7b:3b:
                    3f:20:63:03:13:a9:f9:f9:95:1c:f8:1c:f6:78:fa:
                    33:44:3e:c7:e6:28:38:04:20:af:fc:83:ba:5c:02:
                    9b:eb:21:b2:66:26:79:34:34:76:a5:ca:c2:66:35:
                    83:55:21:1a:ae:37:94:c0:8f:96:30:0a:01:b4:a4:
                    93:91:8f:05:54:bb:fe:fc:32:ca:27:e9:f6:2b:6d:
                    a3:45:39:0a:d0:ad:7c:9a:c0:1b:b5:cd:dd:1a:ae:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:87:27:8D:75:38:C9:6C:1D:C4:A6:0B:18:7D:19:D1:83:E2:0A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb6a9004-9f12-305a-8e1f-a828f5baaab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a5:10:f4:a0:8e:72:37:5d:6d:84:3d:a1:84:02:b9:51:16:
         4a:55:7d:76:02:f8:89:78:f7:f3:95:7a:6f:87:56:68:45:c4:
         64:df:46:d6:92:b9:81:e0:34:ff:01:14:3c:9b:76:52:11:8e:
         e8:63:27:43:0d:2a:2f:d8:5c:d4:69:44:85:bd:9e:95:ad:8c:
         44:7e:88:d4:e8:46:78:77:03:cc:1f:eb:0a:d1:c4:0c:82:01:
         23:0e:fd:a0:16:b4:dc:9d:01:ec:e4:a6:95:2f:80:d9:0e:07:
         45:73:2d:33:fc:95:43:b1:e2:e1:51:90:b5:58:be:a9:db:b6:
         a0:83:4d:f9:58:de:0c:f8:52:ef:7c:fe:e0:2f:0e:35:73:72:
         59:54:ef:2a:09:d1:95:07:fc:05:0a:35:f0:f1:85:36:5c:d5:
         1a:f7:10:f2:bf:a0:c3:70:71:3e:76:c3:22:87:e3:23:cf:40:
         3e:70:bb:f6:ae:e5:1d:49:cf:ab:a0:0f:31:7f:75:f9:50:65:
         3e:e1:03:05:5b:6e:01:df:1d:ce:45:55:1f:2b:88:05:8b:07:
         75:74:14:77:b2:ca:44:10:fd:6e:ed:1f:f9:2a:3e:f5:fd:d7:
         6a:2a:d7:40:f7:5f:88:1a:3c:9b:9f:77:fb:f7:9b:ee:9b:0b:
         e0:66:e9:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMuBK+pq/oShg86ckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkxMDE5NDg1MFoXDTIzMTIwOTIwNDg1MFowLzEtMCsGA1UEAxMk
YjQ1YTg2ZDctMWY3OS00MDJlLTk4OWQtMjMyYmE0ODY5M2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXp731tzRz1CXykx24yKO8ArlA37fXjSi2LY
zfOo3Kh17YvHNmgxYD7aAse9WyvRNyxwXBQDk7uRKDMyGg6z2KOOh3dPAef2j+Ql
27F7UvsE0uPnmGoKNPSPShHGNFsEyGFFJhKounR0VOD72nue2xRT4ejSUn4fjh/x
zCVQoZfRWrMcBt5ll3sGiucTKH3tg54x/KiJcUQKaz61gGYbKZGlezs/IGMDE6n5
+ZUc+Bz2ePozRD7H5ig4BCCv/IO6XAKb6yGyZiZ5NDR2pcrCZjWDVSEarjeUwI+W
MAoBtKSTkY8FVLv+/DLKJ+n2K22jRTkK0K18msAbtc3dGq7gaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmHJ411OMlsHcSmCxh9GdGD4golMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmI2YTkwMDQtOWYxMi0z
MDVhLThlMWYtYTgyOGY1YmFhYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgACMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2lEPSgjnI3XW2EPaGEArlRFkpVfXYC+Il49/OVem+HVmhFxGTfRtaS
uYHgNP8BFDybdlIRjuhjJ0MNKi/YXNRpRIW9npWtjER+iNToRnh3A8wf6wrRxAyC
ASMO/aAWtNydAezkppUvgNkOB0VzLTP8lUOx4uFRkLVYvqnbtqCDTflY3gz4Uu98
/uAvDjVzcllU7yoJ0ZUH/AUKNfDxhTZc1Rr3EPK/oMNwcT52wyKH4yPPQD5wu/au
5R1Jz6ugDzF/dflQZT7hAwVbbgHfHc5FVR8riAWLB3V0FHeyykQQ/W7tH/kqPvX9
12oq10D3X4gaPJufd/v3m+6bC+Bm6SY=
-----END CERTIFICATE-----