Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/155cab01-85b5-345e-a40f-f5ed00b40af0.roa
File:                     155cab01-85b5-345e-a40f-f5ed00b40af0.roa (raw, json)
Hash identifier:          A6j0Tb41t4bpesxHiL3AiTt7aPy77g+T6zzf6o6eyns=
Subject key identifier:   77:56:DD:32:F7:A8:B6:18:D2:91:37:B8:EB:32:EE:38:93:4C:95:3D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446F1B37FD871FEB9AD4300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/155cab01-85b5-345e-a40f-f5ed00b40af0.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 27 Jul 2023 07:49:07 +0000
asID:                     61317
IP address blocks:        166.0.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:f1:b3:7f:d8:71:fe:b9:ad:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jul 27 07:49:07 2023 GMT
        Subject: CN=fd684953-3cf8-4f13-aa45-26a990f03e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:30:b3:2e:2c:8e:7a:c2:c3:41:c6:87:da:
                    bc:52:fa:6a:13:a5:e6:2e:1a:dd:90:a5:7a:2a:5a:
                    a6:8b:15:df:8f:a2:aa:33:94:b4:11:00:54:8c:01:
                    f2:0c:f2:fe:f5:3c:d8:c0:c7:fc:72:25:74:26:d4:
                    4b:92:87:8a:62:7b:1e:80:5f:8f:14:e2:ce:e5:3f:
                    1b:c5:ff:a9:4f:bb:7d:86:5f:d5:a2:ff:0a:0a:23:
                    ce:a7:b4:36:bd:ae:12:f7:4d:df:bb:69:19:1a:39:
                    24:3c:d3:44:ea:ef:34:6c:2e:dd:3b:b4:d4:d2:5a:
                    23:80:12:da:bc:b1:88:d9:85:c5:6d:4f:d9:0b:50:
                    64:7b:63:b8:d7:92:4d:26:4b:03:75:ae:75:53:db:
                    cd:b4:26:fd:2e:d9:c5:1a:0f:9c:52:07:3d:3e:79:
                    50:d6:a7:83:c0:4a:36:89:dd:63:da:e3:22:8d:dc:
                    8e:17:45:46:7f:ca:52:cb:82:60:fa:dd:6c:80:ca:
                    27:d0:2d:80:97:0c:f7:07:94:db:fa:a7:87:62:90:
                    58:aa:b6:b1:60:d9:91:b2:6f:b4:4b:f0:6e:93:55:
                    fb:52:10:0c:84:3c:c7:ca:59:1d:79:6e:c0:f6:6f:
                    f5:06:61:9a:b3:f5:63:3b:06:c4:a7:0b:a4:cb:42:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:56:DD:32:F7:A8:B6:18:D2:91:37:B8:EB:32:EE:38:93:4C:95:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/155cab01-85b5-345e-a40f-f5ed00b40af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:f3:51:11:cf:c3:e9:32:0b:b7:b4:8c:8f:10:58:37:41:
         39:2e:c9:1f:8b:0c:ff:a4:fd:57:0b:eb:e9:21:84:e8:73:78:
         6f:47:79:5e:8d:1d:a5:4f:7c:ce:b5:cd:e9:47:84:fe:ee:da:
         c2:83:23:d4:44:6b:7a:bd:a7:39:2a:75:f5:bb:dd:d0:6d:27:
         0e:51:cf:4c:be:b5:de:c4:e4:73:72:da:1e:44:b1:d2:17:9b:
         31:0f:c2:cb:11:ac:f1:27:3e:bc:d5:18:40:43:d8:27:9e:54:
         0f:87:a2:b2:6f:48:fe:92:c3:a6:c8:ff:6a:32:9a:ee:ae:91:
         75:76:89:de:7c:4a:4e:3a:ad:75:b3:99:a5:3a:04:45:1e:7a:
         6f:50:08:1d:b8:bb:01:04:a5:cb:27:4e:e5:ac:1b:f6:d5:ea:
         13:cf:24:fe:51:8a:ff:15:96:46:f7:e7:21:f7:a0:d9:f7:8b:
         78:33:21:49:0e:2e:e9:72:93:51:b9:5e:4f:20:f9:59:a8:4a:
         77:17:46:ec:6d:c7:5b:0f:24:f1:0b:49:7f:12:02:34:bf:39:
         2b:ed:64:fb:ea:53:e9:67:7a:99:0e:0a:c5:2c:0c:70:ef:0a:
         5c:98:e3:b1:fd:f4:3e:52:6f:b4:2d:c2:63:72:f6:05:27:c0:
         71:40:84:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRvGzf9hx/rmtQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDcyNzA3NDkwN1owLzEtMCsGA1UEAxMk
ZmQ2ODQ5NTMtM2NmOC00ZjEzLWFhNDUtMjZhOTkwZjAzZTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMYwsy4sjnrCw0HGh9q8UvpqE6XmLhrdkKV6
KlqmixXfj6KqM5S0EQBUjAHyDPL+9TzYwMf8ciV0JtRLkoeKYnsegF+PFOLO5T8b
xf+pT7t9hl/Vov8KCiPOp7Q2va4S903fu2kZGjkkPNNE6u80bC7dO7TU0lojgBLa
vLGI2YXFbU/ZC1Bke2O415JNJksDda51U9vNtCb9LtnFGg+cUgc9PnlQ1qeDwEo2
id1j2uMijdyOF0VGf8pSy4Jg+t1sgMon0C2Alwz3B5Tb+qeHYpBYqraxYNmRsm+0
S/Buk1X7UhAMhDzHylkdeW7A9m/1BmGas/VjOwbEpwuky0LGLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdW3TL3qLYY0pE3uOsy7jiTTJU9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTU1Y2FiMDEtODViNS0z
NDVlLWE0MGYtZjVlZDAwYjQwYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8281ERz8PpMgu3tIyPEFg3QTkuyR+LDP+k/VcL6+khhOhzeG9HeV6N
HaVPfM61zelHhP7u2sKDI9REa3q9pzkqdfW73dBtJw5Rz0y+td7E5HNy2h5EsdIX
mzEPwssRrPEnPrzVGEBD2CeeVA+HorJvSP6Sw6bI/2oymu6ukXV2id58Sk46rXWz
maU6BEUeem9QCB24uwEEpcsnTuWsG/bV6hPPJP5Riv8Vlkb35yH3oNn3i3gzIUkO
Lulyk1G5Xk8g+VmoSncXRuxtx1sPJPELSX8SAjS/OSvtZPvqU+lnepkOCsUsDHDv
ClyY47H99D5Sb7QtwmNy9gUnwHFAhDo=
-----END CERTIFICATE-----