Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/924d2e93-9b50-3668-859b-f7bc012c6390.roa
File:                     924d2e93-9b50-3668-859b-f7bc012c6390.roa (raw, json)
Hash identifier:          DWZYOkPswAx/0O6JV2fQ20IDcM68Hg+E47tLTq0OkCc=
Subject key identifier:   91:3B:31:AA:B1:18:CB:5C:50:FA:74:D2:08:3B:80:38:AC:79:94:37
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848FDA51AA226CA6BA37DE5EC40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/924d2e93-9b50-3668-859b-f7bc012c6390.roa
Signing time:             Mon 24 Feb 2025 16:39:04 +0000
ROA not before:           Mon 24 Feb 2025 16:39:04 +0000
ROA not after:            Sun 25 May 2025 15:39:04 +0000
asID:                     834
IP address blocks:        166.0.238.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Feb 2025 18:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:a5:1a:a2:26:ca:6b:a3:7d:e5:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 24 16:39:04 2025 GMT
            Not After : May 25 15:39:04 2025 GMT
        Subject: CN=69d4d025-30ce-4e9c-9d60-e26352077842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:5c:d2:60:63:51:fb:fc:ac:8a:d9:84:d2:
                    f5:42:38:05:a8:eb:73:a8:d2:56:69:fa:9f:26:0c:
                    bb:c0:b6:8f:bc:e9:b6:b5:32:a7:88:10:68:19:4b:
                    64:7d:df:91:45:43:2d:24:08:78:9c:3f:fb:dc:38:
                    3c:60:01:f9:1f:59:bf:96:b3:dc:bb:5c:95:13:75:
                    b0:8f:7d:f0:32:30:23:b7:36:b5:a8:44:15:47:3e:
                    2e:b1:dc:27:2f:89:fb:18:82:3d:45:1f:fb:a6:fd:
                    62:1a:06:5e:65:24:5b:cc:cd:67:5f:eb:08:24:b0:
                    6d:36:c6:e7:ef:d7:fc:4b:9e:f3:0a:14:04:d3:e6:
                    7e:0b:fd:43:04:11:15:b2:a7:2f:a2:b3:85:46:57:
                    f5:9f:d3:30:70:f8:61:77:4a:4e:1f:c8:a0:5c:96:
                    4d:28:97:49:44:60:0b:a0:e0:b1:b1:12:29:8a:26:
                    28:29:b7:0c:f8:af:55:d3:df:c2:68:af:0a:90:60:
                    25:22:bd:60:46:07:27:ff:b7:99:75:8e:2d:ec:fd:
                    e6:c4:de:4b:f7:3f:44:14:4f:16:23:f2:9e:82:15:
                    07:d5:5b:6a:d8:e8:38:14:fd:fd:ea:8f:ea:fc:93:
                    1b:bd:0a:8f:41:08:7a:ca:98:6e:98:62:cb:f0:28:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:31:AA:B1:18:CB:5C:50:FA:74:D2:08:3B:80:38:AC:79:94:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/924d2e93-9b50-3668-859b-f7bc012c6390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:02:d7:0e:73:5a:ed:49:4b:b4:93:56:b1:41:ce:68:0b:a0:
         d6:e6:4c:17:0b:93:ad:2f:70:de:54:bd:4c:3a:09:50:4a:d5:
         e7:60:ce:0d:6c:1f:e3:a1:74:ae:fe:6c:63:8d:2c:eb:ff:ba:
         4f:d0:b8:e3:c7:cd:e3:9f:c3:d1:c6:f0:6c:b4:b0:ce:f4:66:
         9a:5c:cf:5a:29:90:c7:bf:33:b8:4c:b9:36:69:14:4e:9c:24:
         85:f2:58:62:f0:e5:75:1b:4d:51:2b:1b:9d:5a:dd:22:ae:4a:
         03:3a:b9:60:6a:d1:91:78:1b:3e:06:af:b3:1c:cf:e6:79:8b:
         97:49:00:b3:e7:b8:bb:d5:f8:4c:ac:1d:05:8f:63:c8:9d:7b:
         77:e4:ca:b8:e8:9c:ac:b4:1f:1e:e2:82:0d:2d:25:18:68:8b:
         79:6c:00:33:d8:7a:a4:9a:f9:31:5f:74:4a:cc:eb:13:9c:95:
         e8:77:1c:1b:d7:13:c9:ef:96:bb:ff:cf:cb:6f:21:73:9f:2f:
         91:9d:06:4d:16:2e:09:63:4a:cd:e7:bc:70:37:1b:01:8d:f0:
         38:90:4e:b9:34:56:13:11:02:59:94:09:33:0d:9d:60:89:36:
         e0:c4:0a:18:e8:b5:97:71:a0:9b:f7:44:46:18:6e:69:4c:02:
         0a:8c:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----