Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c584470-8248-35f3-80be-b305ea683686.roa
File:                     9c584470-8248-35f3-80be-b305ea683686.roa (raw, json)
Hash identifier:          GmR3rt3iYH3q1a5IbbTyIAHMzVc/cM8taYsjvz/DYss=
Subject key identifier:   DE:47:1F:9D:BE:DA:B6:F5:A0:46:59:32:A1:1A:71:A4:05:88:6D:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446F19C2B6C3C2011C06AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c584470-8248-35f3-80be-b305ea683686.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 27 Jul 2023 07:33:39 +0000
asID:                     61317
IP address blocks:        108.165.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:f1:9c:2b:6c:3c:20:11:c0:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jul 27 07:33:39 2023 GMT
        Subject: CN=2d00cda6-80f5-4090-b7af-41bec85eb7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:7f:bc:8c:2f:88:7b:b3:e1:a8:95:03:06:
                    78:54:1f:8b:47:5f:e2:c5:81:73:cb:16:d8:80:55:
                    1a:15:7a:e7:34:f2:b1:d8:9a:60:ca:0a:0e:a9:de:
                    17:76:3d:20:5d:74:9f:f6:f3:a7:43:86:f7:74:ca:
                    de:e6:79:61:10:af:b3:12:88:c2:3b:e6:10:a7:24:
                    2e:71:47:69:d6:3b:95:55:46:5b:5b:a2:2a:dd:1d:
                    21:39:ba:16:0e:77:06:0f:70:9d:d7:03:af:f1:ee:
                    7b:37:4a:b0:95:95:d4:d9:80:d7:32:dc:af:78:e3:
                    9f:97:87:8a:a2:d4:f9:fb:19:4a:7b:cd:ad:9e:3b:
                    32:ce:35:9a:1c:10:f6:1b:eb:69:77:23:55:3d:2a:
                    10:1a:59:53:f4:78:c8:ca:36:11:40:8e:4f:5b:32:
                    84:e2:04:55:9a:ee:a5:ba:c7:74:6a:05:3a:ff:85:
                    ec:9c:69:30:dd:cb:79:7c:a2:01:44:df:a3:e9:7e:
                    19:d7:7a:83:85:22:69:bd:15:72:ee:f8:2a:48:e7:
                    ad:c8:d7:d1:c4:98:d9:de:81:f5:c3:50:ca:ef:02:
                    91:bb:91:7f:cc:50:9e:9e:f5:68:91:51:e0:57:2b:
                    a9:6d:df:e3:cd:c2:b2:b5:d5:08:82:5a:c8:3e:f9:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:1F:9D:BE:DA:B6:F5:A0:46:59:32:A1:1A:71:A4:05:88:6D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c584470-8248-35f3-80be-b305ea683686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:7b:88:52:28:0f:30:28:98:c9:8e:29:a6:99:87:c3:2c:
         74:a6:af:0c:1e:77:c6:20:06:de:c2:55:eb:a6:1f:a0:cd:b8:
         3d:8d:d6:9f:19:f8:24:23:67:32:07:15:53:a9:c6:4d:c7:92:
         63:ed:3e:81:76:d3:24:54:e2:06:06:98:64:81:be:45:8b:f1:
         65:4f:be:9f:a9:8c:72:44:f5:0c:9d:88:12:8d:09:68:9a:9e:
         fd:c6:9f:e7:96:e9:c1:c9:60:ab:81:e7:a2:ee:09:5a:51:05:
         6b:a2:44:ea:c1:e3:95:c6:30:39:fe:b8:cf:ce:7c:3a:50:02:
         0b:d6:de:fb:5b:f2:69:9b:c0:ae:3e:26:51:c1:9e:c0:e1:e3:
         4c:dd:83:a9:5f:76:c8:bb:ce:a5:b7:fb:b1:c2:03:1b:5d:ea:
         11:ab:80:0c:a2:e4:16:cb:0c:06:69:60:46:03:07:d5:98:69:
         f5:60:aa:5c:75:20:1a:47:e3:08:cb:2b:b0:19:79:ab:30:08:
         80:4b:6a:d4:16:40:fd:ed:7e:f9:e0:58:10:e8:46:68:69:55:
         20:10:7b:13:9f:b3:69:a3:b3:ab:61:fc:ee:da:79:21:9d:a6:
         9c:11:a1:15:81:c4:eb:b2:55:ad:6b:12:52:94:5c:19:55:14:
         fc:a1:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----