Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9a03dd8-dab8-3d8e-bb3b-ad842dd566cd.roa
File:                     a9a03dd8-dab8-3d8e-bb3b-ad842dd566cd.roa (raw, json)
Hash identifier:          iLpTvNGec5MGy6i6xGx1xIs0THXkoJETuxAqLzbrpGg=
Subject key identifier:   37:39:8C:B1:39:2C:9C:86:E5:3E:43:92:B1:6D:1D:FB:19:08:49:F1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842A73923973653473676E6D880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9a03dd8-dab8-3d8e-bb3b-ad842dd566cd.roa
Signing time:             Mon 24 Jul 2023 13:00:19 +0000
ROA not before:           Mon 24 Jul 2023 13:00:19 +0000
ROA not after:            Sun 22 Oct 2023 13:00:19 +0000
asID:                     397373
IP address blocks:        166.1.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a7:39:23:97:36:53:47:36:76:e6:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 24 13:00:19 2023 GMT
            Not After : Oct 22 13:00:19 2023 GMT
        Subject: CN=d1a5bad6-dc56-429e-8e05-0202934b0382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:f0:f0:ee:a4:f6:f9:5b:a2:e3:78:56:4c:
                    31:89:fe:52:be:d9:62:90:b6:28:eb:8b:84:72:96:
                    e0:7f:cb:b9:e9:19:89:1c:b9:e2:99:a8:78:3a:38:
                    b8:1b:fb:1e:62:08:11:99:5b:8e:fd:f8:48:e4:8c:
                    c1:58:d0:19:33:89:f3:b8:de:36:ba:07:5c:f2:50:
                    14:4f:51:aa:90:8f:e6:14:a8:2d:53:95:da:d2:bb:
                    52:79:2d:f6:35:0d:05:76:96:2a:67:41:da:b7:81:
                    59:a7:c9:3a:c8:1f:8e:e3:3c:05:ef:ce:90:03:21:
                    34:1a:97:f5:84:f9:b5:16:53:f7:b9:60:09:fb:6a:
                    df:2b:00:ad:1f:db:1a:f4:af:31:ed:50:5c:a4:5e:
                    d2:8a:13:6f:ba:13:2f:c8:ff:f8:ab:57:16:80:99:
                    e0:87:17:b0:30:59:98:f2:1d:1b:ec:c2:98:0b:15:
                    17:4f:b0:34:92:7f:96:26:6b:f3:39:ed:f4:f7:18:
                    9f:e7:eb:3e:a0:95:3f:cd:d5:54:77:a5:26:fb:13:
                    e2:e2:62:85:12:ad:ed:c6:d0:9f:66:c9:bd:9b:ad:
                    04:8d:75:7e:e1:72:7c:7c:e5:9a:6b:9a:59:dc:d6:
                    58:8d:1b:f0:f3:76:bd:69:6f:5e:40:da:a2:38:22:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:39:8C:B1:39:2C:9C:86:E5:3E:43:92:B1:6D:1D:FB:19:08:49:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a9a03dd8-dab8-3d8e-bb3b-ad842dd566cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:33:c9:5a:09:9b:aa:53:96:6d:d3:97:51:02:b9:b6:c0:ae:
         22:20:15:27:e4:44:14:35:9a:c5:92:ce:b4:53:e8:6d:d8:a6:
         92:f5:4d:4c:91:2a:3c:d7:2d:2d:06:86:7f:6f:5b:b8:11:fc:
         29:bd:a0:f8:b1:29:85:b6:c4:57:a8:af:1b:a5:7f:58:ab:30:
         66:60:e7:d0:29:cd:a2:39:2d:fc:45:da:a0:9f:6c:49:1a:6a:
         aa:d4:ce:7e:3e:38:0b:52:f9:34:fe:6e:ed:8b:7e:f9:6a:9c:
         a5:fb:1f:f7:32:10:4c:d9:68:7f:71:b6:a9:5f:55:9d:f9:92:
         d6:d7:07:44:8f:b2:2f:71:81:59:55:10:b8:42:cf:f0:53:02:
         8f:1b:37:f6:57:bd:11:78:d9:81:ed:fa:5d:b9:8e:29:9a:63:
         70:f1:39:1a:4c:a2:aa:c4:a1:9c:20:a0:db:78:9d:2c:3b:2e:
         08:9d:58:c2:23:e3:a8:c2:ac:f2:f7:86:f9:2e:cd:6c:bf:b7:
         9f:15:77:ee:e5:c1:15:6a:24:e0:ce:11:88:5e:af:5a:ce:11:
         3c:9d:0c:4c:9e:e5:f3:47:01:61:0d:b7:4a:67:de:f9:b8:94:
         ff:5d:99:03:ac:f5:75:db:62:45:6f:27:29:9e:f3:2a:ff:7c:
         50:76:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----