Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e78bf513-d9ef-352c-8b93-1b12aea6298c.roa
File:                     e78bf513-d9ef-352c-8b93-1b12aea6298c.roa (raw, json)
Hash identifier:          TOdQ7uGGeXSjLOUD7WGuXodBqOd4K78aAl3AfoDDn0E=
Subject key identifier:   0B:89:FC:2E:BA:5A:9B:B0:99:CE:A2:6C:64:5F:C5:90:4B:55:EC:19
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584320A9EE4E8719085A4F20BD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e78bf513-d9ef-352c-8b93-1b12aea6298c.roa
Signing time:             Wed 06 Sep 2023 01:00:22 +0000
ROA not before:           Wed 06 Sep 2023 01:00:22 +0000
ROA not after:            Tue 05 Dec 2023 02:00:22 +0000
asID:                     61317
IP address blocks:        108.165.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:20:a9:ee:4e:87:19:08:5a:4f:20:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  6 01:00:22 2023 GMT
            Not After : Dec  5 02:00:22 2023 GMT
        Subject: CN=5a6d5db6-78ca-4b17-8ef5-f4e3809d9c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:4c:ed:1b:9e:9c:aa:78:ba:6a:a5:fe:80:
                    43:04:f6:6b:0c:4d:77:e1:f7:77:a3:a3:f3:1b:36:
                    cd:3f:4b:0a:de:f2:a1:33:50:e7:cd:15:39:8f:62:
                    fe:b6:2a:cd:2a:ca:75:85:2a:53:75:e2:ac:3b:49:
                    61:36:10:62:a2:8e:2d:79:eb:14:64:29:24:53:e9:
                    65:a7:19:e0:ad:4b:3a:23:65:ae:6d:bb:50:b7:0a:
                    00:f4:34:6e:ad:16:47:fe:bf:0b:80:24:2b:83:e8:
                    a2:1d:ca:21:2d:a0:d8:1e:77:38:fc:34:a4:db:54:
                    7a:50:e1:8d:68:58:f5:70:e0:14:0c:97:6d:51:31:
                    b3:ba:53:d3:92:78:5c:71:b4:49:00:d9:33:78:29:
                    0d:f4:77:01:e2:48:f2:b4:42:6a:ec:c4:6d:54:93:
                    f7:c6:32:b5:a9:f4:99:15:4b:1b:d0:dc:c6:d2:ba:
                    49:09:54:8f:e9:d8:ee:fe:b2:f1:bc:5d:1e:d3:ad:
                    e5:25:46:f6:99:53:ee:9d:03:c7:ee:f1:50:9b:11:
                    f8:58:0a:ab:d7:4f:b3:b6:55:c8:78:23:66:ba:ac:
                    1c:f2:fa:ba:1e:76:90:93:16:ec:70:be:08:f8:62:
                    ef:dc:78:90:00:72:08:21:4e:fb:5a:13:7d:3d:90:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:FC:2E:BA:5A:9B:B0:99:CE:A2:6C:64:5F:C5:90:4B:55:EC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e78bf513-d9ef-352c-8b93-1b12aea6298c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ce:68:9f:c4:35:be:95:d8:be:f7:76:bc:d0:a4:f2:5c:53:
         99:8f:86:c6:e7:3e:02:cb:24:70:e8:37:5c:72:de:17:60:f8:
         0c:12:39:be:ff:dd:2b:46:a8:89:04:54:dc:f7:84:d5:4c:3c:
         4f:fa:de:90:55:83:19:43:fd:74:44:81:45:ce:4b:5b:26:81:
         15:a4:12:68:32:65:11:91:36:31:eb:a2:e0:01:f4:d7:7c:4b:
         e6:ff:3b:66:9b:16:10:06:a8:17:05:0b:cd:7c:db:0d:33:8e:
         aa:58:12:14:bf:5d:b4:5d:2a:76:36:93:08:6d:b4:d9:4f:30:
         08:db:a5:91:40:2c:33:a9:cf:3f:f1:ba:ee:3e:f1:0c:f3:cc:
         c8:94:7e:26:6f:98:82:3b:9d:8d:8a:01:0c:32:94:01:ed:d1:
         ca:2d:85:6d:26:68:57:95:fe:13:eb:16:41:0c:a6:45:14:1a:
         5c:fe:31:34:94:02:e0:a3:ef:b8:3a:75:4f:fc:4b:ef:60:52:
         0c:24:f4:34:6f:b8:d2:8d:51:79:fd:50:fe:55:d4:46:c6:64:
         96:a2:88:03:01:ed:5c:46:2f:a2:2f:f6:38:a0:86:18:d8:8a:
         86:b7:d8:38:59:13:41:83:ce:0f:1c:e2:b4:c6:33:5d:c7:4c:
         78:30:38:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMgqe5OhxkIWk8gvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkwNjAxMDAyMloXDTIzMTIwNTAyMDAyMlowLzEtMCsGA1UEAxMk
NWE2ZDVkYjYtNzhjYS00YjE3LThlZjUtZjRlMzgwOWQ5YzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw1M7RuenKp4umql/oBDBPZrDE134fd3o6Pz
GzbNP0sK3vKhM1DnzRU5j2L+tirNKsp1hSpTdeKsO0lhNhBioo4teesUZCkkU+ll
pxngrUs6I2WubbtQtwoA9DRurRZH/r8LgCQrg+iiHcohLaDYHnc4/DSk21R6UOGN
aFj1cOAUDJdtUTGzulPTknhccbRJANkzeCkN9HcB4kjytEJq7MRtVJP3xjK1qfSZ
FUsb0NzG0rpJCVSP6dju/rLxvF0e063lJUb2mVPunQPH7vFQmxH4WAqr10+ztlXI
eCNmuqwc8vq6HnaQkxbscL4I+GLv3HiQAHIIIU77WhN9PZBm9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuJ/C66Wpuwmc6ibGRfxZBLVewZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTc4YmY1MTMtZDllZi0z
NTJjLThiOTMtMWIxMmFlYTYyOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPOaJ/ENb6V2L73drzQpPJcU5mPhsbnPgLLJHDoN1xy3hdg+AwSOb7/
3StGqIkEVNz3hNVMPE/63pBVgxlD/XREgUXOS1smgRWkEmgyZRGRNjHrouAB9Nd8
S+b/O2abFhAGqBcFC8182w0zjqpYEhS/XbRdKnY2kwhttNlPMAjbpZFALDOpzz/x
uu4+8QzzzMiUfiZvmII7nY2KAQwylAHt0cothW0maFeV/hPrFkEMpkUUGlz+MTSU
AuCj77g6dU/8S+9gUgwk9DRvuNKNUXn9UP5V1EbGZJaiiAMB7VxGL6Iv9jighhjY
ioa32DhZE0GDzg8c4rTGM13HTHgwOE8=
-----END CERTIFICATE-----