Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efe57e83-f4fb-38bb-be68-a2e7ef57c174.roa
File:                     efe57e83-f4fb-38bb-be68-a2e7ef57c174.roa (raw, json)
Hash identifier:          2NKQfJx3xw/PWO4EUeNjk1eSCbAPZtRpn0ZyGw+SdoU=
Subject key identifier:   0A:1F:52:22:F6:EA:21:04:4A:9D:5C:9C:53:18:A2:59:56:BC:15:9E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848A1933BE5F322F4F9714A1500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efe57e83-f4fb-38bb-be68-a2e7ef57c174.roa
Signing time:             Wed 22 Jan 2025 17:08:41 +0000
ROA not before:           Wed 22 Jan 2025 17:08:41 +0000
ROA not after:            Tue 22 Apr 2025 16:08:41 +0000
asID:                     834
IP address blocks:        108.165.90.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 22 Jan 2025 17:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:93:3b:e5:f3:22:f4:f9:71:4a:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 22 17:08:41 2025 GMT
            Not After : Apr 22 16:08:41 2025 GMT
        Subject: CN=188897f5-e007-4ebd-8278-68ec17de2575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:78:3f:74:9b:22:e9:6b:39:ad:75:7f:52:
                    da:e6:f6:50:d0:ca:1d:60:18:4e:54:bf:e2:d3:8f:
                    6f:ac:8f:0a:d7:23:da:4c:8a:c2:bd:9f:55:d9:1b:
                    1e:ff:b6:cb:90:e5:e2:df:93:d5:d5:dc:86:ba:69:
                    c3:47:5d:61:e9:67:5e:c5:73:55:21:3f:a1:9f:33:
                    d4:5a:de:41:43:ef:08:00:f5:de:64:f3:6f:68:20:
                    44:a4:a9:2a:84:c2:8e:30:43:1f:6d:36:d2:51:19:
                    45:21:c7:c2:03:93:45:72:9c:94:92:db:f7:59:3e:
                    f1:2f:9d:3e:24:6f:d8:57:09:7d:42:53:24:d6:d8:
                    59:e9:fe:25:f3:ef:10:46:bc:11:86:16:7a:21:6d:
                    30:51:58:78:84:db:09:e6:ab:6f:e8:f1:e4:60:f1:
                    f1:ba:3e:ba:aa:8d:8c:95:fb:55:d8:06:3a:31:1f:
                    14:bc:19:9b:09:36:6b:16:7c:54:98:72:54:08:ed:
                    b4:0d:2a:77:1c:df:2d:54:73:ad:bf:14:74:a8:1f:
                    39:12:65:12:5e:fc:f3:1b:ab:80:59:92:98:3a:de:
                    96:36:4b:17:45:f8:e6:6f:ca:73:85:ec:ed:cf:15:
                    eb:ea:53:92:77:c4:49:c5:8c:c9:ca:05:d2:7b:8a:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:52:22:F6:EA:21:04:4A:9D:5C:9C:53:18:A2:59:56:BC:15:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/efe57e83-f4fb-38bb-be68-a2e7ef57c174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:5a:4d:d4:f7:b4:94:92:bf:81:76:ed:49:71:50:a8:f2:
         ea:b1:97:ce:c1:2c:76:97:17:54:58:e0:81:44:ce:eb:a3:47:
         f4:11:62:8e:f5:81:2d:84:54:21:61:75:fb:c3:bb:b7:95:10:
         dd:cc:06:0f:2c:02:53:52:84:4c:52:c3:4e:2d:1b:d1:c2:5f:
         03:b9:0f:41:b3:2f:e2:b8:af:66:c2:4c:8c:8c:72:12:47:df:
         29:6b:c3:00:4e:9e:12:8c:18:a0:4b:8f:af:f2:d1:41:96:0f:
         97:9a:8a:30:8b:dc:4b:c3:04:ae:c3:97:ab:07:ac:b0:5e:73:
         30:71:68:67:ad:75:16:6e:b3:0a:97:e3:9c:a3:c9:b6:b9:47:
         7f:72:f6:77:f2:e0:9b:21:25:b8:72:82:8d:db:68:3d:e7:ad:
         fb:34:7c:e5:e9:bd:a5:98:5b:cb:bb:74:d5:ea:4b:fa:e1:20:
         d8:fc:8a:64:cf:3b:41:98:51:64:79:f3:7a:70:79:9a:48:ba:
         79:ef:ef:a0:24:4a:16:ff:96:11:2b:85:67:e8:b3:f4:b1:a5:
         82:bb:87:54:f3:95:18:0e:af:cd:19:07:59:97:2c:0c:49:a9:
         04:35:4c:05:5d:0a:e7:19:16:5b:d7:ae:22:e7:8c:a9:5e:d0:
         93:c7:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----