Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01354423-3dc5-3b75-9075-b8495b210511.roa
File:                     01354423-3dc5-3b75-9075-b8495b210511.roa (raw, json)
Hash identifier:          PfAoiEmPrHfsZYdg6oMt8/AhUyO2Dq3Yt3G0wb4N3kE=
Subject key identifier:   DD:4E:62:1F:D5:0A:27:67:06:DF:CD:D2:E7:23:E5:C8:86:06:D2:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858437387FF56CE57ED9169D54680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01354423-3dc5-3b75-9075-b8495b210511.roa
Signing time:             Thu 05 Oct 2023 17:24:11 +0000
ROA not before:           Thu 05 Oct 2023 17:24:11 +0000
ROA not after:            Wed 03 Jan 2024 18:24:11 +0000
asID:                     834
IP address blocks:        23.26.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:73:87:ff:56:ce:57:ed:91:69:d5:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  5 17:24:11 2023 GMT
            Not After : Jan  3 18:24:11 2024 GMT
        Subject: CN=958cd97c-6c53-48c9-9d46-5480b6a40e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:f2:f3:e7:80:fd:e1:5f:93:cc:c0:88:e6:
                    50:44:06:1a:11:22:48:df:b0:42:5f:88:9e:99:10:
                    d4:f2:90:0a:db:30:84:b7:c4:d7:62:f8:63:cf:a2:
                    b5:8a:93:07:47:57:be:35:30:8a:73:2b:6b:4f:89:
                    74:f6:d0:28:4c:9c:26:e4:97:37:e3:9b:9f:f6:7a:
                    a0:91:d3:6c:3f:bb:af:ab:7d:de:34:30:e8:4e:a5:
                    5b:ca:3a:02:82:c6:7e:40:a5:60:10:2c:fb:f4:43:
                    f6:06:5c:3d:00:21:89:70:6a:05:39:e8:70:9f:e7:
                    8b:3e:26:b4:21:02:52:91:75:6c:65:04:4c:5f:ec:
                    1e:93:e8:d8:87:dd:0b:09:df:60:bb:6c:ab:98:72:
                    26:90:13:c0:1a:9f:ff:23:15:98:ef:0d:6f:f4:0f:
                    02:1e:af:f0:52:81:ae:7b:77:6a:66:62:ab:26:c1:
                    25:85:d4:4c:89:5e:35:0b:99:ac:7c:c6:e0:b3:ef:
                    78:cf:88:c0:6c:a3:d2:9c:9c:e2:f3:a9:59:78:e9:
                    d4:52:ed:81:18:cc:07:cd:82:e2:04:60:ba:89:e8:
                    da:b8:04:68:6b:1f:47:8d:c3:29:73:76:82:a9:61:
                    dd:a6:9c:25:f5:7d:b6:b1:e2:1f:13:18:af:8a:52:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4E:62:1F:D5:0A:27:67:06:DF:CD:D2:E7:23:E5:C8:86:06:D2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/01354423-3dc5-3b75-9075-b8495b210511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:2b:7a:b2:b2:ea:79:0b:94:1d:f4:e1:3d:40:9c:41:bf:
         a2:3f:81:9c:a8:ee:98:14:ef:0f:34:9a:48:cd:6e:d0:f0:4b:
         1a:05:1f:ba:7e:72:89:55:6e:18:f1:5c:da:ae:52:d5:87:74:
         5c:1c:04:a2:20:fd:6d:b6:bf:2c:41:82:ee:d2:c8:7c:20:80:
         6d:d5:fb:9a:70:30:7b:1b:f6:57:5f:e1:f4:a5:63:91:3f:05:
         bb:dc:38:c2:bf:a6:4c:1b:81:6c:ab:1d:ed:f1:e3:ef:77:02:
         cb:23:0c:86:8c:26:43:30:b3:d3:7a:04:78:cc:04:12:54:69:
         9f:de:0e:91:16:a1:9d:25:0a:af:37:3a:be:21:c3:d7:67:11:
         dd:36:e7:dd:63:b2:af:11:00:c0:55:6b:1f:7e:ad:07:8c:b7:
         19:b2:c5:47:5a:52:d1:3e:c1:64:99:08:db:1b:ce:b2:f8:42:
         45:c6:04:01:c4:d6:9e:57:60:23:d4:f5:7f:d8:2a:1e:4b:2d:
         23:40:82:be:b7:24:1a:be:df:ea:a5:a8:bf:e6:28:a2:dd:73:
         ac:8f:6c:82:5e:47:d7:25:c5:1f:30:79:fc:26:28:10:3d:0b:
         4b:65:66:36:82:9e:27:9a:2b:19:f9:70:8f:97:a4:9b:ff:26:
         24:39:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 02:00:05 2023 by rpki-client on console-ams.rpki-client.org