Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/033fad2a-014b-3efa-bbd9-144864f317ad.roa
File:                     033fad2a-014b-3efa-bbd9-144864f317ad.roa (raw, json)
Hash identifier:          W/GfnQeUV1JwWxZtEgkijgBk/GzNXjeHGrza483vKJU=
Subject key identifier:   A4:E0:DC:E1:88:E5:3E:35:A9:76:3F:23:9D:B9:D6:9F:36:BE:17:54
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842C65A16CAEAA2BD10856C2480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/033fad2a-014b-3efa-bbd9-144864f317ad.roa
Signing time:             Fri 04 Aug 2023 16:36:50 +0000
ROA not before:           Fri 04 Aug 2023 16:36:50 +0000
ROA not after:            Thu 02 Nov 2023 16:36:50 +0000
asID:                     834
IP address blocks:        23.26.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c6:5a:16:ca:ea:a2:bd:10:85:6c:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  4 16:36:50 2023 GMT
            Not After : Nov  2 16:36:50 2023 GMT
        Subject: CN=7857ac54-0a1a-4fdd-92b0-11d1d264461a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:45:2f:b4:77:9b:73:e5:db:11:09:aa:27:02:
                    63:94:8a:6e:04:9c:98:ec:e3:00:83:f7:42:66:b6:
                    5b:06:47:01:e7:47:9c:80:a9:91:c1:24:65:40:8e:
                    57:61:34:13:ed:1f:88:96:af:44:ad:25:a3:68:1e:
                    af:a6:f8:4b:1d:05:c1:8d:46:0d:2e:85:45:65:c0:
                    af:a6:66:9e:9b:bf:21:28:41:01:23:4a:92:ca:d1:
                    ef:f2:4a:86:89:a5:14:62:90:4c:09:77:74:3f:df:
                    f7:9a:b1:91:15:a9:44:85:bd:f5:7a:1c:63:6e:b0:
                    6c:69:d0:0b:0c:dc:51:75:1b:da:11:56:c3:c1:8e:
                    99:6e:7b:a5:c9:9c:4e:3f:b1:f0:56:67:98:28:fa:
                    ff:36:ee:fe:9c:4f:f3:03:76:13:fd:88:34:62:c6:
                    01:f9:26:e4:7b:17:11:ed:4d:f0:af:0c:8c:63:e1:
                    9e:ec:d1:a3:ca:cb:e8:91:19:33:46:08:18:69:78:
                    de:7b:e9:7a:06:44:f6:53:25:2d:38:1d:cf:b1:97:
                    c7:9e:ca:35:fe:a5:30:32:e3:3d:64:08:44:c7:8e:
                    2d:63:2e:4c:ef:9e:ce:c2:e9:9f:3f:f6:1c:24:2b:
                    1b:ea:0f:3e:04:28:c8:94:67:97:60:02:17:e1:a1:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E0:DC:E1:88:E5:3E:35:A9:76:3F:23:9D:B9:D6:9F:36:BE:17:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/033fad2a-014b-3efa-bbd9-144864f317ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:00:b9:2b:1b:79:0a:f9:2c:ba:8a:36:02:f0:4b:a6:0a:
         37:90:e5:46:db:3b:73:14:09:e2:7e:83:25:85:a3:03:ef:ea:
         42:7f:bd:ca:a4:dd:40:49:d6:1b:f0:eb:2a:4b:2e:3e:a6:14:
         69:2e:da:08:e0:ef:b5:84:22:63:e4:6f:38:19:d8:cb:c0:25:
         a3:0d:ac:75:48:8b:ab:6b:41:5e:8a:5a:8d:09:49:d4:17:75:
         c9:f5:c5:d3:89:12:48:b4:7a:31:e4:1b:65:6f:27:3b:bf:8c:
         8b:d6:32:4e:fb:15:76:95:30:f8:47:04:de:11:d7:d8:31:bb:
         66:5d:b1:de:fb:c4:ad:b6:89:21:2e:a1:a8:aa:24:75:8b:2c:
         04:4a:d0:d5:6d:82:e1:6f:8d:46:3e:77:ea:f7:13:f4:5f:2b:
         d9:29:65:76:7a:35:ce:e0:bc:79:db:00:e6:69:48:3b:09:d7:
         14:2b:88:f8:01:74:87:b7:b8:2f:12:a2:75:f8:0e:af:38:8a:
         55:bd:8c:8d:a8:4f:c8:6c:61:4c:e1:d9:dd:fe:c8:e7:c2:cf:
         c6:2a:88:25:38:9c:12:4b:83:9f:d2:f2:e9:6c:a5:41:08:b5:
         96:84:f0:80:88:50:a5:2b:d0:17:e6:eb:14:63:16:97:7d:6a:
         7e:af:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----