Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0abba9c5-11a2-3619-953d-a87435efc958.roa
File:                     0abba9c5-11a2-3619-953d-a87435efc958.roa (raw, json)
Hash identifier:          4e2K0sX+qs1/4KKe1O/C0/FZSJmgfcG/klg+nQvWOu0=
Subject key identifier:   62:6A:B9:0A:BD:97:01:4C:84:A0:B8:99:51:D0:1A:6E:39:04:EB:83
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842CED3819BF4C121F5EB9E1A90
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0abba9c5-11a2-3619-953d-a87435efc958.roa
Signing time:             Mon 07 Aug 2023 17:27:56 +0000
ROA not before:           Mon 07 Aug 2023 17:27:56 +0000
ROA not after:            Sun 05 Nov 2023 18:27:56 +0000
asID:                     834
IP address blocks:        23.26.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:d3:81:9b:f4:c1:21:f5:eb:9e:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  7 17:27:56 2023 GMT
            Not After : Nov  5 18:27:56 2023 GMT
        Subject: CN=3e969f31-2431-45fd-b4df-9763bb7f430d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:93:c2:90:9e:f1:5e:08:bc:29:c5:5a:36:
                    00:27:f1:dd:25:41:59:ae:45:df:3a:01:e0:a1:09:
                    98:c0:d9:e0:8c:05:e9:5f:6d:4a:d2:96:7d:22:57:
                    1d:14:f7:9c:85:f8:dd:99:c0:70:79:37:da:91:3f:
                    70:b2:75:a7:fc:34:4a:b4:84:8c:a9:f3:fe:a5:5a:
                    67:3d:c9:d1:fb:f0:3c:92:5a:ad:8a:a1:5d:d4:b3:
                    e3:21:a5:b8:75:97:a2:26:3a:38:90:45:54:dd:47:
                    cb:59:09:30:ed:8e:73:8b:97:96:c2:64:95:a4:a9:
                    aa:98:8b:8b:f9:68:43:aa:be:30:07:bd:0c:d9:6e:
                    60:22:66:42:59:14:f8:62:32:25:f8:21:1b:87:d3:
                    76:34:55:04:50:4f:48:e5:1d:73:73:06:3e:88:45:
                    3f:48:e2:1f:c4:c5:91:33:bd:95:7e:b0:cb:ff:b2:
                    45:eb:1a:19:4a:96:cf:d3:2a:48:6d:71:49:49:17:
                    fe:88:b0:a8:10:3b:61:74:65:cd:b4:0e:7f:ea:2d:
                    e5:f0:ff:c0:2f:47:25:75:8d:d3:35:b9:33:f0:f1:
                    6d:7b:ba:3d:f5:ca:62:34:48:91:e3:c5:63:d9:cd:
                    29:ef:3f:e0:40:b9:04:5f:75:4f:74:85:6c:10:b1:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:B9:0A:BD:97:01:4C:84:A0:B8:99:51:D0:1A:6E:39:04:EB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0abba9c5-11a2-3619-953d-a87435efc958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:47:67:6b:bf:19:44:68:12:c0:3b:e6:3d:e4:7a:02:da:af:
         74:29:a7:31:ee:85:fc:38:69:ed:f3:b1:4c:d2:37:1f:29:ae:
         13:2f:52:5b:70:52:4c:00:4d:87:0b:fa:66:f8:d3:69:a0:37:
         4f:08:54:a8:90:d1:c9:40:cf:24:48:ea:a0:af:90:1f:0b:01:
         51:71:24:60:c6:68:75:f7:8a:a5:5a:da:b6:35:5f:9a:68:f3:
         66:c6:7d:39:f7:87:45:58:aa:ce:9c:0e:86:d2:43:8a:ae:28:
         0a:65:3f:79:62:b1:2f:86:f2:ad:48:51:ee:d7:80:29:7f:23:
         86:79:66:de:6d:d4:2f:0f:f3:11:b7:bd:98:ee:19:03:72:38:
         d5:55:c5:69:6f:3e:94:f3:de:25:a0:40:4b:77:cb:db:8d:03:
         da:68:72:d9:72:43:fc:2b:95:3a:8b:5d:fa:0c:8a:fd:8b:b3:
         76:a8:c9:81:8c:45:3b:2e:54:c3:ef:dd:71:68:91:54:74:16:
         9b:7a:5a:55:4f:ce:8b:48:75:0f:5f:ba:9c:71:5d:23:22:c1:
         13:91:f6:1d:56:22:4c:87:7e:c3:6f:80:1a:18:e3:7c:a7:82:
         3a:2a:e7:87:f3:39:fe:90:03:68:7c:00:62:43:df:c3:19:c9:
         39:02:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 19:19:13 2023 by rpki-client on console-ams.rpki-client.org