Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b786b90-7ccc-35ee-aa56-c62f208c9c3d.roa
File:                     0b786b90-7ccc-35ee-aa56-c62f208c9c3d.roa (raw, json)
Hash identifier:          4wy8eWvwnVGYpEx/O6kap8P2zxyuEv/PgXclMq2Cuns=
Subject key identifier:   FA:F4:7F:0D:5C:F3:DE:DC:1F:17:25:4D:AB:8A:0D:B4:37:0A:1B:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858426B8E0C92C9A31C5172F85AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b786b90-7ccc-35ee-aa56-c62f208c9c3d.roa
Signing time:             Mon 03 Jul 2023 04:02:58 +0000
ROA not before:           Mon 03 Jul 2023 04:02:58 +0000
ROA not after:            Sun 01 Oct 2023 04:02:58 +0000
asID:                     834
IP address blocks:        23.26.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:6b:8e:0c:92:c9:a3:1c:51:72:f8:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul  3 04:02:58 2023 GMT
            Not After : Oct  1 04:02:58 2023 GMT
        Subject: CN=8c1e34df-655b-4b8b-b104-187013aaeedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:38:8a:bd:82:c0:5c:c7:ae:64:52:e6:b8:
                    af:b2:31:75:e2:09:9d:2b:d5:40:bd:9b:40:7c:1d:
                    2a:f8:78:a3:1c:f9:e1:70:bf:0a:80:06:cb:8b:6e:
                    c5:01:59:f3:91:d0:2f:0d:0a:1d:39:86:e7:f6:18:
                    66:73:1f:22:87:58:c5:eb:07:d2:76:77:b5:3e:43:
                    8d:10:c3:b7:64:05:8e:a4:e5:23:25:59:09:51:3c:
                    46:1e:1e:fa:0b:0c:1b:94:58:7c:d3:3b:b7:d3:95:
                    8b:77:7b:cc:f9:d7:b7:ca:43:a0:ff:d0:38:b5:7b:
                    e0:d4:33:5d:ab:d2:97:3f:b2:ca:f6:0f:b3:06:ba:
                    b5:61:fd:85:98:e7:9e:24:5d:c5:12:2e:0b:c8:47:
                    cc:1c:a7:ce:47:3b:4e:48:96:2c:e9:b9:61:f8:95:
                    9f:3c:43:18:1d:1c:6f:be:c6:79:81:6f:e2:86:cf:
                    26:c6:6a:e1:ab:27:7f:56:5f:bf:fa:08:65:a2:1e:
                    5f:b1:68:5a:3c:f0:f6:27:23:47:ed:87:64:af:4f:
                    e2:cc:a7:22:5e:f5:6f:27:06:6c:5e:ae:88:28:4f:
                    da:b5:a3:f4:2f:a5:67:11:f2:83:0c:33:2a:3b:2c:
                    ad:33:f5:27:9c:d1:6f:7f:ff:e9:d9:95:2b:29:c3:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F4:7F:0D:5C:F3:DE:DC:1F:17:25:4D:AB:8A:0D:B4:37:0A:1B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b786b90-7ccc-35ee-aa56-c62f208c9c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:5b:6b:38:7f:aa:f3:07:4c:cd:f4:76:1a:82:af:bf:44:c3:
         11:a3:56:16:55:80:c0:08:68:07:97:89:f6:0d:63:39:53:b7:
         8b:a3:02:f3:e9:59:c1:18:eb:c2:0f:a6:94:e2:27:c0:2c:79:
         65:d0:db:48:93:5d:94:4e:46:3f:56:b6:70:54:27:c1:4b:12:
         5c:d0:1b:d3:e9:7f:a7:56:56:0b:8d:16:f9:d4:94:87:68:08:
         c3:04:86:13:f1:df:85:44:e6:40:1d:7e:8c:c3:8a:7b:14:52:
         1d:8a:61:92:aa:f2:15:9d:24:e8:d8:9e:e0:ac:34:b1:72:03:
         9a:e8:0c:d7:b1:82:ec:18:d2:79:9e:d7:48:e9:34:a4:7f:c2:
         54:ca:94:86:fc:ca:ec:f8:6f:25:4a:7e:f5:03:20:90:81:1e:
         08:ce:ab:e3:a9:75:b1:d0:c8:db:c2:88:cc:2e:f7:2f:92:5d:
         90:c6:e7:64:33:7a:80:31:64:61:74:b2:22:54:2a:0c:af:ba:
         b4:d9:a8:67:52:a6:4f:36:e7:60:55:72:66:0e:64:e7:4a:90:
         df:40:32:a4:45:b0:e7:6e:9f:49:fb:b9:b3:0f:d7:21:4d:1d:
         a0:bf:43:96:79:39:a9:a8:b7:b3:12:f0:2f:dc:6f:85:37:28:
         83:a1:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----