Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e1bf88a-978b-3233-8735-f7c9fdb3878c.roa
File:                     0e1bf88a-978b-3233-8735-f7c9fdb3878c.roa (raw, json)
Hash identifier:          GeuxcgCvHaR1RHVfX7RQf6kVKo2jVVcF//o7WZ8I+t4=
Subject key identifier:   EC:00:0F:40:99:AF:16:7A:A5:0C:E8:86:D6:16:4A:2D:5A:DC:91:A4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446EC61BA9E52C7FD9EBA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e1bf88a-978b-3233-8735-f7c9fdb3878c.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sun 13 Aug 2023 05:51:21 +0000
asID:                     211584
IP address blocks:        23.26.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:ec:61:ba:9e:52:c7:fd:9e:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 13 05:51:21 2023 GMT
        Subject: CN=60bdf5f5-7d1f-4f27-9aaa-c434720965f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:87:92:41:3c:a9:24:0c:5c:4f:87:5f:31:
                    bf:00:2f:61:54:b0:dc:e4:6b:29:51:60:ea:30:90:
                    b3:eb:34:b7:4b:d9:75:99:42:73:9c:26:a8:b8:66:
                    ab:6f:9f:3b:cc:a4:6a:17:58:49:51:59:cf:80:c1:
                    fe:b3:fd:16:71:86:35:14:e5:d0:1b:10:12:1a:d1:
                    18:8e:a4:94:21:e6:21:3a:73:88:74:8d:03:35:ef:
                    b7:b1:91:c5:93:5f:a1:93:3d:08:26:76:8a:24:24:
                    ec:a1:67:63:12:18:14:f6:9a:7a:46:00:f8:4c:29:
                    d0:61:f9:1a:e2:6b:4b:0a:91:39:31:4b:13:73:ec:
                    bc:66:ea:ac:c6:e1:29:04:3e:e1:8e:1d:03:79:09:
                    07:7a:a9:ae:1c:7d:a1:94:b4:57:d3:cc:b5:41:de:
                    0c:49:72:57:b6:0a:2f:79:38:fc:69:91:5a:65:22:
                    3d:dc:d0:38:60:80:18:73:4a:bc:3a:ab:94:d7:2b:
                    da:22:53:f4:6d:85:f6:b6:f8:4f:b3:3a:90:2d:1e:
                    44:95:9b:45:1a:36:16:d1:20:87:57:34:47:82:89:
                    30:6e:12:51:50:18:fa:1e:9a:68:5b:5e:f0:6e:84:
                    43:50:94:fc:81:06:cc:c3:6d:50:55:91:2e:04:e9:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:00:0F:40:99:AF:16:7A:A5:0C:E8:86:D6:16:4A:2D:5A:DC:91:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e1bf88a-978b-3233-8735-f7c9fdb3878c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4f:62:24:06:da:0f:bc:96:d2:ca:e3:27:f8:fb:c0:b4:50:
         fe:fd:9e:b8:0b:4c:24:4f:4b:d7:77:b3:5f:47:e8:86:09:cc:
         aa:73:4c:2f:1e:31:4d:17:c9:02:58:93:c8:44:9a:c9:a1:c4:
         35:cc:31:98:94:f5:fe:20:d2:87:b0:39:f5:d2:cd:8b:7f:1a:
         6d:55:71:02:c4:4d:f6:76:12:8d:01:8b:d8:c0:cb:79:03:c1:
         d8:ea:d0:e4:85:04:14:8b:12:a1:ff:bd:2b:9c:cb:69:8a:32:
         9f:6f:29:5d:67:a7:92:2d:43:ef:53:d8:2a:f7:8a:b9:e9:f1:
         3c:8b:c9:a2:bc:43:6a:07:2e:93:ca:6b:f7:6b:65:c4:ca:f4:
         2e:b4:e3:63:d4:6e:24:b4:39:dc:f2:f1:2d:2b:95:3e:4b:6e:
         54:e6:18:20:f9:f6:6b:bd:6a:46:1e:54:08:28:3f:0d:36:df:
         b2:df:83:ff:1f:bd:51:8f:e0:82:f5:55:4e:d3:0d:2f:61:a3:
         e0:50:2f:41:6b:22:46:3d:57:15:28:a7:d6:53:f8:6b:f6:40:
         cd:9b:22:9f:64:ac:70:eb:2b:a3:19:f2:f2:19:35:f8:a4:94:
         e4:46:ce:53:2b:c1:db:db:5b:34:ba:96:72:f1:ef:d0:47:b4:
         83:d2:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----