Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1cfc9ed0-a1eb-3741-8031-af6d790b307a.roa
File:                     1cfc9ed0-a1eb-3741-8031-af6d790b307a.roa (raw, json)
Hash identifier:          4l1KoWB93ku3RbEny+QfxvhyvxPo+G7tcRq+Kw7iakc=
Subject key identifier:   61:38:9D:4C:2F:D9:7A:EC:43:83:E7:FF:8F:07:56:7B:CD:7E:4A:91
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584178BA6E686B05F874601490F0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1cfc9ed0-a1eb-3741-8031-af6d790b307a.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 09 Jul 2025 04:00:00 +0000
asID:                     51559
IP address blocks:        23.26.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:78:ba:6e:68:6b:05:f8:74:60:14:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  9 04:00:00 2025 GMT
        Subject: CN=04c4c3e6-66b5-4a30-aad2-a3f27162463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:b5:65:85:69:1d:84:2b:b6:76:a4:a7:cd:
                    2c:88:a2:e2:bc:3b:2c:63:d6:ae:04:ef:c0:55:a1:
                    b8:4c:90:6d:b1:92:3c:18:6d:b2:9c:e6:00:da:77:
                    3f:e9:d5:74:93:5b:a1:60:11:07:5f:1b:ac:5d:ac:
                    86:f9:50:fe:c3:a4:24:04:9f:92:8e:c3:c6:32:ea:
                    84:13:ba:20:39:97:c8:30:ce:29:27:5c:30:f3:b0:
                    41:bd:70:94:95:1f:40:f9:d3:3e:f0:47:f4:6b:05:
                    b2:19:ef:aa:cf:a2:25:32:ba:3f:b0:07:c2:05:9a:
                    64:32:d1:93:76:d6:ec:43:b4:41:41:b6:aa:35:6f:
                    3a:10:fb:14:ff:34:43:08:89:91:56:02:74:e6:ae:
                    8e:17:f6:7a:c3:c2:f2:b7:53:4e:87:2a:b4:d5:41:
                    88:35:e3:bd:b6:57:1b:2c:22:3c:d5:c6:2e:46:07:
                    06:92:73:f6:ed:59:fc:2e:ae:92:ee:74:95:27:4e:
                    16:e4:dc:d8:b4:60:06:c2:25:00:78:5d:60:49:5e:
                    ff:5c:a5:2d:0e:aa:f5:87:6d:8e:af:9a:94:fd:99:
                    ae:1b:0c:07:04:f1:cd:b9:60:99:37:bd:5c:4b:62:
                    36:6d:a7:c3:9c:fe:a4:76:43:ef:4c:ef:4e:15:39:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:38:9D:4C:2F:D9:7A:EC:43:83:E7:FF:8F:07:56:7B:CD:7E:4A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1cfc9ed0-a1eb-3741-8031-af6d790b307a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:6a:0c:d7:7d:b3:0c:fb:04:46:f2:83:dc:93:2f:0f:6d:c6:
         e7:58:2e:e4:2e:5d:7d:fe:51:10:b7:c4:46:38:79:63:f6:48:
         21:8b:f6:6f:59:76:c9:e2:c0:89:66:e9:bc:5c:2c:95:80:76:
         35:17:8c:b3:d0:23:94:9b:6f:e9:f1:4f:a7:c2:b8:22:04:83:
         05:65:13:67:95:ce:d8:4f:69:e0:c1:e1:f4:29:52:f3:78:22:
         54:c6:0e:3e:b3:3e:d3:da:1d:05:1b:40:aa:d6:91:89:0f:27:
         ef:15:2b:92:6d:fe:74:6f:3d:c5:1a:6d:7f:82:c1:bf:dd:00:
         7f:ff:ab:39:8b:22:4c:19:33:64:f0:24:63:60:9f:e8:dd:42:
         16:52:2d:0b:9b:06:b5:58:26:89:e1:9b:c1:cd:cf:66:82:55:
         ca:f3:92:b9:77:00:0e:f4:50:c0:e7:d8:dd:0f:44:6d:2a:ff:
         b3:13:5b:f9:e6:48:67:af:3b:a5:7c:f2:7e:d8:22:72:7a:39:
         ac:b2:ab:16:52:81:e6:37:7e:b1:d7:50:59:9d:03:e5:ba:4a:
         f4:50:3f:93:04:bb:8a:9e:af:7d:c3:a2:d3:8e:9b:14:0d:4f:
         f2:f6:53:e2:8c:1e:51:bf:25:78:49:d1:4d:22:7c:14:18:f9:
         bb:29:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:18 2023 by rpki-client on console-fra.rpki-client.org