Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d8be096-c58d-323c-a123-a0566b2ea11d.roa
File:                     1d8be096-c58d-323c-a123-a0566b2ea11d.roa (raw, json)
Hash identifier:          MlIIBh8are8QBj18AmflV+1m0ZQC92/JdqY3DcSWIYE=
Subject key identifier:   F7:54:EA:D2:F7:EE:CC:33:C7:42:9A:F8:BF:58:7C:C9:8F:D1:0B:BE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446FD6693B96644BB5DFC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d8be096-c58d-323c-a123-a0566b2ea11d.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Mon 07 Aug 2023 20:26:43 +0000
asID:                     60721
IP address blocks:        23.26.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:fd:66:93:b9:66:44:bb:5d:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  7 20:26:43 2023 GMT
        Subject: CN=d290b2ba-032a-46b4-a73a-b377d12fe6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:06:b4:fa:1b:a0:24:09:2b:93:8e:d1:e6:
                    91:81:4c:18:8f:7b:08:df:23:94:01:34:f9:33:8b:
                    21:f7:4e:51:67:30:43:bd:e2:5f:a3:fe:59:94:fb:
                    c2:e4:4a:cb:a5:79:e8:29:8d:23:88:1e:f4:6b:0f:
                    49:77:93:07:18:4f:55:ef:1e:44:05:a2:b8:e5:56:
                    2f:41:1d:c0:00:ff:64:03:46:34:12:73:c7:ce:0c:
                    b2:df:d2:f3:7d:64:9d:17:73:46:b6:a4:b3:62:12:
                    f4:7d:07:fc:af:bd:ca:21:2c:82:86:fb:c1:6c:04:
                    28:8b:d3:0b:ed:2c:21:50:a7:06:dc:dd:53:02:23:
                    06:d3:ab:c8:4f:c2:0a:17:46:af:40:de:8a:06:78:
                    7b:4d:2f:3f:eb:09:cf:ac:9d:55:1c:12:5a:4e:cc:
                    03:7d:26:a4:4b:4b:41:98:0a:ac:5b:fe:76:7e:1f:
                    8a:59:2d:46:2d:fb:91:38:71:dc:92:2b:10:45:58:
                    67:7a:9f:a9:6c:bf:a2:74:be:dc:f9:ce:f8:1c:8c:
                    de:f1:e3:43:a4:75:dc:f2:3c:0a:ab:bd:fb:8b:c6:
                    09:95:66:c2:6c:ac:35:58:88:11:67:69:6b:23:d3:
                    75:3c:70:33:4a:77:55:05:f3:da:7e:56:6e:28:a6:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:EA:D2:F7:EE:CC:33:C7:42:9A:F8:BF:58:7C:C9:8F:D1:0B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d8be096-c58d-323c-a123-a0566b2ea11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:08:74:72:16:a3:5e:bf:32:fa:10:80:c9:e1:b5:28:67:
         53:ab:28:d3:f5:cf:69:b7:95:10:33:2e:f8:2f:36:ed:e6:2d:
         19:0b:a3:c7:d6:2e:e8:b8:72:99:a7:82:6f:88:da:2e:83:1d:
         d0:88:54:3c:04:06:2f:0d:74:ff:45:2e:a8:7b:94:de:c9:a4:
         40:3c:18:6e:e7:c1:3d:88:c7:2d:64:36:b2:fd:d1:22:2d:6d:
         fe:0e:5f:3b:6e:ae:03:4c:e3:93:8a:5b:76:52:77:5b:83:fc:
         64:00:7f:51:dd:a7:fa:1f:63:ae:a1:12:9f:5b:03:77:77:e1:
         a2:18:89:45:3c:c1:90:cc:18:57:68:03:87:f3:e9:9f:a5:3f:
         4a:3b:62:21:6c:4a:99:0e:67:e9:94:d4:a0:e6:78:65:e7:7b:
         3d:eb:46:1b:77:1f:bf:e1:47:d6:f4:8a:3d:77:d1:af:fb:26:
         04:d3:6a:d9:93:8c:88:e2:01:af:6d:03:80:a4:5e:8c:50:96:
         0d:46:a4:bb:b2:87:fa:3f:3c:e8:87:13:03:6f:bd:a9:7e:86:
         47:11:2d:16:08:0b:5e:ab:d8:22:de:b5:46:41:29:16:92:d1:
         13:07:f9:c8:90:0a:d8:bd:6c:43:08:c0:5a:ca:c9:8f:f0:d2:
         7f:31:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----