Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fe7a873-5a07-3355-8e70-b1a0ccde1411.roa
File:                     1fe7a873-5a07-3355-8e70-b1a0ccde1411.roa (raw, json)
Hash identifier:          KX+p9hA28RiGqwMCw3VDAFFjTbQ7DY7RaeCt+EglNzo=
Subject key identifier:   F7:5E:1F:9A:64:73:AD:0D:43:82:86:8E:C8:25:B5:16:D9:73:FC:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E4470265EE13D7F3E118DC88
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fe7a873-5a07-3355-8e70-b1a0ccde1411.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 10 Aug 2023 05:28:25 +0000
asID:                     61138
IP address blocks:        23.26.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:02:65:ee:13:d7:f3:e1:18:dc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 10 05:28:25 2023 GMT
        Subject: CN=4cb43a54-9ff1-4191-8af4-8db1629d4c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:6e:c9:72:68:38:72:1e:6f:d3:38:0d:41:
                    89:0f:d2:cf:22:1f:b1:7d:39:4e:53:63:8a:09:74:
                    ad:b0:f9:da:9c:e5:8c:9b:00:d6:7d:2b:56:6e:ab:
                    95:df:49:67:f1:a4:95:42:95:98:4f:37:4d:27:6c:
                    4c:5c:73:1c:2a:84:2a:bc:73:bb:d2:c7:b7:ab:b8:
                    ca:42:84:e4:32:8c:72:c3:5f:94:1c:7a:1a:c2:8d:
                    03:37:17:3d:0d:57:ec:e7:c8:cb:60:54:9b:e5:04:
                    a4:a8:86:b1:b7:e5:ca:e6:8e:61:4b:9d:c5:20:b7:
                    c3:20:61:33:46:d2:dc:06:9c:e0:57:a2:ff:8b:88:
                    7f:b4:9c:3d:fa:a4:f6:47:94:96:88:bb:3b:5a:95:
                    68:7c:0e:7d:37:d5:3d:17:da:a7:08:e5:2a:e7:dc:
                    a9:14:b3:50:97:6c:83:1e:cc:cc:63:69:01:86:59:
                    2d:b0:35:86:e8:7e:0a:39:94:d2:0a:92:ef:f8:da:
                    3d:75:11:7c:e9:20:63:d3:aa:db:c3:dc:87:47:6a:
                    5d:f5:f1:3c:32:d6:b6:e5:1a:63:d9:4a:4b:8c:4b:
                    35:fb:69:b4:a6:fc:e3:5d:03:ac:98:db:89:f6:c5:
                    2a:f3:0e:f6:8a:df:b5:fd:8d:5d:84:bc:35:86:16:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:1F:9A:64:73:AD:0D:43:82:86:8E:C8:25:B5:16:D9:73:FC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fe7a873-5a07-3355-8e70-b1a0ccde1411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:7c:28:dd:72:8b:16:0a:73:a0:da:b5:ab:5d:d8:1c:0c:
         d0:a9:c9:b5:d3:a5:5a:e4:32:40:3b:ca:ad:91:cc:17:94:a4:
         69:85:3f:4f:6d:50:f3:4c:9e:16:ae:d3:db:2a:a0:cd:92:a2:
         00:78:1d:a2:96:fa:b4:3b:80:1a:cd:b1:1f:d9:56:23:e9:4c:
         d3:62:0f:1f:d9:21:a0:b2:66:ff:dd:4d:3a:65:6b:df:18:c0:
         f0:71:56:b5:6c:03:48:70:5b:fe:66:43:98:4f:b8:e6:51:20:
         a6:84:35:27:97:ac:e4:a7:01:de:c9:ff:5b:7f:40:cc:30:cc:
         5c:41:9f:7b:f4:f9:63:79:88:30:0d:b8:13:fb:f1:7f:e3:a9:
         20:76:53:65:f7:c0:d1:f9:33:a7:01:c4:30:05:4c:93:5b:f9:
         13:1d:d9:d9:1d:4d:ba:7f:7c:e5:0d:22:26:68:fb:9e:aa:d2:
         df:3a:68:d6:48:50:41:34:2f:60:1c:4e:d1:1a:4a:c6:ff:e2:
         c2:71:e7:ae:9f:28:16:9a:e1:e1:be:45:f8:cd:01:79:9f:b6:
         c9:b5:ba:b0:be:94:a4:fe:5a:44:d4:50:5e:78:9e:84:01:dd:
         c0:50:cf:18:5c:ed:d1:6c:26:d2:61:c2:ef:b2:1f:d5:0c:ec:
         5c:aa:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----