Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/230afc6d-941d-389e-86ff-62c9383febaa.roa
File:                     230afc6d-941d-389e-86ff-62c9383febaa.roa (raw, json)
Hash identifier:          iDyDDKXQm929Xp5oWYdLI0QBq8OcxLY/xNWkWCJtLzQ=
Subject key identifier:   CA:6A:6A:B9:C0:A8:5C:B3:56:D4:B8:A0:49:EE:BF:F0:19:07:8E:7B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584478184E4C8CE72A763B3CE640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/230afc6d-941d-389e-86ff-62c9383febaa.roa
Signing time:             Sun 07 Jan 2024 01:25:07 +0000
ROA not before:           Sun 07 Jan 2024 01:25:07 +0000
ROA not after:            Sat 06 Apr 2024 00:25:07 +0000
asID:                     834
IP address blocks:        23.26.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 18:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:78:18:4e:4c:8c:e7:2a:76:3b:3c:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  7 01:25:07 2024 GMT
            Not After : Apr  6 00:25:07 2024 GMT
        Subject: CN=685336f6-94d9-4046-8b69-fff3a383aa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:c5:3e:ee:4b:f7:5a:86:2b:04:ca:3d:4d:
                    44:4f:9e:ba:d9:72:c6:0e:9b:13:6d:e4:01:84:2c:
                    3b:62:97:5b:ed:68:5f:ff:82:e8:c4:de:8c:ea:53:
                    3e:ad:4e:95:a2:48:45:5f:1b:e0:2c:29:80:f2:29:
                    f6:4b:eb:58:cb:b6:02:04:84:ae:cc:3b:56:61:a8:
                    b9:0c:b7:0f:0a:92:66:f0:ad:b2:e5:0d:5f:27:8c:
                    76:6d:b9:b1:dc:ae:d0:37:ea:7b:db:dc:ee:bf:2e:
                    f3:1f:27:47:15:bc:c1:a1:c3:9a:96:9f:cd:e8:ef:
                    b7:c3:03:0c:03:9d:d1:e1:d3:81:fe:04:80:2e:41:
                    c3:a7:db:d8:f6:e6:5a:ae:b8:3c:1b:00:11:70:a4:
                    8d:1b:2c:ba:0c:48:f6:0c:83:dd:4f:76:44:1d:b3:
                    92:c6:7c:31:fb:19:71:74:28:10:57:19:4a:fb:f5:
                    2c:d1:3e:07:31:70:f8:e2:8a:36:40:04:78:5f:cd:
                    dd:21:ca:0a:d3:bf:06:85:c7:fc:9c:bc:11:9e:1d:
                    89:e3:50:1e:9a:83:42:6e:91:bf:42:35:88:98:6d:
                    c2:31:4f:c3:d0:51:1e:67:1b:67:e4:dc:25:77:55:
                    1c:29:a0:b7:09:2b:91:05:0f:54:a4:07:cf:79:ab:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6A:6A:B9:C0:A8:5C:B3:56:D4:B8:A0:49:EE:BF:F0:19:07:8E:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/230afc6d-941d-389e-86ff-62c9383febaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:61:40:ad:4f:e6:eb:99:e2:09:63:af:f7:c0:30:e7:f0:
         64:d4:3d:34:58:bf:3c:2c:2b:f0:92:76:41:d3:7b:11:0e:22:
         35:71:b8:f9:d3:8f:d4:13:7b:4d:b5:02:dd:34:99:56:59:58:
         54:60:39:e6:42:65:45:a1:6b:c7:be:1c:26:b6:8d:c6:44:d5:
         2d:d9:f9:64:54:83:90:12:4d:40:f9:35:8e:c0:19:b3:7e:33:
         3a:7f:b8:90:d1:bf:e3:75:3a:e9:8e:77:1f:ff:09:da:e9:aa:
         e7:d2:fe:44:84:02:b2:eb:06:98:91:8b:bc:30:94:01:10:f2:
         12:8d:bb:dd:6b:59:56:d1:51:04:06:6a:c1:bd:79:2f:23:a0:
         5e:0e:89:5c:87:2e:06:7a:bf:38:42:2c:f4:46:45:57:6c:75:
         12:4d:91:1d:22:6e:8f:2f:e5:34:6e:19:c5:c6:e7:d2:bb:af:
         a1:34:69:55:a8:8f:52:24:d1:d6:00:cb:3e:08:af:10:72:ee:
         02:1a:ba:18:c3:b5:c6:f9:42:0f:b7:1a:9e:52:ef:81:43:13:
         76:59:44:a4:15:23:8c:a4:b2:59:01:b3:0e:89:f8:50:6d:af:
         0c:80:e2:53:40:9c:38:df:6f:09:a5:c0:e4:a1:3c:e3:ee:47:
         0d:75:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 23:43:59 2024 by rpki-client on console-ams.rpki-client.org