Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/238a4d00-ac92-31c7-a4fe-10e66a19f160.roa
File:                     238a4d00-ac92-31c7-a4fe-10e66a19f160.roa (raw, json)
Hash identifier:          /bE8K+dZDhnBl0srZf2o3UDvPsKTlSRqIegoc9p6R1Q=
Subject key identifier:   28:EC:45:9C:82:50:F1:ED:FF:AA:19:0D:FF:0D:F7:61:E5:E8:3F:E9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584175FB6BC6AECECCF42D868800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/238a4d00-ac92-31c7-a4fe-10e66a19f160.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 08 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        23.26.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:75:fb:6b:c6:ae:ce:cc:f4:2d:86:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul  8 04:00:00 2025 GMT
        Subject: CN=9535f6ea-ef70-4860-a5cf-4675a5c8f81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f3:b8:37:68:29:a7:f7:33:73:2f:88:a3:bc:
                    62:82:b2:a9:3f:55:3d:ab:7b:68:30:dd:76:00:86:
                    21:21:73:cb:fd:9a:1e:32:65:10:0d:2a:6d:4c:f0:
                    ed:92:29:a1:13:b4:24:84:41:34:34:e1:4d:12:3a:
                    36:2c:ae:91:fb:d9:53:4d:7e:57:fd:a6:4e:3c:dc:
                    5d:53:a9:70:8a:1f:00:2f:8f:b4:d1:f8:fd:4d:7a:
                    58:97:0d:b8:c2:a8:5a:81:22:7e:de:e3:99:aa:b0:
                    6a:3c:3d:b3:68:3c:c1:f4:9c:f8:0b:fd:6c:7c:33:
                    80:32:38:c5:aa:8a:5b:50:27:eb:c1:24:ea:7f:8c:
                    eb:87:af:4b:92:5d:f7:36:8b:be:e1:1e:f8:08:8c:
                    19:65:d8:b2:e2:4e:b3:7d:85:69:34:7d:9f:f5:b4:
                    83:77:50:6e:5a:22:16:c3:75:b5:23:1b:91:e8:c4:
                    e2:f0:5f:24:a1:37:53:b2:32:70:a3:09:cd:9d:ab:
                    ec:e3:3a:fb:d0:9c:31:31:b2:51:6c:9e:43:8b:b8:
                    c1:1d:fb:4c:d2:c7:cd:0d:33:e8:cd:ac:a1:72:95:
                    43:22:3c:6a:16:e8:5e:fc:39:05:42:f9:0e:dc:ea:
                    f9:ef:74:26:40:72:cd:d9:dd:a1:91:8f:5f:02:d1:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:45:9C:82:50:F1:ED:FF:AA:19:0D:FF:0D:F7:61:E5:E8:3F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/238a4d00-ac92-31c7-a4fe-10e66a19f160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:97:2e:e1:c4:b7:bd:71:59:ae:cc:e8:5c:e7:d3:76:fe:a1:
         54:6d:a1:30:b8:79:e9:ff:09:c9:0f:19:bf:09:d3:39:1c:f0:
         6d:b4:c1:77:f3:fb:f3:e5:a5:bb:21:43:5b:4d:cb:ec:1f:cb:
         12:c6:14:7f:83:d9:da:34:a1:4b:c8:0f:55:3e:8d:5d:93:6c:
         f4:01:ec:19:41:81:e8:1c:32:0d:40:a8:33:fe:bc:eb:54:dc:
         c2:f9:86:87:d2:2a:04:e6:09:36:a0:f3:ec:40:3c:38:d2:66:
         f8:8b:4e:f5:d0:79:ad:e9:e0:80:c8:0a:ca:17:f1:d4:72:5f:
         f2:e3:ec:95:59:a6:46:c1:ea:52:9f:1a:0d:05:90:9d:70:a9:
         1a:67:a6:d4:b9:9f:ef:0d:7c:f3:a6:d2:bb:35:8f:c1:b1:ab:
         7e:b1:6e:6e:a8:57:b8:3d:1f:e2:37:aa:c3:96:7a:34:43:10:
         6f:8c:b5:99:62:4f:93:8d:5f:f3:36:0e:cb:07:a4:c7:f5:b6:
         2d:8e:e7:52:ef:76:8b:29:14:a3:06:6e:7f:26:bc:9b:4e:db:
         f1:40:45:c8:2c:14:f5:94:76:a6:26:5e:7a:e3:47:f9:a1:0c:
         ef:35:df:92:57:a4:c7:64:31:af:d0:e9:a8:8d:86:c8:21:c4:
         98:9e:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----