Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/359fdba7-abec-3880-a51f-5600577f2073.roa
File:                     359fdba7-abec-3880-a51f-5600577f2073.roa (raw, json)
Hash identifier:          OqP0OfCUZnxWzH/FpZ+fz4ums0Q3WdTyr1kBO4FpqOw=
Subject key identifier:   5E:AA:F7:78:86:72:E8:73:0F:BE:BB:A5:DB:B5:A4:D3:44:FA:AA:3E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583FDF2B5A790C92EDC74957A140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/359fdba7-abec-3880-a51f-5600577f2073.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 13 Feb 2025 05:00:00 +0000
asID:                     61317
IP address blocks:        23.26.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:df:2b:5a:79:0c:92:ed:c7:49:57:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Feb 13 05:00:00 2025 GMT
        Subject: CN=1d14c1b7-a30b-4e9c-b658-619b6e308419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:50:60:d2:65:d0:1e:69:f9:fe:ff:03:68:
                    44:69:e9:b7:e9:18:6e:25:bc:11:3f:7e:76:81:1d:
                    94:be:a9:a9:d3:c7:7a:f8:33:68:e6:f6:98:93:82:
                    4b:e0:b2:d7:9a:80:aa:9a:01:75:c4:42:cd:2f:03:
                    02:f4:7a:29:6c:4e:5c:85:93:3b:22:dd:11:a1:7e:
                    01:68:22:50:53:57:36:3f:e5:1a:18:07:86:8e:b8:
                    c1:2d:97:aa:16:e4:0d:9d:2b:92:d1:b8:c3:ad:61:
                    d5:85:0a:62:0a:9c:74:a1:83:42:45:0c:ac:3e:03:
                    fd:68:f5:c1:e1:ae:6c:ca:15:d0:0b:6f:5f:73:f6:
                    64:ce:98:a3:e0:8a:b4:ad:9e:bf:e4:6e:84:20:1f:
                    f3:6e:32:50:23:36:da:1c:04:7b:a3:61:2c:ec:98:
                    f7:7b:de:ef:30:ae:84:f9:a5:48:4f:a7:a6:29:ee:
                    b8:fa:cd:30:a9:4a:1c:4d:e3:78:2a:94:d0:62:57:
                    dc:57:17:28:20:ac:c9:d1:61:70:9b:51:33:ff:63:
                    7a:45:24:a5:39:12:2f:49:99:46:c0:18:6c:fb:f8:
                    4c:37:b8:7f:1c:7b:72:9a:a8:79:3c:1b:c1:ed:d1:
                    5d:d1:3f:5c:d4:8a:ad:98:70:3c:80:ce:3f:2a:63:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:F7:78:86:72:E8:73:0F:BE:BB:A5:DB:B5:A4:D3:44:FA:AA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/359fdba7-abec-3880-a51f-5600577f2073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:dc:34:6d:f0:13:93:ad:64:d6:52:c6:e8:21:e3:1c:eb:0a:
         62:12:52:cd:a4:4e:58:7c:11:ac:fe:77:18:d7:bf:c6:41:18:
         50:eb:af:6d:ad:46:59:51:00:d5:d9:3a:62:fd:b5:65:59:32:
         fb:2f:6a:c3:ee:8c:bd:29:13:22:29:62:45:8b:f3:a6:6f:85:
         cf:5b:77:3d:d7:a3:f9:ee:5f:8f:76:98:1f:d9:13:ab:31:ba:
         e2:ac:50:28:b8:9c:c2:29:9c:19:b2:c7:0a:89:37:38:fd:ab:
         4a:70:e0:28:f2:74:dc:2e:68:8d:74:ee:a0:bf:e0:89:0f:77:
         a9:8d:93:08:d6:03:6a:75:43:a8:a5:68:12:dd:99:2b:c8:3a:
         d3:7c:f8:92:65:c0:59:5e:5e:b9:6d:27:b0:18:1f:c9:7a:e9:
         5c:83:03:fd:0e:05:c6:ee:21:a3:3e:dd:b2:01:7c:28:b5:16:
         af:54:a5:2e:01:97:ea:ce:35:fa:4c:d6:bf:cd:d3:b0:eb:a5:
         d5:ac:f7:08:0c:e4:3c:8c:95:27:b0:1b:3f:cf:30:7e:af:21:
         65:de:6e:7b:0f:f1:32:16:70:6e:28:ad:5d:7f:04:4e:5c:75:
         a8:88:7c:e9:73:ee:bc:8e:2a:c1:1b:3f:15:12:12:fb:20:ce:
         3a:67:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----