Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/387b1330-6bd5-32c5-af6c-a0a15d68d2d6.roa
File:                     387b1330-6bd5-32c5-af6c-a0a15d68d2d6.roa (raw, json)
Hash identifier:          oNA804q1C5QEfaQJ9KAO/j33KOk4OEGCgQ+pFuSWX4g=
Subject key identifier:   C6:18:E3:07:6D:67:79:1A:E6:51:68:A2:5E:4E:EE:D4:66:A9:32:54
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584354FCD51F21D5F11BB4707C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/387b1330-6bd5-32c5-af6c-a0a15d68d2d6.roa
Signing time:             Sun 24 Sep 2023 18:49:32 +0000
ROA not before:           Sun 24 Sep 2023 18:49:32 +0000
ROA not after:            Sat 23 Dec 2023 19:49:32 +0000
asID:                     834
IP address blocks:        23.26.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:54:fc:d5:1f:21:d5:f1:1b:b4:70:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 24 18:49:32 2023 GMT
            Not After : Dec 23 19:49:32 2023 GMT
        Subject: CN=7ef000c8-1d6c-4498-9dad-a8123cfd23e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:fa:81:3e:25:95:6c:4a:33:26:70:aa:02:
                    b2:b1:a1:4a:c8:34:44:91:13:4d:55:9d:ec:a2:b3:
                    d4:2b:a5:d3:91:d3:fc:55:58:a6:3a:30:c7:42:e8:
                    5c:5e:b7:24:8c:d9:bc:17:6a:15:a3:1c:37:4e:0b:
                    6a:e2:ad:8d:2b:d7:bd:24:5e:e2:6a:03:94:25:b5:
                    38:4b:a2:45:4e:1e:a0:08:d9:b5:c8:47:62:b6:c2:
                    46:be:73:e0:51:6a:91:cb:82:19:67:0e:38:f8:d7:
                    40:b1:85:87:72:9d:d6:9b:61:2f:59:45:f1:d4:bf:
                    d1:4d:9f:f6:0c:ee:f0:11:b0:17:32:2a:b9:46:38:
                    f6:63:99:25:99:0f:df:fd:8e:b8:a3:a3:56:33:bc:
                    5d:f7:8d:9d:3e:d3:4a:a3:31:90:07:5a:b0:ac:d7:
                    b7:e6:9a:e4:5e:71:9d:2c:a8:02:6d:7c:00:4a:4b:
                    37:1b:a3:ba:ee:f0:1e:ea:24:c3:ec:17:1b:12:57:
                    be:29:51:fe:3a:25:bb:38:43:95:d1:72:14:2d:f9:
                    41:0c:2d:33:a9:fb:b9:35:30:a6:cc:3e:4a:2b:c5:
                    a3:76:1e:d2:0f:d4:ee:c7:2b:a3:31:f5:d1:80:cd:
                    2f:af:8b:9f:12:59:bb:74:ae:68:f1:4e:ad:72:ee:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:E3:07:6D:67:79:1A:E6:51:68:A2:5E:4E:EE:D4:66:A9:32:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/387b1330-6bd5-32c5-af6c-a0a15d68d2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d0:4f:71:ce:e9:4b:3c:e9:e7:ed:ba:78:06:5c:d2:29:e5:
         13:18:18:b7:f9:af:4b:71:b7:d7:f7:69:96:8a:33:61:ef:35:
         e3:76:32:aa:9b:de:58:8e:08:18:23:be:75:07:bf:96:6b:be:
         3a:6e:33:35:0c:db:b6:25:12:21:58:c5:e8:c6:8b:82:f6:2b:
         43:4e:23:39:95:5b:a6:9d:45:4c:88:8d:de:49:68:23:f3:04:
         55:4f:44:30:7e:7d:ff:67:b0:53:f6:03:5e:7a:0d:f3:0f:b7:
         1b:d0:fc:dd:29:5c:34:cf:41:08:5a:66:03:9d:4b:bc:19:ac:
         96:fd:cd:8b:95:b4:68:73:f0:54:b7:a4:ec:c4:68:41:99:0f:
         e9:df:81:bf:64:78:62:32:60:56:2e:e7:c0:c5:12:26:b4:18:
         c9:58:2d:c4:6a:eb:fb:45:4d:d7:1d:f9:bd:c6:d3:72:a9:67:
         e2:d3:11:e2:8e:b7:8a:f7:29:62:5a:01:f2:f6:9b:44:01:08:
         1a:3f:2f:00:7d:13:bd:50:1d:fb:21:b7:cd:e2:ac:81:e4:aa:
         b9:ab:69:cf:c5:55:c5:17:3f:02:80:87:58:74:bc:a8:b1:ce:
         48:9b:48:f3:d0:4c:0d:91:f3:50:09:f2:77:1e:a4:8c:d3:3e:
         6c:9c:f5:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENU/NUfIdXxG7RwfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkyNDE4NDkzMloXDTIzMTIyMzE5NDkzMlowLzEtMCsGA1UEAxMk
N2VmMDAwYzgtMWQ2Yy00NDk4LTlkYWQtYTgxMjNjZmQyM2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gr6gT4llWxKMyZwqgKysaFKyDREkRNNVZ3s
orPUK6XTkdP8VVimOjDHQuhcXrckjNm8F2oVoxw3Tgtq4q2NK9e9JF7iagOUJbU4
S6JFTh6gCNm1yEditsJGvnPgUWqRy4IZZw44+NdAsYWHcp3Wm2EvWUXx1L/RTZ/2
DO7wEbAXMiq5Rjj2Y5klmQ/f/Y64o6NWM7xd942dPtNKozGQB1qwrNe35prkXnGd
LKgCbXwASks3G6O67vAe6iTD7BcbEle+KVH+OiW7OEOV0XIULflBDC0zqfu5NTCm
zD5KK8Wjdh7SD9TuxyujMfXRgM0vr4ufElm7dK5o8U6tcu5peQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYY4wdtZ3ka5lFool5O7tRmqTJUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzg3YjEzMzAtNmJkNS0z
MmM1LWFmNmMtYTBhMTVkNjhkMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxowMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvQT3HO6Us86eftungGXNIp5RMYGLf5r0txt9f3aZaKM2HvNeN2Mqqb
3liOCBgjvnUHv5ZrvjpuMzUM27YlEiFYxejGi4L2K0NOIzmVW6adRUyIjd5JaCPz
BFVPRDB+ff9nsFP2A156DfMPtxvQ/N0pXDTPQQhaZgOdS7wZrJb9zYuVtGhz8FS3
pOzEaEGZD+nfgb9keGIyYFYu58DFEia0GMlYLcRq6/tFTdcd+b3G03KpZ+LTEeKO
t4r3KWJaAfL2m0QBCBo/LwB9E71QHfsht83irIHkqrmrac/FVcUXPwKAh1h0vKix
zkibSPPQTA2R81AJ8ncepIzTPmyc9fk=
-----END CERTIFICATE-----