Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38863774-7c08-356a-95c4-44e89e06c51a.roa
File:                     38863774-7c08-356a-95c4-44e89e06c51a.roa (raw, json)
Hash identifier:          Y+U8YD/2zXssfS/KIQJLjOnCCQMWvNpBMDN+1Yzv5zw=
Subject key identifier:   0F:98:75:49:F3:DB:62:7D:38:31:F1:08:48:37:0A:24:76:C6:C3:A7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584237E8924D68E1E58CF1FD3580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38863774-7c08-356a-95c4-44e89e06c51a.roa
Signing time:             Wed 14 Jun 2023 16:03:19 +0000
ROA not before:           Wed 14 Jun 2023 16:03:19 +0000
ROA not after:            Tue 12 Sep 2023 16:03:19 +0000
asID:                     834
IP address blocks:        23.26.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:37:e8:92:4d:68:e1:e5:8c:f1:fd:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 14 16:03:19 2023 GMT
            Not After : Sep 12 16:03:19 2023 GMT
        Subject: CN=88226b4c-f454-41d2-a141-10307d0b3ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:0e:38:ad:11:85:1c:09:f6:e4:3f:a7:9d:
                    f5:70:ce:7b:f4:1a:4c:e9:4d:da:50:37:61:3e:6c:
                    26:94:2d:af:5a:9f:59:1d:d6:69:28:ab:e5:76:c4:
                    97:be:e9:41:57:3d:fc:22:98:05:79:5b:21:2b:67:
                    1a:ee:40:a6:c9:2f:da:b2:bb:c8:b0:ce:c9:0e:cf:
                    51:a5:7d:d4:62:71:78:56:e1:e2:00:b4:df:e2:f4:
                    ce:69:ca:1e:89:0a:01:f0:27:7d:68:e8:da:04:c5:
                    e5:f0:31:e4:50:5a:8a:45:5a:b0:8f:a5:08:5d:3e:
                    e2:4b:c6:a8:ff:ce:85:f0:16:e8:1b:bb:c1:1f:0c:
                    59:bc:1c:9e:25:20:3b:46:ce:37:30:75:38:e8:5d:
                    18:7b:83:aa:10:ad:db:2f:c6:35:cd:92:10:d6:7b:
                    95:04:b4:66:e8:20:6a:54:20:0f:ef:82:a4:3a:30:
                    3e:02:0f:8c:75:34:bc:d1:4b:e9:04:65:48:f0:3f:
                    0d:0c:a2:7b:05:8f:60:8c:52:77:45:97:03:28:6d:
                    28:fb:93:6b:f8:8c:0f:57:6f:4c:8e:ca:ab:ba:f0:
                    24:af:4b:41:32:4c:4b:43:1f:42:85:10:3a:01:a9:
                    f4:2f:e6:b5:16:dd:2e:00:84:92:24:e2:79:fa:e5:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:75:49:F3:DB:62:7D:38:31:F1:08:48:37:0A:24:76:C6:C3:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38863774-7c08-356a-95c4-44e89e06c51a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c7:b7:58:d6:09:ca:2a:74:37:47:13:44:92:16:b3:bb:7d:
         ec:38:5c:3e:a6:86:69:fe:3f:16:f8:1f:24:0c:60:4d:f1:05:
         58:fc:72:db:f5:69:61:aa:90:f2:2a:89:c2:5e:af:ba:64:0c:
         e1:c5:88:fb:87:ca:fc:92:cb:03:8c:80:17:51:3c:44:53:a0:
         7c:ea:30:24:90:d6:83:8f:49:12:72:57:3e:48:e5:a7:df:26:
         2d:f3:6d:74:20:f0:fa:49:bc:0c:34:1c:56:62:04:95:cc:ba:
         1c:43:c4:f1:67:e5:68:ca:d6:56:83:8e:f4:b0:85:e0:24:0b:
         6e:74:1b:29:ed:cb:43:8c:4f:d4:97:72:c9:c0:2f:ed:32:c7:
         8c:21:fb:12:8d:80:03:6a:ab:ba:ee:f0:32:33:03:a9:4f:9e:
         bd:87:cd:fe:df:6f:d3:40:d5:f4:59:1f:10:f3:6b:d5:25:c9:
         f4:3b:f3:8a:43:d9:3f:0b:10:80:1c:02:68:e9:f9:63:e3:29:
         10:be:a4:8e:02:be:91:2d:70:e5:a5:a1:a7:09:0f:8a:55:4a:
         b0:85:94:e8:b9:4d:84:51:04:fd:1f:aa:54:95:38:68:b2:66:
         14:77:ff:53:52:be:69:d2:99:c4:2d:28:ce:93:60:88:92:b6:
         53:0d:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----