Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3928a39c-fc65-3e8d-b115-a0d24fb31568.roa
File:                     3928a39c-fc65-3e8d-b115-a0d24fb31568.roa (raw, json)
Hash identifier:          1tM6MrHBQ8cxvPxqgiGrzswos5RqtsxZKHJm35vMgd0=
Subject key identifier:   F9:93:FB:D4:5D:91:F8:5F:F7:F4:62:30:5A:B4:90:7B:1A:64:92:AB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584230EB82804FEAD990CDD8A000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3928a39c-fc65-3e8d-b115-a0d24fb31568.roa
Signing time:             Mon 12 Jun 2023 03:58:35 +0000
ROA not before:           Mon 12 Jun 2023 03:58:35 +0000
ROA not after:            Sun 10 Sep 2023 03:58:35 +0000
asID:                     834
IP address blocks:        23.26.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:30:eb:82:80:4f:ea:d9:90:cd:d8:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 12 03:58:35 2023 GMT
            Not After : Sep 10 03:58:35 2023 GMT
        Subject: CN=b4912551-c7fb-40e7-a51b-426f55699cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:5f:2c:e1:ca:cb:30:8b:2b:8b:37:09:82:
                    9a:20:30:e9:df:f8:1a:15:fd:87:83:dd:48:a1:bb:
                    32:66:ba:10:f7:0e:a6:cf:ac:bb:3a:d2:55:d4:1c:
                    9c:bb:80:1a:b4:86:2c:f6:4c:79:de:77:8f:6f:98:
                    28:1c:07:92:6a:9c:78:38:c9:2e:dc:83:4c:47:46:
                    70:3c:db:16:7b:f0:2f:d1:43:bb:ed:1c:64:37:a7:
                    07:16:d1:ea:29:71:3b:71:8a:90:26:5c:67:7f:8a:
                    61:a0:8d:47:f0:5e:c6:fe:40:19:db:e0:db:36:da:
                    d7:e1:3e:ee:69:a5:c4:82:fe:fe:31:1c:8e:66:61:
                    51:35:90:ce:ff:5b:65:b9:d1:08:49:6a:90:a5:53:
                    01:39:cb:11:5f:00:3f:fd:96:32:82:3a:37:b8:f3:
                    15:00:69:5d:4a:4a:58:aa:e1:79:a1:86:07:04:d5:
                    49:75:4e:07:55:ad:67:95:c2:62:87:2c:88:79:33:
                    b2:d2:fd:ca:a0:ca:5a:11:00:80:94:97:18:86:df:
                    c3:71:3c:60:c5:4c:c0:c1:68:8a:c6:28:87:18:bc:
                    36:d5:d4:62:d8:ee:a2:a2:37:f4:f4:ec:2d:ba:a6:
                    38:14:8e:11:e4:8d:41:86:b8:7f:b6:70:65:23:62:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:93:FB:D4:5D:91:F8:5F:F7:F4:62:30:5A:B4:90:7B:1A:64:92:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3928a39c-fc65-3e8d-b115-a0d24fb31568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:83:03:99:05:7f:fe:38:e4:9d:b2:75:27:62:7e:0f:1f:
         f2:32:0c:1d:b5:b4:aa:2d:96:06:ba:68:08:30:e3:b1:9b:54:
         01:63:e9:43:73:6e:ee:fa:80:60:e2:22:62:18:f6:0a:9a:49:
         1c:2f:66:79:f1:89:f7:e7:48:47:ed:1f:ea:d8:05:f3:e8:d1:
         fa:a4:eb:3c:9f:5b:81:86:53:43:7c:ca:0c:cb:bf:cc:44:3e:
         36:6a:02:78:2b:e4:6f:9c:fc:48:40:67:af:17:f7:cb:ea:c7:
         96:86:2f:79:09:0e:00:04:6f:85:38:64:a3:d6:dc:75:a5:b0:
         51:ef:82:21:f0:71:14:e4:9d:ac:d6:1d:92:3d:32:81:d5:d8:
         b8:83:5d:ea:e3:72:f9:88:da:3c:eb:be:45:8a:3e:37:9b:33:
         d2:84:88:41:02:68:12:be:ff:70:92:05:84:4b:34:70:8d:2d:
         32:f7:5d:82:aa:65:9a:53:d0:c1:e8:09:39:61:bc:92:9b:f9:
         e3:47:0d:62:e8:0a:ce:17:61:a2:e8:b6:9f:0b:ad:66:f2:29:
         b0:57:1b:71:9e:31:8a:59:d5:a7:f4:45:5e:aa:c3:ae:9e:19:
         c3:ad:19:80:e2:e4:ee:b7:23:b6:b5:db:32:f6:c4:0c:88:48:
         42:6d:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:25 2023 by rpki-client on console-fra.rpki-client.org