Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b7dddf4-c674-3c6f-9879-5414f4833262.roa
File:                     3b7dddf4-c674-3c6f-9879-5414f4833262.roa (raw, json)
Hash identifier:          mBzigw/MxRc6yHD8NscohuRvxbuLP50L5bj/7I+8BEY=
Subject key identifier:   B6:F4:C4:50:59:0D:0D:CC:69:F9:42:8C:F8:AB:62:2D:C7:B9:EC:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858431F9D6F677BDE786F19766980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b7dddf4-c674-3c6f-9879-5414f4833262.roa
Signing time:             Tue 05 Sep 2023 15:59:28 +0000
ROA not before:           Tue 05 Sep 2023 15:59:28 +0000
ROA not after:            Mon 04 Dec 2023 16:59:28 +0000
asID:                     30644
IP address blocks:        23.26.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1f:9d:6f:67:7b:de:78:6f:19:76:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 15:59:28 2023 GMT
            Not After : Dec  4 16:59:28 2023 GMT
        Subject: CN=379e6471-57e5-42a3-851a-cc7807cc9aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:78:b9:ad:16:72:95:a3:f5:af:22:4f:00:
                    35:95:1a:bc:2a:ee:41:be:a5:2d:50:32:1f:09:17:
                    4e:1b:3a:ce:5b:52:d9:1f:76:32:c0:96:43:7c:eb:
                    9c:fb:e2:6d:73:19:e4:10:24:92:f3:dc:78:98:b2:
                    00:07:c3:05:2d:7d:2d:16:61:c0:80:69:52:0c:e1:
                    ce:f7:52:f1:e9:c4:f9:6c:97:2e:82:69:c3:56:42:
                    e4:90:38:0e:7e:6c:2d:d2:e5:05:2b:55:fb:b6:15:
                    a0:98:6d:c2:3b:7e:83:c1:21:4e:4a:3f:4d:b2:9d:
                    1c:5e:04:97:aa:92:23:ac:f7:0c:f0:7e:e0:2b:51:
                    d5:0c:7b:b1:78:77:a7:4c:61:11:be:71:a7:9e:63:
                    d3:c4:59:72:da:7d:c6:92:fb:36:1e:38:90:e2:28:
                    2c:8c:0b:c8:a4:90:17:f2:73:9f:c7:67:4e:98:3c:
                    05:24:19:e7:5a:af:99:10:ff:97:6c:c2:d3:0d:c8:
                    73:a8:aa:cd:cf:ea:25:a4:06:c7:de:29:7e:65:35:
                    33:50:fb:35:a1:26:68:83:d5:52:1a:cf:a9:ea:9a:
                    49:d5:d8:cb:65:16:34:2b:05:64:63:4e:44:85:60:
                    cc:04:f8:0b:2e:83:8d:9c:71:df:2e:a3:e2:b7:7c:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:C4:50:59:0D:0D:CC:69:F9:42:8C:F8:AB:62:2D:C7:B9:EC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b7dddf4-c674-3c6f-9879-5414f4833262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:40:05:7b:97:d6:e6:36:c1:6f:11:7e:f1:9e:51:ee:c3:da:
         d8:67:f3:7a:a0:6d:c4:70:28:d9:98:bb:f5:4f:e1:df:69:22:
         6c:c1:6b:4d:cc:2a:54:a1:65:5a:ab:c5:65:2d:2b:3d:70:49:
         d2:07:9e:f5:bc:cb:25:ef:ca:be:cd:32:4a:51:f1:e7:04:5c:
         16:5c:f7:29:68:83:eb:a5:27:84:53:fd:73:46:8f:21:5f:f0:
         9a:b8:70:cf:93:b7:92:48:75:bc:5b:4f:f7:45:7a:05:ec:01:
         89:d7:ac:a5:b7:58:01:95:e9:7d:55:c7:54:1d:b3:df:3d:09:
         c2:72:eb:b3:f6:b8:c5:de:d7:74:78:09:f3:aa:79:71:80:21:
         45:d7:42:14:51:ba:59:e1:81:41:7a:b2:5a:43:1d:0d:78:cb:
         05:65:76:c8:b0:67:f4:af:d8:ee:c8:0a:1d:ee:9a:db:ff:ff:
         55:02:16:bb:25:b6:41:71:8b:b7:82:cf:98:d0:57:f8:30:11:
         1b:67:77:8f:74:d8:8f:14:17:f3:07:fd:52:3c:61:32:ac:b4:
         51:32:32:2b:74:e1:a9:d0:30:c1:51:68:50:4e:11:0d:46:75:
         9c:6b:6d:a7:0b:fa:47:dc:0c:11:ed:2f:f8:95:93:48:ea:04:
         21:8a:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----