Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ed52e92-641f-38ef-9894-298b2f6799dd.roa
File:                     3ed52e92-641f-38ef-9894-298b2f6799dd.roa (raw, json)
Hash identifier:          YoS9VRoxNjdkAJqcdcsVLMLLClKp7IktrjnyjQuzfUI=
Subject key identifier:   10:A8:CD:19:D9:0D:C6:E9:D8:8B:07:50:9A:82:61:61:BD:9D:FC:9B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F72B4A53FED4112106F5B0300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ed52e92-641f-38ef-9894-298b2f6799dd.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 05 Jan 2025 05:00:00 +0000
asID:                     210703
IP address blocks:        23.26.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:72:b4:a5:3f:ed:41:12:10:6f:5b:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jan  5 05:00:00 2025 GMT
        Subject: CN=edee61ba-b4bc-4456-8110-bccdbe03e728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:78:4f:61:95:80:56:68:c3:7c:82:25:f0:
                    49:66:c2:7a:93:0a:bf:28:a4:f6:92:b1:29:db:0f:
                    bd:0f:ec:07:82:2e:ba:46:9c:e6:fd:0d:3b:19:38:
                    3e:d2:16:de:95:c2:fa:fa:bd:00:a9:32:10:ca:32:
                    3f:cf:62:2b:cb:17:49:44:57:4a:2b:b7:e1:39:25:
                    e4:d3:f4:86:7e:3d:81:02:83:fc:a4:4a:4c:1b:09:
                    10:e4:07:de:52:bb:06:e0:ef:b8:3e:9e:97:d8:c9:
                    03:d6:2e:ab:69:3d:cf:10:a6:01:17:0c:f4:b0:df:
                    ff:ed:1c:13:bc:49:3b:86:94:12:c4:54:d4:0e:5c:
                    1e:d4:16:91:55:8d:cf:f8:7d:de:b4:85:1a:79:4f:
                    9f:68:ec:a2:ae:8b:83:1d:3b:7f:9d:a3:c9:65:d2:
                    98:98:4d:4c:c5:a4:93:90:04:b3:53:0b:4a:fa:d9:
                    94:cb:17:0f:a4:fd:1b:a2:f1:91:11:5f:6e:f5:ea:
                    06:07:4c:5d:cb:d0:0d:5a:2f:54:05:d7:58:40:08:
                    7c:38:81:0a:9a:64:24:31:60:ee:79:12:f6:8b:ab:
                    8b:25:db:6e:ad:45:cc:3c:bf:42:40:f8:27:a1:6b:
                    9c:b0:02:5a:92:62:83:2e:11:0c:b1:be:7b:c8:17:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A8:CD:19:D9:0D:C6:E9:D8:8B:07:50:9A:82:61:61:BD:9D:FC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ed52e92-641f-38ef-9894-298b2f6799dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a9:2b:ae:cd:46:1b:fb:b5:44:e3:ae:87:55:7d:00:06:2a:
         33:3b:5c:41:af:38:70:d9:52:f3:62:80:4c:17:78:54:b7:af:
         3d:4f:d7:8c:1f:6f:04:07:24:53:5b:e2:ed:a7:2a:e1:f4:18:
         19:60:c0:37:0f:3b:fd:ce:e7:2a:f9:58:54:93:21:86:f5:8b:
         9b:4e:d5:1d:5b:64:d3:69:4a:64:c0:fc:66:23:73:6e:92:49:
         57:59:4f:05:a2:ec:3f:95:8f:a5:29:26:53:28:74:ff:48:d7:
         90:6d:a9:7f:04:f6:30:8c:47:e6:69:7f:9e:31:25:53:67:41:
         8c:5a:32:a1:21:cd:c9:71:d7:f5:40:61:ce:8a:a9:90:99:70:
         12:ac:50:9f:a3:8a:57:4b:12:f6:5c:b6:23:05:b2:5a:fb:d6:
         2f:94:f0:b6:b8:74:62:56:bf:1e:76:c1:b5:bb:02:f0:7c:0b:
         44:9a:91:9d:86:cb:5f:e3:d8:29:8a:bf:d0:7a:d1:06:15:d6:
         92:57:c1:fa:b1:6b:4c:fd:8e:8b:0d:a3:01:d5:6b:46:ca:fe:
         03:5e:53:76:59:63:4b:bf:69:1a:b0:cd:09:b2:2c:8e:a0:47:
         d8:ac:5c:41:f7:5a:18:83:3a:f5:b6:ec:b5:3c:97:41:24:c1:
         0b:37:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----