Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3fc9966b-ba14-325d-a7e6-abe432f0e0d1.roa
File:                     3fc9966b-ba14-325d-a7e6-abe432f0e0d1.roa (raw, json)
Hash identifier:          Z+UZnFn35S6Zyn9S7hlPqIcTIMtawpVitef3uT/3YEE=
Subject key identifier:   98:64:4F:36:B7:6F:00:E4:86:D7:6F:91:D7:38:22:89:B6:A7:D6:89
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841BD2128041101E554ECBC69C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3fc9966b-ba14-325d-a7e6-abe432f0e0d1.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 03 Aug 2025 04:00:00 +0000
asID:                     834
IP address blocks:        23.26.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bd:21:28:04:11:01:e5:54:ec:bc:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Aug  3 04:00:00 2025 GMT
        Subject: CN=f222d4cf-0c58-44ba-83be-eb1d2b6fc606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:87:16:de:a1:d5:d0:5d:44:4c:d7:2f:d1:66:
                    f9:ce:c7:b8:ce:bd:d2:e7:18:15:19:6f:25:95:54:
                    6a:68:06:61:c1:52:58:31:d0:8c:c3:1c:8a:1c:3e:
                    66:11:02:d3:9f:68:26:af:b1:5d:74:2f:3b:bc:59:
                    ca:51:e7:90:e6:f6:55:ab:0b:7c:b7:c7:f3:ff:1f:
                    45:7b:c4:4e:99:ef:d9:93:9e:42:c9:52:76:dc:57:
                    d6:2c:bc:ad:08:aa:66:6a:8b:5f:93:5a:f9:f2:b5:
                    29:89:f9:04:b6:64:19:4e:83:e8:ec:d2:b2:20:bd:
                    84:cb:b6:73:7f:ef:28:f2:f9:e3:e5:6c:5b:b1:71:
                    b5:74:05:e4:ec:6f:96:20:5e:d0:01:6d:da:6b:e3:
                    d4:21:ba:84:43:32:1c:9c:36:ab:f8:5e:48:d1:26:
                    c3:e7:7c:c1:d8:5b:05:2f:54:29:af:e7:16:cc:d5:
                    2b:39:ad:aa:51:98:5e:92:d5:b7:17:43:ae:2e:a0:
                    f5:00:6b:3e:57:46:4a:93:fe:0b:92:70:e7:44:5f:
                    0a:3e:20:54:f5:00:96:be:3f:4b:c2:35:10:02:62:
                    8f:f3:26:2b:cc:e8:3f:a3:a3:5f:74:24:9f:55:55:
                    ea:6f:bf:17:18:25:fa:db:12:58:57:3a:5c:38:34:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:64:4F:36:B7:6F:00:E4:86:D7:6F:91:D7:38:22:89:B6:A7:D6:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3fc9966b-ba14-325d-a7e6-abe432f0e0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:13:ed:ce:22:ef:2c:7b:1e:3d:76:44:50:ed:d9:19:ee:
         3f:ee:f2:89:eb:5b:e0:08:a6:fa:eb:b8:00:11:42:1e:87:f5:
         f9:04:e8:1d:dd:85:11:92:8f:a5:13:f4:f5:b7:c2:58:bb:da:
         88:5f:7b:6d:0f:bd:89:46:3f:55:6e:d8:e5:73:64:40:64:78:
         9d:8c:c1:68:c7:94:2c:0f:e9:92:74:4c:d5:c0:d3:70:bc:80:
         de:e1:fd:f3:88:72:5a:b2:bc:79:ee:1c:61:b9:d8:65:64:1d:
         e4:c5:6f:9d:5b:36:ff:0f:c3:dc:91:1e:9d:7c:ca:a3:a3:1d:
         92:db:68:e0:24:c2:80:3c:5c:c3:ef:1c:26:4b:fe:50:40:97:
         1b:13:d9:1e:80:55:da:a6:69:e3:de:b9:ca:9d:fa:cb:12:07:
         a2:6c:bd:fd:83:1c:d7:7a:a8:b2:9c:96:a1:8a:57:c8:bc:a6:
         6f:ff:93:24:47:8c:00:1f:aa:bc:d8:87:22:cc:d5:7b:7e:11:
         0b:10:b9:55:a1:cb:11:f0:84:ad:14:db:a7:ad:77:28:2d:2e:
         8d:6b:a1:35:ba:51:2e:f5:a9:a1:47:87:89:4b:0a:e4:26:f7:
         3d:1c:38:4a:61:c9:82:d7:25:b3:83:da:e2:99:4c:ce:1b:7f:
         c0:1a:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----