Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/403e74a0-297c-36f5-9fb5-81ce4405f03f.roa
File:                     403e74a0-297c-36f5-9fb5-81ce4405f03f.roa (raw, json)
Hash identifier:          WyhW6ylIhFGrG6jWVJjbwKEmMg2QGAuAt+Fyuys221o=
Subject key identifier:   26:DD:FA:1E:35:2B:15:EB:B5:27:34:0E:4E:FA:93:13:62:4C:58:45
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E44F9002A15DD88EDA617500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/403e74a0-297c-36f5-9fb5-81ce4405f03f.roa
Signing time:             Mon 15 May 2023 17:22:56 +0000
ROA not before:           Mon 15 May 2023 17:22:56 +0000
ROA not after:            Sun 13 Aug 2023 17:22:56 +0000
asID:                     35409
IP address blocks:        23.26.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:4f:90:02:a1:5d:d8:8e:da:61:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:22:56 2023 GMT
            Not After : Aug 13 17:22:56 2023 GMT
        Subject: CN=57b7d627-5e45-4286-9b1f-7d2a8cb9af37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:bf:49:ff:b3:3c:52:8c:03:52:70:9e:45:
                    08:34:37:f2:a6:f6:ca:44:23:2d:7e:cc:76:ed:a3:
                    a5:2d:e0:45:89:4f:fe:9f:09:2a:c4:6b:06:d1:0d:
                    8d:fa:b8:7b:5b:1b:04:46:1a:44:f5:4a:e8:5b:cf:
                    65:90:6c:7e:8b:58:dd:f0:db:6b:1a:7d:62:83:57:
                    21:c2:5b:33:9f:7c:9a:01:17:4f:93:35:e9:a2:9e:
                    19:c1:ab:25:87:37:ea:8d:cd:ec:0b:9e:f4:aa:2c:
                    9f:9c:a7:50:fc:52:ad:ed:dc:20:d9:6f:49:5f:00:
                    81:f7:0d:d4:6a:38:88:02:cb:ef:ec:65:f2:86:40:
                    9a:33:a4:0f:3d:04:ed:1f:43:9f:7e:ba:3b:3d:c9:
                    7b:d8:0a:eb:c9:8c:1a:4b:a8:c9:17:b7:a9:08:5e:
                    5f:ed:cb:6d:f8:3b:74:5d:fc:d8:c2:dc:4a:46:68:
                    f9:9f:ac:1c:45:6b:6e:70:28:03:17:77:cc:ec:6a:
                    4b:fc:3a:f7:8d:9a:aa:48:c3:19:c5:4f:e3:bf:04:
                    64:e2:67:6c:be:ec:9b:54:a2:0e:6b:ae:fc:f3:ce:
                    4e:76:e8:35:27:16:b2:eb:15:9a:a8:54:c6:be:33:
                    c3:ad:19:f3:92:16:8c:d3:ec:ec:41:76:ac:22:76:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:FA:1E:35:2B:15:EB:B5:27:34:0E:4E:FA:93:13:62:4C:58:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/403e74a0-297c-36f5-9fb5-81ce4405f03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:01:b3:2f:3e:ac:ff:8f:b7:18:ff:da:0c:af:7f:30:c0:a9:
         fc:8f:c2:90:d5:11:1b:df:57:b4:ab:6e:9f:3a:28:c4:b1:4c:
         12:cb:cd:36:30:bf:5c:fa:54:7e:d5:04:62:ae:f1:62:ae:15:
         82:76:5c:4b:26:bc:71:82:25:ad:81:f3:05:68:cc:67:7e:b7:
         70:f2:87:7c:a3:60:51:7b:95:f0:4b:52:21:56:55:16:b4:8e:
         8c:d3:82:c5:94:69:4d:24:90:ba:c3:d2:82:e1:a5:48:b7:79:
         4b:ea:ce:0c:18:e3:a1:64:22:7c:f9:5d:eb:9d:4f:d9:3e:bc:
         e7:04:18:c0:60:1a:f2:a1:7c:00:54:ae:f0:48:e0:77:9e:5d:
         15:ca:06:2b:af:43:cb:45:cc:49:1c:f1:3c:fc:de:49:c8:10:
         c1:2f:8e:33:bf:ed:90:45:ca:1a:40:51:00:dc:87:f4:8a:f3:
         e2:43:47:fe:33:fb:6f:ee:d4:94:83:dd:f4:82:bf:1f:b2:57:
         82:08:d6:de:66:fc:13:72:4a:0b:08:12:b3:92:ca:84:87:1c:
         33:49:5f:13:38:1d:2c:72:2f:ac:e8:8c:fe:47:cf:29:16:70:
         0d:e2:ae:94:15:79:62:db:50:c7:41:9c:27:99:de:07:4c:1a:
         a1:77:28:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----