Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4539ece0-0426-3d0d-8b94-62535466eb94.roa
File:                     4539ece0-0426-3d0d-8b94-62535466eb94.roa (raw, json)
Hash identifier:          j7TzqNrRmUAphLJOuZUZcDob4RPZBCBgSpVyEkYbC0g=
Subject key identifier:   D7:A5:B2:2B:40:63:29:AE:A0:64:5F:8C:41:FD:03:0F:F7:A2:7A:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840523C926AECA3F9D3F59F7380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4539ece0-0426-3d0d-8b94-62535466eb94.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 26 Mar 2025 04:00:00 +0000
asID:                     60721
IP address blocks:        23.26.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:52:3c:92:6a:ec:a3:f9:d3:f5:9f:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Mar 26 04:00:00 2025 GMT
        Subject: CN=1227bed8-c6f1-42d2-9662-2915b074e22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:a0:6b:d6:a7:39:53:35:83:e2:fe:71:5d:
                    cb:30:ff:a6:df:ff:80:12:32:f4:45:52:4a:c7:6b:
                    06:81:f8:c9:f0:5a:6c:c6:0f:90:8a:7c:10:f9:90:
                    6f:d9:91:0f:46:24:03:60:fb:bc:1f:4c:b6:31:52:
                    ea:f8:7c:46:7f:ed:e9:56:3b:3e:ae:d5:97:5f:47:
                    76:3b:7b:b5:1e:a8:76:79:20:b9:c4:c7:bd:0c:c9:
                    71:a3:2b:81:95:66:14:26:ca:dd:4e:37:e9:8e:51:
                    f9:21:25:6e:ee:ec:45:83:df:2c:78:d9:9a:1d:78:
                    65:20:e7:ad:35:41:8d:c0:33:ff:71:d9:b4:79:e0:
                    83:86:d4:d1:17:3d:2a:19:51:21:5e:3e:9c:7d:cf:
                    a0:99:15:a0:67:27:e4:00:05:fe:a3:e2:01:d0:5d:
                    9c:96:a6:a0:84:a9:c3:30:63:d9:28:7b:57:4c:b1:
                    c3:ce:d0:0c:e7:e0:32:81:bb:49:b8:7e:c7:88:0a:
                    18:41:a8:6f:07:ef:3b:88:00:8d:89:77:f0:dd:12:
                    57:58:55:63:d1:f4:60:dc:b3:94:0e:7d:96:cd:04:
                    7d:b5:8f:d6:e2:4b:9b:dd:99:76:fe:51:00:0e:aa:
                    45:09:5a:60:8b:1f:bd:7d:15:f2:36:e1:a1:70:7b:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:B2:2B:40:63:29:AE:A0:64:5F:8C:41:FD:03:0F:F7:A2:7A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4539ece0-0426-3d0d-8b94-62535466eb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:63:f5:a4:ee:23:d7:87:36:b8:9e:8b:e7:41:bd:9c:65:87:
         9e:17:b4:2a:7a:23:38:fc:0a:7f:e8:3c:5c:4b:22:32:5a:f5:
         3a:58:fc:aa:54:2c:18:bb:9d:18:e6:6b:ff:4f:c5:49:7d:10:
         b1:c2:f0:b7:1f:a4:ba:ba:00:db:b9:58:21:b3:df:d7:4c:70:
         00:db:39:c9:94:cc:bb:70:35:bf:5e:52:bc:e9:91:d4:bf:df:
         9d:6d:db:e5:dc:61:8c:fc:65:70:db:40:04:b4:99:da:ba:62:
         4d:8a:1b:c6:60:70:ab:c5:aa:e5:a5:39:59:f8:af:69:e5:e5:
         4c:20:db:ac:1a:99:80:c2:a8:22:03:43:67:15:7d:75:77:60:
         de:a7:53:32:a7:13:27:ff:bc:85:53:85:13:53:3f:a0:7f:f3:
         7b:64:dc:18:3e:a6:66:42:79:e0:50:6f:d6:4a:a8:10:2a:cb:
         52:0b:0f:e6:b0:9a:b5:9d:7b:ae:0e:de:ca:33:56:7d:f5:45:
         ea:44:06:22:26:25:8a:e5:ff:34:f4:42:89:21:eb:f3:0e:87:
         e2:c2:2d:4d:3f:aa:1b:b2:eb:55:06:77:a7:3a:e9:1c:f4:4f:
         d4:02:fc:03:b7:58:e7:40:78:f9:53:3a:dd:5e:3f:20:ed:6a:
         3d:b7:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----