Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d33d588-a485-3537-b0ec-c736b7c9cd6e.roa
File:                     4d33d588-a485-3537-b0ec-c736b7c9cd6e.roa (raw, json)
Hash identifier:          IGDbrwUIjg344yKPL4X7ClbFnwZjfuGr3pI3MqBZ0gs=
Subject key identifier:   8C:5F:8B:9D:10:70:25:7E:7D:07:D5:DC:13:EF:7E:40:AE:C7:6A:62
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858437CCA7B81D088B889FE8A1200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d33d588-a485-3537-b0ec-c736b7c9cd6e.roa
Signing time:             Mon 09 Oct 2023 01:00:22 +0000
ROA not before:           Mon 09 Oct 2023 01:00:22 +0000
ROA not after:            Sun 07 Jan 2024 02:00:22 +0000
asID:                     211432
IP address blocks:        23.26.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7c:ca:7b:81:d0:88:b8:89:fe:8a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 01:00:22 2023 GMT
            Not After : Jan  7 02:00:22 2024 GMT
        Subject: CN=5d8516ff-7246-448d-af47-e599a38566f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:b9:96:4d:af:56:bf:72:fe:70:52:0e:1d:
                    0a:0a:d9:33:47:da:e9:01:6e:63:04:fa:1c:17:e3:
                    32:80:25:13:c7:d1:27:07:9d:21:a9:88:8a:71:93:
                    50:43:46:2d:13:37:98:75:7b:e3:d5:f0:45:2d:fd:
                    27:46:a0:20:11:7c:be:9b:2d:1d:8d:c0:cf:b4:5e:
                    0e:26:88:03:d9:ac:ec:c5:c6:ed:1a:19:22:51:75:
                    3d:a0:aa:c9:1a:ec:de:05:74:ea:14:f3:d5:47:b4:
                    38:49:fa:51:2c:a1:cd:8a:99:61:7d:3f:00:3f:3d:
                    42:83:b5:36:b2:0b:97:c6:95:c9:28:9a:1f:ef:49:
                    75:8d:2b:cd:11:df:b6:00:6a:9c:6d:d5:0a:d9:ec:
                    af:84:79:fe:c8:a2:cb:d9:21:02:00:07:d8:7f:78:
                    c2:f1:26:8d:80:a4:1c:04:85:85:e1:e5:37:69:d1:
                    1f:21:e0:a7:77:67:e1:f7:db:af:87:16:37:ea:8d:
                    ce:38:ee:f5:3e:44:01:21:da:cb:ff:36:0e:58:71:
                    38:6e:20:fe:f7:0b:97:44:a1:79:99:49:97:41:77:
                    5c:75:de:dd:24:0b:2f:7b:cc:9b:2c:af:db:b4:05:
                    ae:ac:a4:71:f6:1d:d2:f3:82:f5:81:7f:53:e2:f1:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5F:8B:9D:10:70:25:7E:7D:07:D5:DC:13:EF:7E:40:AE:C7:6A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d33d588-a485-3537-b0ec-c736b7c9cd6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:e5:df:fd:a7:34:da:6a:b0:06:bb:f1:cf:19:60:2d:4c:
         f6:ce:34:f9:6d:0b:c2:db:73:97:5a:b6:8c:ae:16:73:69:3b:
         0c:35:c0:7b:f4:26:fe:f4:6e:c0:7e:3d:c7:16:81:31:4e:c7:
         d5:c0:8b:ac:a0:a0:5e:31:51:af:41:5f:06:b8:a7:19:50:2c:
         34:22:23:c4:5c:1e:b5:b4:ee:e2:3b:47:e1:ab:8e:95:10:43:
         35:4e:b6:55:5d:3d:67:82:6f:6d:fd:61:9f:45:4e:e7:64:d3:
         ad:d8:ef:97:26:db:24:9c:44:3d:fa:ab:37:75:46:96:a3:98:
         7d:cc:e9:ce:9e:20:4b:21:75:87:6a:6c:60:b0:82:e4:7f:6e:
         70:3c:de:0e:80:0a:cd:b8:5a:a8:5d:f6:c0:a5:1e:cb:ba:b1:
         c9:8a:c5:f9:bc:43:53:e7:f8:c9:69:7b:0b:2d:50:bd:d6:51:
         0c:9a:43:a9:d4:8b:d5:4c:6f:cb:f9:28:7d:ed:1c:28:5f:ed:
         7c:13:11:be:fb:7e:1c:8a:92:ee:da:a2:af:8a:8b:b0:cf:51:
         7e:e0:f1:cd:d6:9a:f1:f9:bf:9b:aa:78:91:9e:26:fb:f9:49:
         ef:be:aa:33:5a:33:86:84:90:2b:e6:45:aa:c9:9a:c1:b6:97:
         8a:71:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 18:26:47 2023 by rpki-client on console-fra.rpki-client.org