Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ee6ee87-4163-3ebc-81f5-46548ab797f2.roa
File:                     4ee6ee87-4163-3ebc-81f5-46548ab797f2.roa (raw, json)
Hash identifier:          NFQu7mH3EkJTHlJ41pUs95Fc1BoRiaU2EwT3cYBbG6s=
Subject key identifier:   A7:E8:B9:85:B7:35:E1:D7:DD:11:1E:8C:BC:66:38:53:29:D8:5B:31
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842BAC3E875D2F4349DE57D7C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ee6ee87-4163-3ebc-81f5-46548ab797f2.roa
Signing time:             Mon 31 Jul 2023 13:00:18 +0000
ROA not before:           Mon 31 Jul 2023 13:00:18 +0000
ROA not after:            Sun 29 Oct 2023 13:00:18 +0000
asID:                     60781
IP address blocks:        23.26.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ba:c3:e8:75:d2:f4:34:9d:e5:7d:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 13:00:18 2023 GMT
            Not After : Oct 29 13:00:18 2023 GMT
        Subject: CN=fa453277-11be-4f52-b820-1579ef51aaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:08:ca:48:f8:11:cd:2c:94:b9:66:33:74:
                    7e:99:6d:eb:89:8f:c4:4e:c2:5d:09:ae:c3:72:42:
                    d9:77:44:9c:84:9a:bb:4d:49:4d:62:cc:0f:d7:b0:
                    2a:0d:01:8c:fb:5a:ff:8d:06:f4:0b:f5:8a:d8:3b:
                    7a:70:ad:61:0c:9b:ea:64:ba:5f:38:d0:1f:91:27:
                    d5:84:5a:2c:e0:32:6c:a9:b5:04:ff:9a:ad:03:52:
                    18:02:5c:26:3f:17:5d:3d:94:0a:80:59:5d:69:4b:
                    20:f0:40:09:09:43:c6:ff:4a:8e:dc:13:bc:f1:81:
                    33:91:e9:6b:94:f4:75:c1:d9:58:6a:22:e2:a6:e0:
                    01:7c:bb:36:cd:7c:63:89:06:cb:64:df:77:e4:ca:
                    f6:ca:42:29:18:5e:c2:c9:21:d5:ff:4c:61:b9:fd:
                    2f:ad:f0:8d:86:a4:ce:d6:3a:f3:e0:1f:b7:61:96:
                    3a:5a:af:4e:9e:f8:95:39:81:3e:62:05:22:59:96:
                    81:6d:81:f6:29:9b:e3:e2:6c:48:27:10:ec:67:d4:
                    9e:5d:5d:2b:64:a2:a8:02:36:46:87:fa:b1:41:4f:
                    4a:80:02:0d:cf:a0:82:d2:c6:ae:df:12:f8:91:4a:
                    aa:eb:f3:09:87:26:47:88:e4:3b:3e:0e:f3:40:35:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E8:B9:85:B7:35:E1:D7:DD:11:1E:8C:BC:66:38:53:29:D8:5B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ee6ee87-4163-3ebc-81f5-46548ab797f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:32:20:86:27:85:d1:6c:ab:8a:18:a8:cd:c5:1d:59:89:e1:
         d3:d6:44:ba:96:1b:98:00:4e:85:d9:c1:0d:42:34:de:b3:fb:
         f1:7f:2d:57:41:6b:10:03:bc:bd:ee:66:71:04:65:82:1d:28:
         03:00:5e:43:25:2a:4c:67:f5:61:0f:2f:9b:0c:b6:db:e7:be:
         ca:b6:31:49:e7:33:b0:df:b6:03:5e:59:f9:0c:b6:8d:fc:f2:
         34:70:ae:94:39:46:81:8f:67:81:cb:f9:1d:94:0f:d2:66:b6:
         84:7d:b8:3f:85:f2:31:b2:b7:bf:f9:18:33:4b:fb:17:4a:5c:
         91:19:06:e2:bc:7c:ea:13:89:6a:d2:06:1d:a8:1e:15:d0:93:
         f5:aa:1c:eb:05:7a:3b:37:56:41:d9:94:aa:e9:06:f5:08:ca:
         2b:8b:c5:8b:e3:96:7e:59:4f:e6:42:90:06:9f:59:be:d2:b1:
         d7:1f:64:c9:76:83:d0:ba:72:c4:e8:5a:19:87:0d:22:a8:23:
         e6:af:1f:2e:07:71:29:4f:4d:d3:7e:5c:0b:8f:92:6e:6a:c5:
         9f:66:ad:55:9f:b6:aa:c5:87:81:7f:cf:6d:33:98:5a:b6:a3:
         d3:3a:fa:5d:5c:0e:33:0d:1f:14:99:70:22:12:f7:38:81:c7:
         13:fb:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----