Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/56a9f6bb-c47a-308b-8d6a-1619d21cd48e.roa
File:                     56a9f6bb-c47a-308b-8d6a-1619d21cd48e.roa (raw, json)
Hash identifier:          lCRvx71HHOdMzBopSCqLp9q5vevOEDeIOMGjgwi/oZU=
Subject key identifier:   3D:0F:14:27:BE:F6:37:C7:99:18:2B:64:B1:E6:3A:C4:63:66:EB:50
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F06700A74A34BFC6ECB0B0BE8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/56a9f6bb-c47a-308b-8d6a-1619d21cd48e.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 27 Nov 2024 05:00:00 +0000
asID:                     210439
IP address blocks:        23.26.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:06:70:0a:74:a3:4b:fc:6e:cb:0b:0b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Nov 27 05:00:00 2024 GMT
        Subject: CN=6d3607f3-b1ac-4518-b2e7-eeb41672bc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:be:1e:0c:48:f6:51:4c:47:d5:d3:9d:2b:
                    a0:eb:83:cd:6b:36:fd:9f:c4:42:61:4c:f7:10:c7:
                    51:f5:f2:41:26:67:12:10:38:66:ea:3a:89:cd:fe:
                    85:54:47:4b:5f:4a:25:09:77:b9:64:7f:78:ee:88:
                    ed:9e:81:eb:8f:7f:1c:2d:98:f8:a4:0b:10:1f:25:
                    33:ce:78:23:b0:94:e9:4c:55:82:47:fc:bb:f6:df:
                    13:60:ee:42:24:31:3c:56:3a:ee:89:57:4b:1f:30:
                    3c:32:57:7c:cf:65:5e:bf:74:fe:e7:92:6c:02:94:
                    40:30:07:e8:54:98:b9:8f:ec:7e:2a:3c:56:52:5b:
                    2c:d6:b0:72:72:fa:0f:ad:66:1c:2b:9c:63:4c:55:
                    b4:36:e2:f6:46:c2:32:57:89:dd:f7:6d:fe:0d:5d:
                    f2:0b:5d:68:bb:d9:01:b8:77:59:64:a2:34:b3:9d:
                    7f:51:35:0a:03:4e:4f:7e:d7:90:e8:30:75:c3:72:
                    70:6f:e2:e2:7a:8e:18:8d:fc:87:ca:1a:fe:49:9b:
                    26:0f:f3:c2:d8:0c:7c:19:ec:c8:68:df:2f:7a:d4:
                    d3:c3:49:25:30:ee:55:a3:df:77:9e:fb:29:39:1a:
                    3a:c8:86:25:f3:f3:22:f6:b6:a1:7b:66:f6:01:66:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0F:14:27:BE:F6:37:C7:99:18:2B:64:B1:E6:3A:C4:63:66:EB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/56a9f6bb-c47a-308b-8d6a-1619d21cd48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:21:56:8d:5d:f8:40:35:db:97:15:af:d9:4f:2e:38:d5:cb:
         e7:22:f0:28:d7:f9:c7:93:f6:3d:3a:df:a4:2b:bd:cf:94:27:
         60:8a:fe:22:87:61:7e:f2:f7:7f:f2:78:31:f6:b2:9a:92:f9:
         bd:09:d9:45:40:b7:63:8c:bc:0c:d2:3a:f2:68:6e:95:f7:40:
         6d:40:73:6e:51:35:03:15:a3:93:b0:7a:dc:bc:4f:ce:8b:c8:
         20:e6:03:80:88:f5:57:05:d6:43:77:96:b9:48:cc:f8:64:a9:
         4b:73:aa:f6:82:30:60:36:78:54:d4:a4:a2:fd:83:82:36:6b:
         55:b4:28:e8:ec:22:4a:47:97:62:46:6b:8d:3b:07:78:0d:15:
         5b:e4:08:e5:14:ce:af:db:2d:73:10:f0:5a:82:22:63:d1:2b:
         73:4a:c5:79:82:6e:62:0a:16:ad:b9:c8:da:b7:39:6f:fb:7f:
         d0:02:d6:d5:6b:ef:e0:49:5b:b0:db:4b:0c:a3:f8:19:45:29:
         73:8f:05:0e:61:ee:54:2f:52:ba:b1:b4:96:93:8d:55:df:ea:
         41:6e:92:52:d4:81:7d:4a:c6:a3:ff:ec:67:be:a9:fc:65:6b:
         11:a0:b5:c5:55:98:21:d8:05:6b:ee:ab:bd:79:58:96:5d:d8:
         6e:bf:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----