Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/599a9868-09c9-3e3a-bb7f-c89e771fda36.roa
File:                     599a9868-09c9-3e3a-bb7f-c89e771fda36.roa (raw, json)
Hash identifier:          CTwcWLVWwWrziyEr31/j8+Tmfrgw2pau3VaB7ZHd+E8=
Subject key identifier:   28:7D:89:91:1D:DE:0B:91:A2:45:63:2B:DF:81:F3:30:DF:93:BD:5A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840E50735FE9F84FB1DD2AD3140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/599a9868-09c9-3e3a-bb7f-c89e771fda36.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 17 May 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        23.26.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e5:07:35:fe:9f:84:fb:1d:d2:ad:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : May 17 04:00:00 2025 GMT
        Subject: CN=d25729d1-956a-4d3c-8dab-87b01ef6a0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:bc:32:eb:7e:ce:ba:a1:91:92:c2:2b:a0:
                    e8:eb:da:91:e0:b5:53:53:5b:76:19:e2:20:91:db:
                    d4:00:9e:0f:84:e6:3d:5b:04:00:a5:6c:be:02:7a:
                    1e:0d:4a:30:83:66:d6:b8:c9:f5:c1:c5:99:ba:94:
                    7c:9b:a9:f0:cb:4b:df:07:da:5e:41:af:09:d6:0f:
                    c9:58:05:66:2f:b2:b8:ba:fb:0b:dd:58:7c:83:74:
                    5f:43:ca:a0:55:7b:a7:01:2a:13:ea:e4:88:44:83:
                    c8:7f:e1:f8:d8:6d:ab:1e:ee:08:09:c4:55:5f:cc:
                    e8:9f:53:05:9d:89:50:cc:e0:d6:8b:fe:7c:e4:82:
                    fe:e5:40:02:cc:6f:8d:a1:0c:87:4a:4f:55:c0:1f:
                    c7:55:79:2f:6d:8a:6b:df:fe:a2:ad:7b:45:2d:58:
                    1d:59:c1:a6:4c:de:01:71:68:b1:0c:44:8e:f6:72:
                    5d:7e:44:67:a2:aa:14:d7:c3:a1:23:ae:b4:e7:75:
                    16:4e:88:30:94:27:ac:e4:33:d5:30:9c:eb:9e:cb:
                    57:cf:a2:23:94:af:86:9c:b0:22:e0:01:87:7e:fe:
                    07:1e:44:31:06:fc:f9:fc:a6:73:5c:3c:33:8f:45:
                    26:d1:2e:e2:e8:58:08:11:3a:08:a3:e3:f4:9a:b8:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7D:89:91:1D:DE:0B:91:A2:45:63:2B:DF:81:F3:30:DF:93:BD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/599a9868-09c9-3e3a-bb7f-c89e771fda36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:54:6d:27:e0:5d:29:48:9c:14:8d:b3:a9:6e:10:73:52:23:
         7e:82:86:1a:d6:d1:5e:f6:81:f5:83:c6:f5:a7:cc:09:6a:f4:
         0e:d0:f8:e8:2e:5f:a0:06:5c:6c:7b:15:08:73:83:18:ab:50:
         ff:7b:fe:c0:4e:6d:f5:29:1b:22:92:84:23:33:e1:d0:a6:0a:
         a4:f2:a1:07:0d:5c:49:57:80:a4:4e:f4:4b:41:e4:af:0f:1d:
         da:ab:b1:46:bc:01:b5:e2:e5:36:af:d0:2d:29:f3:fb:8c:64:
         70:14:bc:65:fc:15:3b:27:06:ec:00:7e:30:b9:4f:e6:e9:be:
         fd:c4:5b:aa:9a:03:21:32:91:13:66:2f:bc:c7:19:67:1d:31:
         f4:1b:b1:06:c7:f2:05:a2:9c:cb:ee:b3:5f:cf:50:47:da:9b:
         e1:c0:a2:95:12:2d:93:f2:47:7f:4b:9a:a4:36:31:dd:1d:09:
         45:fb:16:e6:0a:39:2a:c8:eb:d8:b4:0a:48:98:91:25:a6:d5:
         13:8f:66:63:69:0c:a0:9a:33:52:70:0e:fc:ad:40:8a:aa:95:
         ae:91:ad:a1:d1:3a:ac:a8:e1:2f:38:85:66:42:3b:e9:78:56:
         12:84:50:63:c0:e0:15:54:a6:1a:52:11:03:c5:ce:33:6a:f9:
         f7:1a:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----