Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f721ecc-24a0-3d52-9808-ac939c11315f.roa
File:                     6f721ecc-24a0-3d52-9808-ac939c11315f.roa (raw, json)
Hash identifier:          MRhU1zuF0q1K181Gpy9MF+cNIbGSU/zBSlcPHzvr4tc=
Subject key identifier:   3D:AE:AB:88:5A:14:95:1F:78:40:8D:14:72:6B:91:BD:CF:69:37:24
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843D54DC201A36568FBC0F68940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f721ecc-24a0-3d52-9808-ac939c11315f.roa
Signing time:             Thu 09 Nov 2023 17:56:03 +0000
ROA not before:           Thu 09 Nov 2023 17:56:03 +0000
ROA not after:            Wed 07 Feb 2024 17:56:03 +0000
asID:                     11798
IP address blocks:        23.26.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d5:4d:c2:01:a3:65:68:fb:c0:f6:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  9 17:56:03 2023 GMT
            Not After : Feb  7 17:56:03 2024 GMT
        Subject: CN=742788f6-6822-4f4b-a563-6d59092909ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:dc:ad:0c:60:0c:66:21:11:c2:f1:76:fb:
                    d3:82:49:07:49:c8:a4:87:ff:57:94:2c:1a:bb:6b:
                    16:5a:48:95:cd:69:18:fd:d0:f2:f2:02:39:b8:21:
                    a6:ad:8d:75:9b:12:3b:de:08:a3:99:03:22:38:04:
                    c7:3c:c2:fc:da:aa:66:0c:67:0c:68:41:7b:46:18:
                    35:3a:78:ed:f1:4f:d1:3e:39:7b:2e:be:fc:8e:28:
                    7f:e0:fb:b6:f8:8e:2a:ea:db:37:9e:92:14:3f:c9:
                    45:ad:65:5a:11:d2:33:1f:66:60:23:a5:06:3c:36:
                    c3:e2:34:63:d5:23:2f:61:ce:e9:7c:5c:7e:88:10:
                    4f:aa:55:9e:f8:55:e7:e0:30:1b:8c:22:21:17:47:
                    8c:64:d3:52:39:ae:0b:35:12:bf:40:4d:15:c0:cd:
                    e5:e8:16:7e:58:cf:04:7a:b7:8b:84:e3:90:74:a9:
                    15:40:84:36:44:6c:c3:8e:b9:e0:5a:d9:6f:26:29:
                    bf:f2:36:e3:3f:82:85:ae:99:2f:f8:53:3d:0c:37:
                    44:b6:ed:02:0b:52:46:59:05:27:48:d9:cb:23:46:
                    96:af:0e:3e:da:f9:7a:f5:43:ca:bd:13:21:71:a2:
                    e2:e7:53:9f:b7:e6:cc:94:3d:13:bd:0d:16:de:43:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AE:AB:88:5A:14:95:1F:78:40:8D:14:72:6B:91:BD:CF:69:37:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f721ecc-24a0-3d52-9808-ac939c11315f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9e:da:06:89:92:3c:ec:f0:c7:a0:39:bc:aa:fd:d4:67:39:
         16:c3:ef:b9:38:86:6f:47:2d:39:c7:77:4c:1b:0f:8a:58:b0:
         4b:55:79:6a:c7:e9:91:b8:1f:01:95:f9:55:06:37:9d:68:54:
         7a:f1:ae:5d:f4:ac:da:f1:97:41:90:7d:00:76:43:7b:ce:bc:
         de:61:18:9a:2c:4f:14:31:fe:79:32:a5:16:c0:8a:49:d8:bc:
         a5:fc:96:84:54:87:ff:d4:c2:71:3a:22:54:2a:4f:a9:99:cb:
         c6:2b:6c:4d:f3:b5:9f:51:ff:4f:8c:4d:b7:f6:26:88:10:ee:
         1f:2b:1e:1d:64:cc:cd:ee:6d:01:a0:60:5b:48:87:9f:38:a8:
         88:69:7b:67:7f:de:6f:6e:87:db:27:3b:07:cc:38:7f:be:59:
         2c:b2:61:b3:e0:d1:ff:53:f0:43:23:20:20:34:4d:af:8d:d7:
         10:f7:77:c1:f8:bd:9c:7e:e9:87:49:c9:7d:b6:7e:9e:d5:e4:
         99:2c:e8:39:b5:f4:30:7c:45:fa:9c:e0:de:cb:f5:9e:8e:e2:
         25:ac:3d:60:90:e1:8f:72:0a:df:89:e3:12:23:a1:42:92:3b:
         45:fc:50:3e:8f:13:b2:c0:f8:dd:a7:d6:1e:26:96:01:12:81:
         83:16:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----