Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73a7d775-0682-3cbd-bfd5-0cfd9501e173.roa
File:                     73a7d775-0682-3cbd-bfd5-0cfd9501e173.roa (raw, json)
Hash identifier:          jZLQ26JA+iDneTrsy6k3J/SH9P8Gq+POpQWOOizfShc=
Subject key identifier:   0A:79:BA:BB:76:BB:E3:0D:51:91:5D:07:BA:F8:68:A2:F0:33:AC:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858437EAF5AC441611000E90944C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73a7d775-0682-3cbd-bfd5-0cfd9501e173.roa
Signing time:             Mon 09 Oct 2023 17:17:22 +0000
ROA not before:           Mon 09 Oct 2023 17:17:22 +0000
ROA not after:            Sun 07 Jan 2024 18:17:22 +0000
asID:                     834
IP address blocks:        23.26.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7e:af:5a:c4:41:61:10:00:e9:09:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  9 17:17:22 2023 GMT
            Not After : Jan  7 18:17:22 2024 GMT
        Subject: CN=99ad3574-88d3-44f0-a406-c96cda6f95a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:ab:58:f9:e8:d0:fd:f9:4e:bd:46:71:db:
                    a9:91:f5:72:a4:65:27:ae:e5:6c:38:7f:13:4e:bc:
                    06:bd:85:a7:d6:3e:f9:69:d4:16:74:23:66:b2:19:
                    fb:e0:55:26:a4:a6:6e:05:66:ed:f9:fc:ed:db:46:
                    34:97:0c:b7:a0:ae:48:39:72:0b:68:e3:ac:82:d0:
                    a5:80:ea:72:d4:39:55:92:87:37:46:20:89:19:56:
                    ea:b0:8a:7c:9b:47:37:83:1c:2d:6f:68:7a:09:fc:
                    ed:64:fc:6c:53:ae:a0:d7:07:c1:94:a7:34:7f:81:
                    c6:1f:b4:0a:de:b0:ec:2a:65:bb:bd:3d:28:1d:cf:
                    47:43:07:3f:da:89:67:81:c1:65:75:db:22:e1:92:
                    55:19:b8:6f:2e:fd:a4:79:d6:63:92:58:53:95:e0:
                    06:c2:1e:20:25:45:8a:0b:32:57:2a:f5:9a:ac:b8:
                    4c:9b:92:54:fd:f5:5f:45:27:8e:dd:bf:bf:ac:88:
                    34:87:83:f1:7c:6d:22:12:43:1d:06:73:ab:4e:97:
                    2f:bc:2c:72:03:67:9b:78:e4:95:6e:27:f8:82:16:
                    8d:a4:8a:0e:71:a2:2d:c9:f4:33:89:b1:d6:1c:8a:
                    83:85:80:02:8c:1d:ac:b3:29:9e:13:4c:69:cc:5c:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:BA:BB:76:BB:E3:0D:51:91:5D:07:BA:F8:68:A2:F0:33:AC:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73a7d775-0682-3cbd-bfd5-0cfd9501e173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:63:25:d9:62:ae:6e:81:6a:2d:08:61:58:c0:b5:6b:e9:
         c5:2a:bf:26:1a:fd:5f:f6:ca:ad:48:3c:4b:09:7c:b8:5a:e2:
         45:dc:13:81:8a:85:ea:3e:47:1c:59:10:fb:e2:37:79:dd:3e:
         e5:ec:cc:1b:5e:85:52:20:73:dc:4b:cb:87:2a:a3:58:cc:c7:
         24:a6:ce:51:75:a8:27:81:46:16:38:03:4f:cd:5c:83:ef:81:
         df:03:15:d8:87:a3:b9:6a:21:f3:d3:02:f2:f9:4c:a7:a6:0c:
         cd:61:5e:83:e6:ec:c2:f4:83:9b:73:9f:79:ea:a2:eb:07:68:
         1d:8c:7f:f9:bb:cf:19:27:91:dc:17:15:bc:e2:b4:9b:27:bf:
         ef:61:76:48:24:4c:b3:e6:c3:c5:c3:51:57:38:4a:3f:a7:ff:
         fe:66:12:d3:82:1a:3b:14:bb:98:96:40:8b:62:35:d4:0e:3b:
         ba:a6:7a:ad:47:e0:2b:e6:b5:6e:7a:1e:dd:65:dd:bb:dd:b5:
         ec:72:4b:0e:50:bf:da:80:3d:bc:e2:3a:b0:b1:47:6c:a9:d6:
         64:63:53:75:a2:d5:83:b6:a4:f2:78:19:4b:08:6b:1d:3b:b7:
         70:29:ab:01:d1:d6:b1:a8:8a:29:43:81:a9:76:41:5f:29:99:
         a1:d5:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----