Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7bd7e657-8ac5-3412-ac1b-35ce1bc2c6bf.roa
File:                     7bd7e657-8ac5-3412-ac1b-35ce1bc2c6bf.roa (raw, json)
Hash identifier:          huLNTSPLdpEYOPHg3hTmJK73v8PfaHbHVmlqQUrp8eY=
Subject key identifier:   0C:FB:BB:D0:8E:BB:E9:13:8E:9D:07:75:E6:AD:C3:27:A3:E4:AE:B7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858448548230B3C18C45E2E9F6700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7bd7e657-8ac5-3412-ac1b-35ce1bc2c6bf.roa
Signing time:             Thu 11 Jan 2024 18:47:00 +0000
ROA not before:           Thu 11 Jan 2024 18:47:00 +0000
ROA not after:            Wed 10 Apr 2024 17:47:00 +0000
asID:                     23470
IP address blocks:        23.26.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 17:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:85:48:23:0b:3c:18:c4:5e:2e:9f:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 11 18:47:00 2024 GMT
            Not After : Apr 10 17:47:00 2024 GMT
        Subject: CN=9c59b796-f8e3-42f1-a814-9b57e1cc7877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:d5:5b:75:1e:b7:8d:91:e1:aa:61:04:8b:
                    08:19:52:08:a5:61:64:68:6e:d8:ea:d2:79:39:36:
                    01:37:77:cd:c7:06:a8:f3:fb:13:8c:9e:78:07:aa:
                    7b:86:40:14:ca:14:36:b0:5b:cc:ae:20:5e:59:14:
                    2c:26:97:3b:fa:fe:57:bb:0b:55:98:78:51:07:0a:
                    65:da:ae:ef:c4:6c:68:9c:bb:ac:9d:72:ed:31:36:
                    0b:ee:61:5c:e5:a8:fe:55:58:7f:65:98:5f:33:ab:
                    0b:ea:39:09:c5:f7:18:7f:a4:e3:ee:67:be:53:81:
                    3b:4c:2e:fb:26:6d:6b:85:4d:9d:5e:87:b9:14:e3:
                    8e:7e:41:8d:da:54:79:84:36:bb:de:a4:4c:33:0d:
                    6b:84:e8:a7:87:f2:bf:aa:c7:84:69:0f:28:e2:e5:
                    d3:c0:b0:07:ba:c1:bc:0e:b2:af:3c:3c:6b:ca:88:
                    a1:82:61:ed:35:f1:b4:2f:b3:e0:3b:39:f5:83:83:
                    74:6f:9d:0a:70:08:5f:31:e1:ac:61:bc:74:6f:dc:
                    9a:ef:d1:4b:0e:26:b4:bc:b5:a6:58:d6:d6:c2:05:
                    c4:84:38:6b:96:47:a2:9d:c4:ee:01:95:8a:87:02:
                    d9:f2:95:f2:d4:d5:64:9b:2b:5d:ac:a7:42:b3:d4:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FB:BB:D0:8E:BB:E9:13:8E:9D:07:75:E6:AD:C3:27:A3:E4:AE:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7bd7e657-8ac5-3412-ac1b-35ce1bc2c6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:25:40:36:1d:2e:85:aa:7e:2f:fe:ac:fd:3e:b7:90:8b:9f:
         d3:a1:cd:6c:a0:68:6d:35:ab:91:9e:e6:74:c8:f9:63:a3:01:
         90:4b:a3:0d:5d:39:21:19:20:b0:39:0d:e8:bc:0e:1c:ba:f7:
         15:5b:ba:15:5d:d5:9c:bd:ee:25:86:5f:a7:b3:93:b1:ae:49:
         09:47:77:49:33:ae:2f:86:e9:fb:00:ca:ca:61:a7:34:4c:df:
         7d:5a:98:e9:4b:0b:cb:ed:d7:07:50:bc:ba:72:ee:60:d5:ba:
         44:b5:71:30:66:95:99:04:12:3e:48:9c:16:86:fb:e5:93:2b:
         a5:e8:ab:ca:e7:c9:f2:fb:41:99:e3:88:c8:82:25:53:60:0a:
         3b:42:73:76:fc:1a:a3:ca:20:07:b6:11:64:92:7c:9b:a8:46:
         f3:b5:dc:d3:1b:4d:09:a3:97:6c:40:1d:cd:88:50:61:2c:27:
         4c:9f:27:f0:65:17:b4:be:bf:89:15:a5:6e:e2:c3:0b:0c:67:
         fd:f5:93:b1:48:a2:da:23:5b:8b:15:0d:61:15:a1:da:37:f4:
         8a:86:ea:b0:2b:86:2e:87:90:42:bd:34:27:de:d9:6e:f3:34:
         c3:4d:23:90:70:e5:5d:da:dd:c6:39:43:57:b7:8b:00:e8:83:
         0f:04:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----