Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c6c5fb2-149e-3ebe-9d50-b75816eb8d43.roa
File:                     7c6c5fb2-149e-3ebe-9d50-b75816eb8d43.roa (raw, json)
Hash identifier:          z6+cJMwx8yUS4xsdI2vUbyQAF5NorHQHNRm8QMwqV4Q=
Subject key identifier:   DC:D7:58:5B:C2:E2:09:25:03:F7:4B:3B:8B:30:86:7B:CA:DD:13:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584363AA5228DCA1DAD962498F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c6c5fb2-149e-3ebe-9d50-b75816eb8d43.roa
Signing time:             Sat 30 Sep 2023 01:00:22 +0000
ROA not before:           Sat 30 Sep 2023 01:00:22 +0000
ROA not after:            Fri 29 Dec 2023 02:00:22 +0000
asID:                     20473
IP address blocks:        23.26.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:63:aa:52:28:dc:a1:da:d9:62:49:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 30 01:00:22 2023 GMT
            Not After : Dec 29 02:00:22 2023 GMT
        Subject: CN=1b92ce41-8b42-48fc-b65b-ee62d9c7b7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:44:2f:b4:11:f3:fb:33:a2:a6:92:16:ee:
                    bc:9b:9a:0d:0f:3a:69:a2:12:5f:38:9e:ec:df:b7:
                    26:bb:1b:01:ad:a0:14:a4:ba:0e:50:fb:5c:64:f2:
                    bd:a5:f6:6d:30:2e:f3:bf:eb:c8:e3:a1:12:13:8b:
                    09:6f:f9:25:68:73:2e:f9:74:08:02:22:c4:c6:3a:
                    e0:4d:45:79:2a:8d:8c:53:4f:94:ad:67:14:71:d9:
                    1e:54:fc:aa:3f:b1:78:d3:7d:d6:9c:fc:74:e8:49:
                    28:39:c5:01:67:ff:97:4e:6e:a7:c4:2f:12:81:9e:
                    3c:fc:79:37:6b:1e:f8:4d:13:e4:a3:54:d2:2e:9d:
                    0b:5c:d0:37:f8:06:77:d5:96:75:34:af:b4:0c:28:
                    21:21:00:f9:ff:32:b6:84:ca:51:56:77:54:d6:37:
                    5d:6a:cc:21:3b:86:2b:61:ba:9e:0a:b1:d0:31:f0:
                    69:16:da:94:d2:7e:d9:18:ad:eb:d7:5d:7f:3c:ed:
                    98:e7:8d:07:5a:d5:19:e3:1b:97:d5:13:17:d2:5b:
                    d0:88:e3:73:b6:ed:c6:53:61:84:1d:85:bf:aa:81:
                    f1:ba:c6:a5:bf:af:19:b6:2b:0f:09:54:4d:29:75:
                    f0:d2:ec:75:fe:4e:5f:b7:5e:da:60:44:7c:85:c9:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D7:58:5B:C2:E2:09:25:03:F7:4B:3B:8B:30:86:7B:CA:DD:13:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c6c5fb2-149e-3ebe-9d50-b75816eb8d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:ec:4e:3e:e0:f7:f4:37:5a:f7:90:6e:9b:e9:4b:ca:8e:
         70:90:06:ed:48:ad:64:4a:51:34:c4:f5:2d:ea:54:3f:11:42:
         dc:73:fd:6b:81:cb:64:58:82:0c:77:55:85:9a:18:85:75:8b:
         d7:9f:df:1a:10:f0:7a:8c:d2:08:5a:3b:f7:d8:a4:bd:13:bb:
         06:43:d3:eb:35:c1:a4:af:04:5b:7b:69:b4:e0:52:a9:6c:3e:
         25:ce:06:70:1b:d0:84:de:64:dc:c5:57:8a:87:b6:a6:e3:8a:
         48:98:99:a9:9e:9c:dc:26:ad:1b:53:d6:fa:a9:77:1c:08:10:
         df:36:bb:86:e2:53:57:4b:cc:05:b1:39:9f:c2:10:b9:0d:bd:
         35:56:3e:c0:09:44:01:46:98:dc:12:68:6e:05:4d:d3:e1:72:
         6b:33:9e:cc:f7:3e:4e:fe:62:fa:96:66:e4:7a:cd:5f:e9:9b:
         33:4d:6e:0f:e3:c0:29:04:0c:d5:07:bf:b2:55:ae:3b:5a:1d:
         6d:b3:7b:a6:ba:3c:83:5c:7c:1d:f4:5f:0a:77:f5:98:48:2b:
         5a:74:b0:50:1f:4d:66:c9:a1:b2:3d:96:aa:c9:21:08:68:23:
         c1:ca:ab:34:70:e1:79:c1:20:c2:c7:d5:f6:34:ea:f6:63:4a:
         da:93:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----