Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82499056-aa7e-32db-b640-1ba8aa64c867.roa
File:                     82499056-aa7e-32db-b640-1ba8aa64c867.roa (raw, json)
Hash identifier:          gOF2rPDaN/SDJ7tjTiP7FwC/1TVWvskAzNsvBJrEkJs=
Subject key identifier:   04:54:8E:B8:D2:3A:A0:EE:9E:16:B9:30:07:9A:36:3A:45:DA:23:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858431B148B6320603FC20CBEF520
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82499056-aa7e-32db-b640-1ba8aa64c867.roa
Signing time:             Mon 04 Sep 2023 01:00:23 +0000
ROA not before:           Mon 04 Sep 2023 01:00:23 +0000
ROA not after:            Sun 03 Dec 2023 02:00:23 +0000
asID:                     1239
IP address blocks:        23.26.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1b:14:8b:63:20:60:3f:c2:0c:be:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  4 01:00:23 2023 GMT
            Not After : Dec  3 02:00:23 2023 GMT
        Subject: CN=f12898ca-b8ad-4faa-983a-bfc0bf569a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:cb:9a:47:b2:f4:3f:e4:9c:d3:c6:2f:14:
                    60:6c:4f:e0:5a:5e:ce:36:bf:67:54:37:d7:68:be:
                    3a:8f:85:d3:e8:43:3a:06:03:95:73:85:bc:ef:b0:
                    2a:7b:c0:6f:b0:08:cf:ee:89:45:9e:a1:93:41:59:
                    66:ec:69:b6:f3:0e:51:b7:c6:f6:49:2f:2f:79:3c:
                    72:2d:eb:d1:64:c5:43:c6:98:1e:38:7b:a4:26:bd:
                    a5:42:f9:63:ca:a3:1f:1c:c9:75:9c:bb:cf:40:05:
                    69:93:30:3b:22:c0:45:cd:3d:9c:dc:2b:25:f4:35:
                    4d:af:2a:82:68:56:00:2d:78:d9:e5:53:0e:99:dc:
                    4b:34:6d:c9:ac:66:9c:0c:e4:47:5e:7c:c0:12:54:
                    09:7f:fd:0a:9e:4e:95:e1:2b:d3:f7:e0:12:6f:28:
                    3f:49:ec:ca:c4:18:d4:0b:09:63:be:2d:b8:e8:d3:
                    a1:e7:fb:73:67:12:a2:43:54:20:75:50:4e:c7:1c:
                    82:26:29:58:1f:7d:c9:e9:e2:fa:2f:39:66:16:f1:
                    30:af:6d:43:9c:64:bd:42:50:24:55:51:4b:7b:6e:
                    76:15:c9:22:cc:a4:54:8e:ba:c3:a7:ad:67:0b:86:
                    fc:01:5b:46:da:26:aa:96:8c:b3:00:d3:d6:50:0a:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:54:8E:B8:D2:3A:A0:EE:9E:16:B9:30:07:9A:36:3A:45:DA:23:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82499056-aa7e-32db-b640-1ba8aa64c867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:25:26:14:1c:92:38:da:1d:d2:06:b2:27:3c:93:ed:1d:b3:
         7b:3b:c0:63:44:25:5e:d6:a9:48:79:df:fd:d2:78:67:b6:f7:
         36:c3:62:33:08:e5:80:ec:97:77:3b:66:56:60:64:f0:3d:86:
         36:96:4b:cd:4f:8a:8a:1d:d7:ee:11:48:19:d2:b5:ca:2e:ed:
         14:9f:ed:48:42:14:9f:b2:30:93:51:e8:99:08:c9:c1:cf:d8:
         a5:59:97:c1:b5:83:a6:b2:ac:2c:e9:20:9c:2b:78:fe:a7:b2:
         d9:03:fd:19:73:7f:d4:56:40:16:79:d8:b2:24:7e:66:57:4a:
         4d:16:fd:37:d4:aa:09:02:eb:32:37:b4:07:4c:c4:a1:7c:88:
         47:5a:74:ad:21:72:3f:a9:67:46:7b:26:c3:26:51:c4:d4:33:
         68:4d:e9:47:12:c0:cb:07:a0:0e:64:11:93:bd:1e:47:25:5f:
         94:ea:34:6a:d7:66:14:35:84:a7:0e:1e:ff:cb:cf:0e:50:e4:
         0d:6b:d0:56:0b:28:e8:fd:dd:63:09:f3:92:b6:1a:32:e7:87:
         48:81:cb:3a:01:37:8b:db:9a:83:08:aa:e1:8d:9f:87:e4:bf:
         5a:c3:d3:bf:1c:2e:54:49:b2:52:25:f6:2d:b3:98:ee:54:bd:
         db:9f:2a:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMbFItjIGA/wgy+9SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkwNDAxMDAyM1oXDTIzMTIwMzAyMDAyM1owLzEtMCsGA1UEAxMk
ZjEyODk4Y2EtYjhhZC00ZmFhLTk4M2EtYmZjMGJmNTY5YTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwDLmkey9D/knNPGLxRgbE/gWl7ONr9nVDfX
aL46j4XT6EM6BgOVc4W877Aqe8BvsAjP7olFnqGTQVlm7Gm28w5Rt8b2SS8veTxy
LevRZMVDxpgeOHukJr2lQvljyqMfHMl1nLvPQAVpkzA7IsBFzT2c3Csl9DVNryqC
aFYALXjZ5VMOmdxLNG3JrGacDORHXnzAElQJf/0Knk6V4SvT9+ASbyg/SezKxBjU
Cwljvi246NOh5/tzZxKiQ1QgdVBOxxyCJilYH33J6eL6LzlmFvEwr21DnGS9QlAk
VVFLe252FckizKRUjrrDp61nC4b8AVtG2iaqloyzANPWUAq0SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARUjrjSOqDunha5MAeaNjpF2iMoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODI0OTkwNTYtYWE3ZS0z
MmRiLWI2NDAtMWJhOGFhNjRjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADclJhQckjjaHdIGsic8k+0ds3s7wGNEJV7WqUh53/3SeGe29zbDYjMI
5YDsl3c7ZlZgZPA9hjaWS81Piood1+4RSBnStcou7RSf7UhCFJ+yMJNR6JkIycHP
2KVZl8G1g6ayrCzpIJwreP6nstkD/Rlzf9RWQBZ52LIkfmZXSk0W/TfUqgkC6zI3
tAdMxKF8iEdadK0hcj+pZ0Z7JsMmUcTUM2hN6UcSwMsHoA5kEZO9HkclX5TqNGrX
ZhQ1hKcOHv/Lzw5Q5A1r0FYLKOj93WMJ85K2GjLnh0iByzoBN4vbmoMIquGNn4fk
v1rD078cLlRJslIl9i2zmO5UvdufKhI=
-----END CERTIFICATE-----
Generated at Fri Sep 15 17:36:42 2023 by rpki-client on console-fra.rpki-client.org