Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b646caf-5922-374b-98e3-271e3c627d3b.roa
File:                     8b646caf-5922-374b-98e3-271e3c627d3b.roa (raw, json)
Hash identifier:          PvdsX8MBsNySihghampcNSfk8xIbXM1SDpkzUhx0gzs=
Subject key identifier:   DD:2C:62:A7:1D:3C:40:04:14:85:18:EB:2D:8E:0C:83:E4:F8:A3:34
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583FD8DC17833611CBB5628D2B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b646caf-5922-374b-98e3-271e3c627d3b.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 11 Feb 2025 05:00:00 +0000
asID:                     212238
IP address blocks:        23.26.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d8:dc:17:83:36:11:cb:b5:62:8d:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Feb 11 05:00:00 2025 GMT
        Subject: CN=6ee2d55f-2d26-465d-8711-cd3b9b374eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:81:7f:a4:01:60:6d:ce:69:65:9b:5a:b6:
                    d3:de:bd:3c:95:a4:c3:d3:08:f4:e5:e4:2a:3b:82:
                    e7:4d:7f:5f:23:c3:22:ee:56:a4:c6:9d:d6:56:73:
                    57:f4:73:32:22:8e:7a:32:4e:9e:78:2c:d0:0a:aa:
                    ee:f9:dc:ef:fc:b3:46:2c:18:54:a5:95:ee:a2:80:
                    73:62:8a:01:14:af:76:1b:4e:a7:d8:b6:05:ef:18:
                    31:6d:38:bf:4a:10:e2:27:be:a3:7c:f6:31:f9:20:
                    fb:ee:cc:c3:e4:a3:20:08:42:69:b5:5b:50:81:cf:
                    10:f2:d9:36:26:92:e4:cf:f6:29:d9:07:3c:f2:f4:
                    0b:42:3b:92:e1:e7:fc:5d:76:7c:70:38:c3:b7:52:
                    67:3f:84:5a:80:8b:39:d4:9a:f2:66:97:00:75:6c:
                    21:f7:60:40:68:b2:2a:d7:ec:84:a8:77:8f:e2:6f:
                    78:ba:f3:3a:32:36:d4:e7:82:c6:c2:c0:72:f6:dd:
                    0e:d0:da:93:2d:cb:f6:3e:67:67:5b:6c:26:28:04:
                    57:68:23:e4:91:7d:8d:c5:a7:31:88:a7:52:00:f0:
                    af:eb:af:38:02:08:4c:6e:52:39:04:84:86:7f:84:
                    2c:03:44:90:0f:79:1b:eb:05:8b:fa:9e:0e:49:17:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2C:62:A7:1D:3C:40:04:14:85:18:EB:2D:8E:0C:83:E4:F8:A3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b646caf-5922-374b-98e3-271e3c627d3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:72:8b:da:5b:51:54:b2:5b:fb:7f:1f:e8:6f:c6:0b:e0:
         e1:dc:73:0e:e3:53:2d:d0:c8:79:47:6a:fd:f4:56:a8:83:f4:
         41:b2:c1:05:f2:3b:fa:52:66:ee:86:b8:b4:78:21:ff:8e:b5:
         0c:ce:10:c0:d4:e5:e9:88:2a:2a:8f:2b:6f:7d:92:c6:91:47:
         b0:73:10:69:3d:e0:ae:1f:bd:7a:b6:88:9f:c9:7b:8a:19:5e:
         27:ec:22:90:0a:86:c5:8e:6c:3f:ee:ed:45:92:09:6a:bf:ab:
         5f:fd:b4:44:29:4c:d3:be:91:36:0d:b3:3c:e3:a8:38:b0:f7:
         0a:8d:86:8c:72:4e:fd:62:8e:fa:0b:ec:84:9a:e6:c0:d2:7c:
         a4:fb:8f:cb:e1:e6:00:77:92:a3:6a:cd:56:83:7b:00:ee:32:
         dd:12:38:c0:b6:76:6a:75:c0:2d:01:6c:4b:ab:d1:cf:fd:c1:
         6e:5b:d6:30:b0:34:7c:33:5a:2b:ba:61:5f:ad:b7:dc:07:34:
         f7:d6:4b:2c:d5:0a:ad:2a:75:ed:82:05:69:63:a4:cb:e7:03:
         cb:a2:09:09:a0:eb:68:ef:fa:fb:1c:7a:ca:67:34:c9:4d:1d:
         ae:85:5b:6a:8b:fb:c8:5d:04:9a:d5:d5:26:86:e6:69:70:ff:
         93:bd:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----