Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b843446-4f3e-372e-8222-83e8b1ad52a5.roa
File:                     8b843446-4f3e-372e-8222-83e8b1ad52a5.roa (raw, json)
Hash identifier:          e3jYAsLUwpZEaFavl29saadcXfigJ1PHmY+vnj7je4Q=
Subject key identifier:   61:68:5B:B5:6A:57:B9:EE:70:36:0E:FD:26:E3:97:38:4C:87:61:F7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583E5F32CB61600017FD8090B640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b843446-4f3e-372e-8222-83e8b1ad52a5.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sat 28 Sep 2024 04:00:00 +0000
asID:                     29802
IP address blocks:        23.26.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:5f:32:cb:61:60:00:17:fd:80:90:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Sep 28 04:00:00 2024 GMT
        Subject: CN=b97ba458-bf4b-4647-bd0e-0f7bb2440f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:97:8c:6d:d6:98:1c:65:16:82:08:26:4f:
                    ee:af:e3:a0:3d:3d:06:23:e6:3e:09:0a:58:df:e0:
                    36:88:71:00:58:a6:9b:8d:02:39:92:14:f6:57:a6:
                    b5:15:13:62:68:cd:85:b6:c0:7f:1e:b8:ca:29:37:
                    34:07:54:1d:96:94:12:37:26:b8:86:a3:cd:e6:c5:
                    68:ce:9f:0b:75:7c:47:42:3e:bb:d5:60:c7:03:ec:
                    4d:2e:3e:40:65:87:6b:8e:96:dc:9f:18:d8:5c:6b:
                    f4:83:f0:a5:9b:ac:6d:b6:a2:03:09:3f:c7:83:e2:
                    93:a2:ac:88:47:c0:f2:d8:a2:ec:5a:81:bf:39:5c:
                    2f:12:dd:a8:80:1a:e3:78:1e:d3:34:40:83:0e:6c:
                    9a:37:d9:04:8b:fe:ff:a4:25:d9:43:e9:ce:2f:b9:
                    5e:40:91:07:ef:a0:93:ae:4f:67:b4:52:ff:d1:c7:
                    f4:fb:7a:35:e0:13:95:d5:08:af:81:ce:fa:4a:ad:
                    bb:28:ab:58:a6:f8:cd:37:3b:f0:b3:04:09:27:fb:
                    6d:da:3a:01:45:4d:d7:66:fe:de:96:1c:44:d2:72:
                    31:d1:3d:52:82:81:c7:b7:01:69:d4:d4:46:4a:aa:
                    00:9a:8a:11:93:d9:cc:5e:74:07:54:d7:8d:d5:ac:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:5B:B5:6A:57:B9:EE:70:36:0E:FD:26:E3:97:38:4C:87:61:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b843446-4f3e-372e-8222-83e8b1ad52a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:20:dd:6f:7c:45:99:0a:00:7e:7c:c2:0c:55:d3:cd:8e:
         04:62:c1:fb:5d:b9:62:3a:03:48:56:01:fb:94:68:cf:a7:16:
         60:57:ab:38:6f:a5:10:9a:b1:f6:4f:8a:e8:24:25:95:76:5b:
         57:c3:68:84:ea:f6:3d:f0:ed:60:83:39:75:b2:ea:16:ba:23:
         00:9a:47:9a:27:b2:72:cd:f0:b7:57:9e:61:fa:b1:40:c9:5e:
         95:02:eb:38:18:8a:ee:e1:0d:cd:6f:9b:65:04:36:36:26:58:
         aa:61:34:74:57:fb:ba:5c:ca:32:c3:f6:0c:a2:77:4d:46:86:
         d6:0e:8e:e0:fd:66:b4:2f:d8:9e:af:6f:1e:74:ec:ab:fd:17:
         0d:18:07:51:88:23:5e:79:4f:22:8f:09:07:3a:c9:01:ef:ac:
         6e:43:0d:ea:73:32:97:44:65:97:bc:6c:ed:dd:20:7d:0a:ea:
         9d:5d:74:29:d5:81:2d:52:d2:98:ac:c1:dd:43:dd:b8:b8:a1:
         7f:00:0b:fd:af:9c:d5:2c:22:44:ee:21:85:31:9c:ca:a2:cb:
         08:68:18:2c:be:89:3c:4a:d9:66:a1:52:02:b2:d3:d8:c6:88:
         d7:e4:0a:33:6c:46:ab:a7:26:1a:ce:d4:bb:67:cb:ee:93:aa:
         27:ae:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----