Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/968abdb1-24ec-371c-8167-b0bd864248e1.roa
File:                     968abdb1-24ec-371c-8167-b0bd864248e1.roa (raw, json)
Hash identifier:          26/SncNJMrZpmWtgXzeWGbSSHjEpeXc1/QSY1Ggai2M=
Subject key identifier:   E3:AC:CA:0F:6A:B5:88:97:41:0D:48:14:FB:57:E0:46:7E:6A:E0:94
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584198968E5D95EFF6FF0A889000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/968abdb1-24ec-371c-8167-b0bd864248e1.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 21 Jul 2025 04:00:00 +0000
asID:                     7411
IP address blocks:        23.26.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:98:96:8e:5d:95:ef:f6:ff:0a:88:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 21 04:00:00 2025 GMT
        Subject: CN=182a332c-2906-4779-ab32-7c505c155a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:ec:cb:da:f1:f7:cf:f8:07:49:85:e4:37:
                    df:b5:56:05:e6:19:60:a9:74:d8:7d:c4:c6:a7:98:
                    73:4f:47:7f:ec:80:5c:89:64:77:a5:bb:ba:4e:3f:
                    f5:db:5e:b7:f0:b1:af:96:57:2a:20:9a:cb:c1:e9:
                    3d:fe:57:63:73:45:fe:1b:6c:49:3a:c2:c8:77:ba:
                    71:5e:c5:d0:b3:d9:fc:3e:85:70:f4:e5:ed:ca:51:
                    10:27:80:60:fe:a6:7c:77:3f:4f:d3:43:e6:67:9e:
                    dd:b9:cc:bd:39:66:7e:a9:3c:87:79:bf:eb:c7:ae:
                    3a:c6:e2:8a:22:6e:91:1c:01:ed:44:56:66:dc:91:
                    fd:6a:b4:d8:8e:1c:75:76:85:3a:5e:ce:7b:99:8d:
                    ed:a9:6e:87:d4:b6:38:35:19:ca:fd:4a:69:dc:10:
                    e1:3c:b6:89:10:8d:d8:e0:b5:e7:32:64:48:a3:c8:
                    cc:40:e9:5e:59:01:36:96:af:8d:4a:88:37:35:36:
                    e7:69:34:34:0e:1b:98:5a:71:cf:33:3c:b9:73:fb:
                    87:18:b8:bc:49:78:a6:42:37:b1:5d:12:82:43:35:
                    f8:6b:d0:11:cf:0d:15:a7:08:83:21:bc:c5:8d:a3:
                    fe:c3:e5:a1:70:65:5b:bc:96:4f:4e:5c:e0:db:81:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AC:CA:0F:6A:B5:88:97:41:0D:48:14:FB:57:E0:46:7E:6A:E0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/968abdb1-24ec-371c-8167-b0bd864248e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:91:12:64:a0:cc:8f:94:76:5a:e7:be:99:0a:92:13:3c:36:
         bb:3c:60:e6:63:8b:8f:46:7d:f4:52:1a:08:3c:ad:f7:28:04:
         7a:5d:e3:3f:3e:e4:6d:4f:59:87:ce:4e:31:38:b3:9c:e1:b4:
         fd:3c:50:15:e8:38:bc:b4:a1:9a:66:47:c2:13:ed:8a:ca:c0:
         1e:53:e7:7f:b6:8c:8c:8f:0c:b2:0e:f1:ac:9d:36:79:b4:5f:
         2c:48:bc:a0:20:48:98:14:69:2d:e9:5f:6a:ea:44:ff:4b:2c:
         36:25:3a:53:9b:d5:16:b3:1a:96:8c:64:8c:8b:1d:df:3d:d8:
         92:3c:cd:a5:0f:43:2b:1f:03:33:b3:39:ef:4c:c5:65:a9:db:
         dc:c0:c1:15:a6:b8:86:f5:6c:2a:41:f4:b9:2d:ce:8b:b9:50:
         9e:a6:b8:57:20:32:20:3c:70:88:ce:e1:2a:6b:ae:a9:ec:3c:
         a9:c0:49:10:d4:dd:0d:44:19:66:7e:c9:3e:2e:a9:a9:7b:cd:
         8b:9e:8b:4d:a8:50:71:1b:c1:ec:5b:32:ed:5a:55:29:a3:04:
         da:2b:c7:ce:09:51:3a:7b:c2:2b:fb:36:77:5f:e4:e9:78:77:
         81:83:39:0d:41:77:9b:52:24:32:98:2c:f4:07:1e:0a:c5:6d:
         47:0a:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----