Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c26bca6-2445-3f47-9b71-202a303ca48f.roa
File:                     9c26bca6-2445-3f47-9b71-202a303ca48f.roa (raw, json)
Hash identifier:          5fiQVExTCrDyWKuRGYWRM4MQxLWSxl0UpHjPx5dMmUE=
Subject key identifier:   4F:63:99:E6:FF:1F:45:3E:DE:C1:F3:B1:A7:05:5C:22:2C:E7:D8:0F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583EC8FF92BB639FF58F6404DD60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c26bca6-2445-3f47-9b71-202a303ca48f.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 05 Nov 2024 05:00:00 +0000
asID:                     996
IP address blocks:        23.26.200.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c8:ff:92:bb:63:9f:f5:8f:64:04:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Nov  5 05:00:00 2024 GMT
        Subject: CN=1fec5749-a813-4c11-939d-5ef3c969278f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:fc:eb:2f:0a:ce:4b:6f:a3:88:a9:1b:99:
                    e7:c3:47:4a:55:62:98:de:ff:df:10:71:36:02:71:
                    b9:33:89:4b:80:ff:d5:8e:14:2b:75:c8:c0:24:78:
                    de:be:0a:22:c8:69:ab:e5:e0:78:55:36:2f:00:1e:
                    63:87:82:2b:52:f1:a7:a6:96:a1:0e:da:be:ed:7f:
                    e0:95:e3:9a:71:65:61:8e:35:db:bb:50:27:a8:86:
                    de:f5:82:90:f3:43:1d:af:53:14:96:e1:aa:37:f3:
                    84:a4:9d:b8:c1:64:07:40:ce:66:44:c6:89:26:8b:
                    f1:eb:7b:dd:92:00:b9:03:15:ec:63:8d:6e:75:0f:
                    69:f0:56:3c:85:7f:db:fb:68:20:a9:32:72:97:40:
                    d2:c0:db:9d:59:44:0e:e0:d1:42:17:5c:cb:25:23:
                    18:ee:33:77:d3:dd:89:6a:5c:49:bb:33:80:a2:26:
                    47:66:0c:6f:64:8e:c8:d5:4d:24:07:65:ba:39:d7:
                    e7:ef:d2:47:5f:eb:31:3c:f6:a9:5a:a8:ee:05:73:
                    b5:7e:79:ab:97:e2:d9:ce:b9:d4:07:a0:f1:62:98:
                    f2:14:d9:ff:1c:46:c5:10:2e:d0:38:30:0b:4b:5c:
                    fd:7f:66:96:a4:80:26:75:bb:9c:de:28:ff:7f:fa:
                    65:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:99:E6:FF:1F:45:3E:DE:C1:F3:B1:A7:05:5C:22:2C:E7:D8:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9c26bca6-2445-3f47-9b71-202a303ca48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:f6:97:4a:10:b9:85:ba:b4:28:ec:98:1b:7b:96:2b:94:
         1b:77:e1:d9:91:1e:b1:16:b9:c5:a9:bb:b5:52:54:cd:e4:23:
         7d:cb:74:28:bb:c4:eb:ea:76:2d:dc:8e:fa:64:da:6f:38:36:
         50:4c:0b:88:bd:ad:cb:28:a7:7d:b7:ae:54:13:6e:2d:fb:b9:
         3a:d9:96:04:e3:b2:eb:e0:f1:89:ac:61:3f:c3:96:d3:52:f0:
         a1:c7:89:2b:83:90:d4:6b:9e:44:3b:30:73:b3:7b:54:ff:6b:
         1f:53:44:56:83:0e:20:83:4b:a5:58:23:de:97:32:a1:59:88:
         83:84:a1:24:f1:94:e8:56:21:c6:75:fa:3c:09:e5:b6:7f:4b:
         58:1e:7e:3a:59:1a:43:87:f3:a1:2c:cf:3c:0c:7f:61:82:dd:
         03:4f:5f:d3:42:b5:14:29:14:d9:dd:88:de:fc:4c:b3:d2:98:
         4c:26:f6:7b:f7:fd:33:f6:60:f2:4b:d7:14:55:96:74:bc:c3:
         ea:33:1a:cd:28:6d:15:64:3d:91:3a:2b:5b:03:b5:bc:d0:e8:
         ec:d7:1a:5c:83:38:6a:86:55:4a:40:15:95:3d:fc:77:63:6d:
         fc:90:0b:55:c9:b4:2c:fe:e8:ab:70:eb:f8:1f:5a:64:f5:56:
         82:db:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----