Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d16b11b-f4b3-31f4-9ed3-12815e5f900f.roa
File:                     9d16b11b-f4b3-31f4-9ed3-12815e5f900f.roa (raw, json)
Hash identifier:          ArK7ZDQlu8XTAYAprnmtnceVXF11DbnJgmG3Jdhui6E=
Subject key identifier:   6D:09:27:9E:BF:5D:A3:A8:69:C8:D3:70:62:B4:D7:51:FF:54:03:D8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841BD1FB0BB4371E77AB3961C40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d16b11b-f4b3-31f4-9ed3-12815e5f900f.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 03 Aug 2025 04:00:00 +0000
asID:                     834
IP address blocks:        23.26.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bd:1f:b0:bb:43:71:e7:7a:b3:96:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Aug  3 04:00:00 2025 GMT
        Subject: CN=72fc66d1-7d83-453c-825f-1f845a61d605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:8c:61:ac:da:97:a4:49:71:1e:38:31:25:
                    92:62:bb:dd:12:26:60:40:0e:92:ab:88:92:40:d9:
                    ac:e8:dd:79:09:c6:df:d5:83:e0:13:e7:e5:ba:95:
                    c2:36:43:9d:72:18:88:f0:2a:16:6a:6d:d5:49:0e:
                    94:22:cd:ef:26:f2:69:ea:4c:35:45:b2:f7:65:29:
                    30:fb:6c:13:a5:b2:41:08:40:ea:97:19:ea:76:04:
                    3c:3b:c0:b9:02:81:9d:70:d5:45:ab:6e:d5:20:5f:
                    53:3d:5d:3c:ed:3c:a4:f7:9c:44:87:85:20:a8:8f:
                    1a:d3:8f:a7:bc:ed:a7:4b:f9:fb:5c:e5:a1:50:a0:
                    49:58:56:29:ce:a0:52:5a:7c:4a:b6:31:f4:96:9f:
                    3b:be:9b:3b:a0:90:35:9e:c7:fa:ae:c6:ab:18:a9:
                    f8:31:1a:4a:e8:14:ab:b1:f3:07:2b:68:db:4f:cf:
                    d3:86:91:68:8b:a1:28:2b:3f:76:58:e7:3d:06:1e:
                    62:2f:86:50:e7:76:09:e8:d5:e9:d3:76:f3:ed:1f:
                    d9:82:84:da:49:56:b2:a0:b2:e4:e7:01:91:8d:61:
                    b8:24:f6:15:d3:97:18:13:15:ef:a6:54:af:87:c5:
                    81:40:0e:99:f8:42:68:e2:21:87:c9:9c:9e:60:2a:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:09:27:9E:BF:5D:A3:A8:69:C8:D3:70:62:B4:D7:51:FF:54:03:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d16b11b-f4b3-31f4-9ed3-12815e5f900f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:12:05:1f:34:ec:3f:eb:72:20:6f:5b:ab:41:64:41:4b:e0:
         83:98:52:0f:3c:46:4d:d7:fe:9f:92:eb:b3:6e:fc:de:af:36:
         dc:d2:6b:c8:b6:33:dd:65:03:d8:3e:d5:bb:40:1c:c2:d1:95:
         8c:2e:a5:ab:df:3a:a8:68:a1:3f:82:de:be:cd:7c:bd:30:9c:
         61:95:37:8a:eb:ec:7d:cc:0b:92:23:5f:88:5b:dd:0d:de:5c:
         47:dd:2d:96:af:6f:e9:37:28:c3:09:77:42:d8:0f:07:d1:1a:
         a6:07:d1:a3:e1:6e:39:a1:34:34:de:a1:9a:b0:17:a4:ea:7e:
         80:c8:e5:31:8b:2e:c9:a1:81:e7:fa:f1:ea:b6:17:70:40:6f:
         c8:d9:5a:85:39:9b:d8:ad:8e:49:6d:94:18:a9:27:71:f6:10:
         74:49:37:0c:03:fb:ee:5f:33:60:23:51:9f:e6:f7:98:25:93:
         c0:08:d4:40:2e:7a:2c:34:6e:ad:f4:c6:80:91:36:bc:84:5c:
         41:89:47:e8:e6:71:50:81:7a:f7:32:01:8e:d4:69:40:b7:5f:
         cd:ee:5e:02:0c:61:f0:2f:17:95:dd:a6:fc:ba:d5:fd:a7:fb:
         f6:29:a1:65:2c:a6:d5:31:86:6f:69:ec:b2:83:1a:cb:87:e7:
         9d:f6:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----