Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b503cf76-118d-3ab0-8074-8a79ed4c4cbd.roa
File:                     b503cf76-118d-3ab0-8074-8a79ed4c4cbd.roa (raw, json)
Hash identifier:          3eY72NxQ2xSDb6jLvo5w8rdH/cQRn/EO+0V4ACk0nV0=
Subject key identifier:   94:7C:67:E9:39:4D:7D:FA:4C:33:15:52:A1:CF:83:5D:CD:9B:46:C3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584187D7A1010E371EAE090CB8A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b503cf76-118d-3ab0-8074-8a79ed4c4cbd.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 15 Jul 2025 04:00:00 +0000
asID:                     207633
IP address blocks:        23.26.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:87:d7:a1:01:0e:37:1e:ae:09:0c:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 15 04:00:00 2025 GMT
        Subject: CN=57f75ef1-aca8-4f6c-b4a4-1173aca67a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:10:0d:cf:0c:79:9a:15:02:2c:fb:76:b8:
                    06:9d:b2:1d:b0:2d:8e:fe:c8:49:5b:a0:2c:c1:d8:
                    e2:1c:65:d6:54:94:04:16:54:86:81:cc:b7:ad:4e:
                    a5:0f:34:44:e0:c0:71:d3:19:2d:0b:52:5f:71:57:
                    4e:28:cd:ee:d1:8e:72:e3:0e:b8:34:e6:65:f8:52:
                    4c:99:6a:96:e1:a7:18:cb:b4:83:fa:d1:4a:91:36:
                    4a:27:d8:ee:7b:fc:8f:cd:4b:00:58:9f:c4:99:89:
                    4b:55:14:28:d3:96:1e:38:12:11:39:d3:10:2c:e2:
                    10:38:f7:72:7a:3c:e3:24:e9:a6:fa:4a:01:0e:01:
                    5a:0b:40:fb:1e:6b:4f:1d:df:ba:6b:24:99:97:33:
                    00:ae:7c:9d:4a:08:b8:dd:be:67:dc:69:e9:60:eb:
                    47:55:63:5d:79:66:29:ba:2b:45:d6:f4:5e:b3:39:
                    1e:95:4d:ff:7d:42:9d:fe:8c:c1:00:fb:a4:f1:fd:
                    17:ae:8c:13:dd:fd:fe:11:db:2a:97:21:b6:0f:c0:
                    c2:79:74:0f:6f:b9:25:de:dc:20:17:ec:41:29:d1:
                    88:14:03:3d:95:dd:0d:3b:0f:71:72:a2:9b:c8:a0:
                    27:8c:3e:82:54:80:31:44:0c:a2:d3:04:ea:59:24:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7C:67:E9:39:4D:7D:FA:4C:33:15:52:A1:CF:83:5D:CD:9B:46:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b503cf76-118d-3ab0-8074-8a79ed4c4cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:19:a5:f9:ec:2f:1f:22:97:2a:6f:9d:da:35:d6:7e:d6:
         ec:7b:b5:39:be:e7:c3:1a:b1:95:25:40:45:24:bc:61:11:06:
         01:be:9f:32:30:09:4c:49:24:04:fc:5d:5b:22:6c:93:6d:86:
         09:f1:9b:61:8d:85:61:05:b9:b8:31:61:75:9d:5e:b4:53:58:
         54:f3:da:03:b2:a4:7e:ed:2b:60:e2:61:fc:59:e6:d4:0d:21:
         93:56:4a:5d:93:bc:01:a3:81:09:56:b6:39:f5:fd:04:15:05:
         84:cf:ff:7a:3c:ed:17:3e:33:4b:7c:19:63:5c:f2:0f:e2:33:
         aa:1f:8c:63:dd:c5:02:18:bc:11:c0:ea:e5:91:af:f2:44:30:
         ea:d1:58:e8:41:7a:cd:05:a0:94:03:70:da:5f:33:62:19:1c:
         6a:13:17:02:0a:5e:46:1b:90:c8:3a:a3:35:59:7b:06:98:63:
         01:cc:fe:a1:b0:6e:50:38:f9:33:24:55:61:dc:cf:fc:40:64:
         70:c4:fb:00:38:a4:15:1a:38:75:c7:68:16:37:02:45:b6:bf:
         21:e2:3f:6e:cc:6f:58:28:7b:7f:c9:52:7a:a3:79:ec:49:38:
         81:c4:18:19:46:73:60:4b:dd:99:ad:5f:30:16:5f:e2:48:dc:
         2f:a0:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----