Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbdc76f1-44e9-3a3a-934e-fe8459f9ff1c.roa
File:                     bbdc76f1-44e9-3a3a-934e-fe8459f9ff1c.roa (raw, json)
Hash identifier:          YTXfKBnGIO8UvK0qdq2avkfVW6vBAT7+mPYtD41ISfI=
Subject key identifier:   37:77:1E:6C:3B:59:6B:25:5F:CB:8A:A5:D3:13:93:5C:F6:12:B2:42
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584289E8EF013472DDB4E3645EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbdc76f1-44e9-3a3a-934e-fe8459f9ff1c.roa
Signing time:             Fri 14 Jul 2023 01:00:16 +0000
ROA not before:           Fri 14 Jul 2023 01:00:16 +0000
ROA not after:            Thu 12 Oct 2023 01:00:16 +0000
asID:                     7018
IP address blocks:        23.26.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:89:e8:ef:01:34:72:dd:b4:e3:64:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 14 01:00:16 2023 GMT
            Not After : Oct 12 01:00:16 2023 GMT
        Subject: CN=8dc7470e-bf4c-4c0e-ab8e-20dbde1a97f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:94:a8:37:65:bc:2e:65:7b:a0:0b:db:29:
                    78:ab:6f:e7:77:b2:bf:86:c3:ef:11:77:98:cc:3a:
                    b5:b3:88:ee:06:f5:66:a6:af:fa:a8:6d:de:f6:f2:
                    cc:e8:01:5c:9d:cd:83:44:fb:d7:9a:10:ec:fd:dc:
                    21:4d:3f:63:53:3a:f6:ab:a6:f9:9b:ad:eb:80:96:
                    3e:08:ce:d5:80:aa:42:15:fa:32:48:b6:b0:01:19:
                    49:91:25:7b:a7:7e:ee:6d:e9:06:51:1d:12:17:43:
                    b5:dd:4f:a1:e0:86:60:a1:18:88:f4:79:5b:f7:eb:
                    63:34:3f:20:01:18:60:a8:88:93:3b:ab:76:d7:7f:
                    e5:14:a8:e8:10:aa:55:16:dc:0e:c4:ae:c7:46:28:
                    1f:af:96:b9:a8:7b:77:51:85:c9:95:93:c8:23:73:
                    ea:a9:79:a2:a8:d3:d2:6c:4b:ff:0e:f6:0e:32:69:
                    36:44:6b:b6:a1:32:43:6a:f5:87:7d:92:ae:97:ff:
                    14:cb:10:46:10:34:56:67:81:15:01:ea:dc:09:6c:
                    c0:9b:d7:84:eb:9d:0e:bd:66:b7:f3:2e:b7:e8:9c:
                    54:d6:70:c8:53:f0:4a:90:da:20:51:9c:77:ba:bf:
                    7b:00:e9:23:b6:b9:fd:2a:9b:12:da:cd:34:89:39:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:77:1E:6C:3B:59:6B:25:5F:CB:8A:A5:D3:13:93:5C:F6:12:B2:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbdc76f1-44e9-3a3a-934e-fe8459f9ff1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:74:0a:a3:c8:df:50:6a:56:76:9f:28:78:d9:c4:fe:2c:ed:
         ec:ae:eb:9c:6a:d8:81:dd:0d:13:6c:0c:bd:d2:68:17:bd:d6:
         99:35:ff:ef:c6:dd:ae:14:15:fe:fb:e0:29:27:b3:a2:ad:80:
         19:32:f2:d7:36:60:c9:a7:5f:4c:0f:c8:7a:ff:1e:a1:34:23:
         80:0e:23:40:d3:d7:9a:8b:40:ef:36:9c:6e:34:da:bb:c7:40:
         05:57:a6:45:6f:d6:dd:8c:2c:02:a0:82:1e:a0:da:5d:7d:d9:
         d3:68:75:3d:54:de:25:40:61:35:66:dd:4a:27:fb:7e:29:76:
         d9:21:64:35:c2:83:87:f9:fa:60:50:70:f3:5b:d7:1f:03:5e:
         fc:ba:15:c0:5b:87:9f:33:5a:d4:dd:26:97:5a:25:62:57:91:
         a0:ec:90:3e:fd:26:51:21:04:3a:83:b8:21:53:30:3d:63:d0:
         89:2b:23:1a:e5:56:79:8c:b1:49:a0:8a:a2:f9:08:3f:94:e8:
         38:7b:44:ed:f3:82:28:92:7d:30:8a:ae:a4:5d:62:cb:a1:bc:
         1b:f4:47:f0:53:f8:26:82:9d:59:c9:76:92:67:35:be:70:8e:
         d4:10:06:03:39:08:e2:dd:a0:64:1c:78:fe:0a:a7:c7:da:06:
         7f:d8:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----