Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c2c5af45-80c8-3241-b545-78009d5a848e.roa
File:                     c2c5af45-80c8-3241-b545-78009d5a848e.roa (raw, json)
Hash identifier:          Rd37foGMINqBDleHu7THB6mM4AUGaO6dYyOMVF8oN3A=
Subject key identifier:   58:83:D7:93:F6:71:F5:74:40:E7:63:83:31:1E:79:1D:32:E1:82:0B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858422A053A5D870C1DD6C4AFE200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c2c5af45-80c8-3241-b545-78009d5a848e.roa
Signing time:             Fri 09 Jun 2023 16:39:45 +0000
ROA not before:           Fri 09 Jun 2023 16:39:45 +0000
ROA not after:            Thu 07 Sep 2023 16:39:45 +0000
asID:                     7018
IP address blocks:        23.26.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2a:05:3a:5d:87:0c:1d:d6:c4:af:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 16:39:45 2023 GMT
            Not After : Sep  7 16:39:45 2023 GMT
        Subject: CN=609694ca-62a2-4682-8773-bd388788be4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:7f:6c:1b:39:89:c9:03:5d:3a:28:e5:eb:
                    d7:65:c0:ea:7c:28:e8:c2:f5:94:25:cd:58:51:f5:
                    21:55:67:30:72:12:31:91:63:9d:9d:78:47:8c:60:
                    8b:14:59:72:6e:52:86:1e:7a:2c:99:b8:e7:6a:ca:
                    68:7a:4d:9b:57:ae:a5:37:98:e4:07:e2:17:4f:df:
                    7a:15:bd:21:b2:26:5e:59:84:cc:c4:37:04:51:5b:
                    da:90:20:45:2d:59:c6:62:9f:4d:2b:79:01:42:9b:
                    b9:68:cf:6d:09:9c:88:22:0f:61:73:7d:c9:28:7a:
                    9e:e1:2d:43:4d:c2:93:24:2a:71:d5:f6:25:ad:58:
                    c2:a1:49:31:31:fa:87:91:b6:e0:0f:65:11:4e:b8:
                    a9:ea:47:5e:e2:14:a5:16:14:79:95:f5:88:c2:5c:
                    ca:91:b3:55:bc:e6:c7:4e:75:b7:46:7f:16:f1:a7:
                    9c:87:f4:a0:d6:21:44:34:51:e6:5c:3e:1a:27:d8:
                    3b:87:74:be:8e:bc:dd:71:14:55:3f:9d:e3:1f:e6:
                    ac:31:77:28:3e:a3:2a:78:13:c9:79:38:96:69:0d:
                    ea:f5:fc:b0:f3:df:c3:34:01:f1:61:87:09:b8:04:
                    6a:47:0a:7f:b2:d0:95:04:49:9f:2c:c6:a2:c3:fd:
                    4c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:83:D7:93:F6:71:F5:74:40:E7:63:83:31:1E:79:1D:32:E1:82:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c2c5af45-80c8-3241-b545-78009d5a848e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:01:7c:ab:6e:5c:da:d3:23:0f:6a:cd:55:c3:c0:95:ba:
         db:f6:33:e8:ef:39:56:01:0d:e7:27:92:a8:b7:97:d3:88:92:
         71:28:e6:af:ec:1c:95:c5:e7:53:3e:24:d1:c8:e6:3f:64:7f:
         8f:41:68:0e:34:bd:5d:81:a1:50:bd:fa:72:43:dd:e7:f6:c4:
         12:23:fc:4d:c6:00:ae:de:31:d6:1b:21:33:44:44:d5:62:24:
         71:27:7a:44:03:10:ed:55:62:ba:7f:aa:9b:3a:df:2e:0d:77:
         7e:23:b3:fe:12:38:22:fd:ce:49:66:23:21:45:b6:bc:64:6b:
         07:01:32:43:46:c4:f8:97:c5:fa:06:01:d4:90:25:74:41:8b:
         95:e8:54:e1:e7:80:0e:48:0f:16:8b:5c:34:87:e7:12:83:29:
         31:34:17:51:ef:e9:20:ef:ca:55:1f:a1:d9:5a:1f:30:5b:4b:
         b7:3f:e5:f9:a2:5c:93:2f:dd:9b:92:06:59:e3:45:00:43:f7:
         3b:4c:18:6e:ed:23:2c:94:44:cc:2e:df:6c:53:19:60:d0:60:
         57:5a:5f:ed:eb:63:d1:f6:25:57:a7:5b:68:46:8b:b3:e9:22:
         6f:62:c7:f4:e5:76:4d:49:60:68:10:c8:78:75:92:05:dc:da:
         b8:25:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----