Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c30baeca-4cfb-3c9b-bb29-661f0d6130e8.roa
File:                     c30baeca-4cfb-3c9b-bb29-661f0d6130e8.roa (raw, json)
Hash identifier:          j/WmfSQJSXD2hBamwyXrrDdn6GBJ3Dz3rN4mIgktiR4=
Subject key identifier:   26:C9:C1:12:62:29:4D:70:36:69:D5:97:97:D8:7D:8F:20:E1:BF:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285843C10A4736A2D072A1F2024B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c30baeca-4cfb-3c9b-bb29-661f0d6130e8.roa
Signing time:             Thu 02 Nov 2023 11:43:55 +0000
ROA not before:           Thu 02 Nov 2023 11:43:55 +0000
ROA not after:            Wed 31 Jan 2024 12:43:55 +0000
asID:                     400402
IP address blocks:        23.26.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c1:0a:47:36:a2:d0:72:a1:f2:02:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  2 11:43:55 2023 GMT
            Not After : Jan 31 12:43:55 2024 GMT
        Subject: CN=7ecc79e6-8430-4a9c-a474-202cf993c3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:04:9d:bf:a4:f6:49:6d:01:7b:65:da:5d:
                    44:3e:0e:c4:78:51:f8:76:ed:83:30:60:d8:7b:4a:
                    6d:9b:0d:41:fd:d7:cb:48:f0:da:06:00:71:6d:c6:
                    46:b4:99:f4:fc:83:92:67:9e:ce:71:5d:f6:8a:0e:
                    d6:19:7c:72:7e:7e:39:9c:d7:5a:1d:65:4b:66:ae:
                    ab:7a:79:d4:9d:12:76:1b:2c:8d:d5:2a:b5:84:d4:
                    0c:e6:d5:01:4f:76:3c:6a:53:f1:b8:bf:43:ff:87:
                    b4:31:8e:9f:43:a2:5f:52:0e:1b:57:fe:6c:5c:a2:
                    b6:60:d9:37:70:c3:c5:e3:9c:64:ed:3f:3a:e0:f6:
                    97:f9:38:64:3a:ef:16:3e:77:08:2d:0f:71:a3:d3:
                    86:78:8a:b9:7c:d5:d8:98:78:3b:07:35:0b:ae:db:
                    dc:ac:6a:84:35:ab:5a:98:c5:79:c4:26:20:6f:8c:
                    db:4d:eb:c4:5f:83:45:69:f9:5f:d8:a3:dd:2f:b5:
                    6d:73:ff:b6:30:c5:63:24:e0:3b:60:5d:4f:00:ba:
                    ce:f0:89:12:ba:e7:89:c3:b2:4c:dc:a0:b7:90:64:
                    57:86:0e:25:0e:9f:02:d0:f3:b9:c0:36:32:3a:5c:
                    15:74:cf:41:40:34:c2:ae:8c:96:4f:5b:f5:bc:24:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:C1:12:62:29:4D:70:36:69:D5:97:97:D8:7D:8F:20:E1:BF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c30baeca-4cfb-3c9b-bb29-661f0d6130e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e0:19:95:50:0f:de:ed:96:39:9a:51:2e:ee:7b:30:8a:83:
         cc:2a:47:44:0d:79:81:83:91:6d:11:43:3b:76:8b:52:a2:b4:
         45:66:f4:30:f7:39:1e:e5:77:de:39:de:de:9c:58:5e:1d:96:
         a7:1d:63:b8:25:29:7d:eb:d5:0f:c2:7a:fa:ce:be:56:2c:15:
         9f:d7:ef:22:4e:ca:6d:5a:dd:69:9d:15:17:e1:9c:ab:c4:ea:
         96:a7:18:51:58:22:58:a5:26:5c:fc:ee:c3:d9:af:c3:15:c9:
         bd:f0:59:a2:06:9b:67:85:52:47:54:ea:7a:ab:c0:48:8c:aa:
         8c:4b:13:46:ed:0e:23:be:ed:c6:da:dc:0a:c5:f7:1e:fd:08:
         e4:41:30:75:11:b4:29:a2:70:48:34:2d:97:19:ee:e4:4f:17:
         07:40:5d:23:d0:f3:7e:35:83:50:e3:51:e6:44:fd:7c:cf:99:
         f3:6c:77:81:5a:e3:08:43:60:f5:2d:6e:a3:27:9d:1f:d8:ee:
         c9:35:00:5f:1f:9d:03:81:a9:eb:48:a0:02:83:d6:82:e4:d8:
         37:5b:cb:11:4a:c5:08:6f:b3:1c:29:9a:84:a4:54:94:18:6b:
         62:ed:ae:8f:a0:ed:4e:e6:60:12:2f:4c:a2:68:00:5e:38:e5:
         8d:c7:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 18:22:37 2023 by rpki-client on console-fra.rpki-client.org