Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c526155e-14df-3e73-8668-49285fe8589d.roa
File:                     c526155e-14df-3e73-8668-49285fe8589d.roa (raw, json)
Hash identifier:          SvLMAFHLfkMFwO0oq1uNlNEPSoc48dt5PYVMPVCKXBw=
Subject key identifier:   12:E3:9E:35:F8:4F:1F:16:80:3F:E0:79:CF:29:D6:13:2F:1D:88:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F6A2EA40BE3201434EA8FC940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c526155e-14df-3e73-8668-49285fe8589d.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 02 Jan 2025 05:00:00 +0000
asID:                     150303
IP address blocks:        23.26.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:6a:2e:a4:0b:e3:20:14:34:ea:8f:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jan  2 05:00:00 2025 GMT
        Subject: CN=8cf9e6d2-61a9-41f4-90aa-b0f9340c8ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:06:d9:e7:58:14:f8:b5:85:98:a0:fa:da:
                    ce:ba:75:94:78:b3:02:c8:09:9d:55:8a:3d:97:f1:
                    35:16:84:34:f8:10:9e:2c:db:4c:89:a3:5e:d4:4b:
                    18:a4:bc:32:52:9e:ef:c2:db:92:6e:af:9f:5b:76:
                    be:50:d6:2b:ca:9e:ed:a9:64:81:8c:0a:a4:1f:2a:
                    eb:7e:c1:65:b4:13:5a:01:42:b3:9a:f4:42:2a:7b:
                    fc:b7:fe:4e:68:1a:3b:50:5b:3d:cc:ad:ff:1a:6e:
                    51:ac:c1:fe:d2:0a:d8:05:cb:10:38:f8:db:25:4e:
                    9e:d9:02:f1:b6:0a:9e:19:31:9e:58:62:1a:93:39:
                    cf:3d:14:24:0f:1d:c1:93:ad:4c:5a:2b:b6:86:d2:
                    1d:2f:6a:fa:7b:93:56:8e:c7:ed:72:ed:39:eb:cc:
                    97:41:9f:b9:af:e9:92:ee:84:79:26:3b:73:71:b5:
                    14:08:02:2a:07:14:63:eb:99:eb:eb:e9:78:e6:33:
                    34:e6:04:36:0a:5d:a8:1f:a1:4b:55:5a:8d:57:c0:
                    e0:3b:66:18:2e:51:b3:e5:89:6e:59:83:c3:6b:6b:
                    a4:7d:4a:3e:18:f6:10:5d:57:96:10:e7:de:fe:c3:
                    56:a0:bc:23:d4:ea:d3:3e:5b:bf:dd:1b:ac:5c:62:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:9E:35:F8:4F:1F:16:80:3F:E0:79:CF:29:D6:13:2F:1D:88:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c526155e-14df-3e73-8668-49285fe8589d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:34:17:70:6c:f1:77:12:92:ad:14:27:a8:73:2d:9d:74:3b:
         44:30:c2:d2:e2:46:31:48:2c:29:8a:9f:87:14:63:cd:94:3a:
         74:05:e5:59:43:c0:ce:5b:90:ff:5c:92:56:67:fb:66:57:1c:
         76:43:23:14:23:ba:66:90:35:de:cb:2b:b9:7a:8d:67:bf:77:
         03:ff:5e:36:7e:df:89:0f:1b:6f:58:3b:49:9b:d6:04:f8:7c:
         1f:71:41:54:da:6b:33:01:6d:78:82:61:ed:02:cf:9b:f7:62:
         26:bc:60:c7:8f:b8:c7:ba:0c:23:90:6e:9c:1a:d3:87:ba:7f:
         b5:6b:73:0d:62:7c:86:45:69:82:45:77:f1:f4:fa:59:49:98:
         43:e4:7d:e1:29:19:af:06:87:1e:ec:bc:ed:2c:cf:f6:fb:39:
         9b:8a:48:d4:5a:f0:8d:e4:41:68:1f:61:9e:21:62:41:90:f6:
         a9:23:39:c9:d5:22:ed:63:b9:25:9f:d5:97:fa:b4:f6:36:a9:
         d4:01:5a:a9:55:e6:92:65:a3:89:d9:11:0f:c4:89:1b:08:15:
         78:ec:9d:83:2e:f4:08:7d:36:f1:24:b2:34:67:51:f2:7b:1b:
         35:86:5b:56:58:6b:de:e2:57:18:56:08:6e:e6:35:9d:ef:9d:
         2b:f6:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----