Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c833165b-03e4-322d-ba2f-1662e10b604b.roa
File:                     c833165b-03e4-322d-ba2f-1662e10b604b.roa (raw, json)
Hash identifier:          9RiU0wHzXud5Mwt1rTJZiyk2RZjkBH8jiRCJz1TrbUg=
Subject key identifier:   30:F7:BC:18:E4:4D:66:FC:A5:8E:55:5F:3E:30:2E:55:70:C1:2C:E4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E44EFDF9210DEEA5A0F02230
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c833165b-03e4-322d-ba2f-1662e10b604b.roa
Signing time:             Mon 15 May 2023 17:21:47 +0000
ROA not before:           Mon 15 May 2023 17:21:47 +0000
ROA not after:            Sun 13 Aug 2023 17:21:47 +0000
asID:                     834
IP address blocks:        23.26.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:4e:fd:f9:21:0d:ee:a5:a0:f0:22:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:21:47 2023 GMT
            Not After : Aug 13 17:21:47 2023 GMT
        Subject: CN=44477a16-4e90-4570-b786-b2fdd2e40a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:04:b9:d7:8c:33:e7:8b:17:01:30:a2:24:
                    91:f1:51:7a:e3:9e:2f:65:4e:78:95:77:46:39:23:
                    e5:5c:ec:1f:4c:db:31:d6:b0:b6:e3:c0:52:c5:8d:
                    04:9c:4c:0d:63:74:4f:26:d2:47:15:f0:fd:6f:a8:
                    9e:3b:ab:cc:51:d1:9a:d5:87:55:26:d3:68:e9:cf:
                    a3:0e:02:bf:d8:85:03:bd:c8:0f:3e:05:e4:cf:86:
                    be:5e:ae:cc:3f:34:c2:8a:0f:55:9d:45:ad:d9:a3:
                    83:3e:76:05:9b:da:0b:85:25:fd:3e:5e:80:73:9e:
                    6e:b6:d0:70:91:45:b3:cb:c9:4d:61:b3:a8:ab:7a:
                    65:88:91:56:a2:07:a8:5c:ac:46:d6:48:23:8c:30:
                    00:60:66:83:db:83:05:3f:e6:bb:3b:91:18:ee:b3:
                    08:18:fb:b6:a4:4b:4d:1d:24:b1:3c:48:18:31:83:
                    63:07:82:d9:97:6c:ef:22:82:e5:10:3e:27:ba:1a:
                    61:18:16:b6:18:05:71:91:85:0a:19:70:9a:35:72:
                    bc:18:8e:dd:3c:e5:e7:95:e0:76:23:c0:f5:e6:be:
                    f1:84:a2:e6:ce:6b:57:92:e5:f5:fe:12:17:10:8d:
                    01:77:5a:75:53:23:a2:e2:8d:cf:ad:e1:dc:92:57:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F7:BC:18:E4:4D:66:FC:A5:8E:55:5F:3E:30:2E:55:70:C1:2C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c833165b-03e4-322d-ba2f-1662e10b604b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2b:6b:c2:be:b1:42:3e:68:1a:ea:94:03:6f:61:3b:0e:01:
         64:d8:b8:e1:33:cb:77:87:28:c4:e5:64:6b:97:62:4d:db:2b:
         a3:cb:65:a9:90:c2:8b:3c:3f:a3:0a:77:f5:c6:eb:f7:c3:e1:
         be:ef:bc:0f:3c:d3:5f:00:ec:ea:be:f1:fd:a0:a4:c8:9a:2f:
         96:7b:d9:45:c4:8a:4e:c3:d9:5e:22:09:ba:bc:0d:aa:53:a9:
         02:e6:61:69:d4:6f:79:ae:9b:8c:69:50:81:ce:77:97:67:6d:
         f0:5f:a3:ea:a1:d8:98:f8:f2:d0:a0:87:0a:3f:8e:d8:27:4e:
         4f:b2:ea:49:16:f5:8c:16:43:7f:84:56:88:c2:cb:77:fc:3a:
         7f:0f:e3:67:1a:33:c9:f4:a7:c7:47:63:3c:3e:f8:55:bd:88:
         4a:30:14:13:95:56:ad:5f:f9:d9:c9:db:54:d2:08:7f:91:1c:
         1f:9b:f6:1e:dd:d0:fa:50:48:c8:e9:fb:7a:3b:09:0a:84:11:
         09:31:2d:c4:ef:92:45:1e:03:5f:89:7a:96:ab:37:b8:9c:65:
         a3:7c:24:36:b8:bf:d4:b6:73:7f:2b:e9:d5:87:e0:ea:63:77:
         00:5c:df:87:1d:0e:6d:37:6e:12:01:85:75:65:9a:4e:4f:eb:
         8f:b0:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----