Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d91fa0c8-b698-3931-80a3-80808cba7db0.roa
File:                     d91fa0c8-b698-3931-80a3-80808cba7db0.roa (raw, json)
Hash identifier:          GZz/NI/VCI3VU12QijjO7D0fElmllwKR2Jg5uncIh+k=
Subject key identifier:   24:EB:42:12:17:4F:04:3F:51:60:27:37:6A:1D:52:27:C2:23:31:E5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584296FC88423E23AB6FF755BC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d91fa0c8-b698-3931-80a3-80808cba7db0.roa
Signing time:             Tue 18 Jul 2023 17:25:20 +0000
ROA not before:           Tue 18 Jul 2023 17:25:20 +0000
ROA not after:            Mon 16 Oct 2023 17:25:20 +0000
asID:                     834
IP address blocks:        23.26.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:96:fc:88:42:3e:23:ab:6f:f7:55:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 18 17:25:20 2023 GMT
            Not After : Oct 16 17:25:20 2023 GMT
        Subject: CN=fbffc683-1ecd-426b-b1a6-8c58fde371a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:f2:f4:cb:e6:46:f8:02:65:c7:bc:b5:57:
                    0e:a3:e4:57:62:af:1e:ac:92:fe:9c:a6:b7:a3:a6:
                    ea:ee:b9:39:f8:7c:8f:df:99:33:9f:aa:31:a2:77:
                    ef:21:93:f7:ca:21:b1:0d:df:29:17:25:e8:c8:03:
                    6c:e9:93:f1:3f:5b:45:8f:99:c0:6b:35:a7:37:6c:
                    16:b2:03:92:c4:6d:63:69:69:09:a6:88:18:5a:ad:
                    a2:0d:cd:49:95:0f:e8:da:5f:a1:23:ac:81:f7:c8:
                    bc:64:b0:72:34:99:c6:fb:34:69:ff:f3:b6:2a:51:
                    f9:93:3b:4d:ae:e4:26:e9:ad:93:33:fb:1c:83:c6:
                    3b:cd:1b:b1:f6:7a:e0:28:06:63:c9:a0:6b:15:7c:
                    db:14:d0:e2:ca:45:09:b6:15:3b:0b:35:0d:17:69:
                    c7:c6:bc:9c:9e:bb:d4:df:5a:49:f1:37:25:77:1b:
                    89:80:14:75:bb:d2:b9:43:f7:dd:d7:d5:0a:f3:eb:
                    ad:a3:ed:44:ce:2a:cd:23:db:b2:36:1c:8b:90:be:
                    90:48:b1:f0:b6:94:be:bd:02:fd:55:0e:99:56:85:
                    11:db:89:30:d8:d5:65:d6:7c:f9:c3:4d:dd:a1:3c:
                    86:85:c4:d6:11:89:d7:cf:69:45:ea:d5:9c:46:11:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EB:42:12:17:4F:04:3F:51:60:27:37:6A:1D:52:27:C2:23:31:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d91fa0c8-b698-3931-80a3-80808cba7db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:40:da:8c:cf:ea:3c:69:57:75:1e:36:92:c9:4d:2f:bb:
         86:a2:f8:29:68:69:c2:69:b1:c4:ec:74:6a:b9:73:19:b0:00:
         06:ba:3b:10:2a:a4:66:51:30:68:31:b8:b0:c5:9d:26:5b:03:
         1d:3b:ed:c7:fd:1c:4b:9b:9d:ca:93:35:a4:3a:dc:24:bf:d0:
         e9:32:9c:15:0f:b6:8d:84:59:7d:00:9d:b7:d7:27:5c:8d:1b:
         aa:db:26:af:b8:e9:bb:ab:90:4e:b0:3d:f3:f0:97:7e:9c:2f:
         3a:71:42:b3:bd:68:6e:93:fe:a8:c9:51:75:59:af:e0:b7:52:
         5f:ba:fc:5b:e0:28:49:9a:ca:bb:ee:20:72:94:9f:d3:e9:d7:
         3d:68:a4:cd:28:bc:52:3f:91:ae:f0:34:d5:46:6a:be:8f:ad:
         86:ea:ad:e7:aa:0e:91:12:90:24:e7:45:08:2a:39:f8:ef:db:
         f9:fa:c6:b6:0b:a7:ab:51:76:86:1f:e8:f4:fe:93:87:ee:43:
         7e:25:fa:68:e2:42:66:6d:bb:25:8a:89:37:99:7a:2a:cd:ed:
         de:d4:8f:c0:cd:9a:73:3e:7f:d8:09:75:16:ff:b5:02:4e:e3:
         1e:b3:70:8a:9c:a0:0e:ac:f6:fd:6d:c0:36:40:45:7b:b7:b9:
         33:61:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----