Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcc884b7-209b-3077-b086-a9140fdaab73.roa
File:                     dcc884b7-209b-3077-b086-a9140fdaab73.roa (raw, json)
Hash identifier:          VMdHUfdSjSs1amISJmhs4k+49HxGVo6clA8K0vr1vME=
Subject key identifier:   DF:CC:E0:3B:13:6F:B3:23:24:59:30:9F:F8:E9:30:B7:D4:BF:ED:B0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858414AED364597E6721FA95187E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcc884b7-209b-3077-b086-a9140fdaab73.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 23 Jun 2025 04:00:00 +0000
asID:                     397423
IP address blocks:        23.26.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:ed:36:45:97:e6:72:1f:a9:51:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 23 04:00:00 2025 GMT
        Subject: CN=f21a73da-03ab-42b9-9f5d-0240b022e35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:5b:f8:ac:93:4f:a7:73:31:0e:28:c5:35:
                    c9:c8:cc:ac:4a:54:e8:c8:0b:ea:b2:1a:e6:56:09:
                    32:76:ec:61:a5:b3:b4:c9:2a:05:3b:db:6f:23:77:
                    81:54:87:de:18:95:e8:cc:4e:a9:72:f9:a1:53:24:
                    5c:1c:02:92:11:f4:be:f9:ae:96:41:c0:b0:28:b1:
                    6b:56:57:cc:25:a6:6f:1e:70:93:74:19:17:d5:95:
                    f5:78:a2:ba:65:3b:23:fe:4d:41:44:93:c1:75:af:
                    b3:66:66:97:79:79:fc:fa:e0:86:b4:63:cb:95:54:
                    ff:75:ce:cb:df:97:8d:e2:5d:22:55:63:66:e0:80:
                    b9:25:57:a6:d4:87:a9:93:ca:f7:f0:c6:49:96:de:
                    e7:51:8e:79:be:fc:44:1f:36:9b:cb:e1:91:48:01:
                    d1:09:0c:94:ca:c9:76:e3:ac:fe:e5:5c:08:86:3a:
                    1b:36:67:9c:d6:1e:f0:5a:2e:1d:1b:fa:d7:36:e5:
                    88:c4:c0:a6:20:2b:31:2e:7c:0f:2c:81:e0:62:1a:
                    b2:c6:0f:ae:23:13:f1:1f:0f:e7:5a:37:29:f9:92:
                    63:d9:f0:8e:53:17:81:b8:48:f5:a8:25:11:91:f2:
                    03:0e:48:23:14:69:e7:c3:ca:d1:93:58:89:92:69:
                    ea:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:E0:3B:13:6F:B3:23:24:59:30:9F:F8:E9:30:B7:D4:BF:ED:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dcc884b7-209b-3077-b086-a9140fdaab73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:32:9f:76:c2:81:5c:5d:b7:b9:fc:4c:23:2a:2b:9a:93:94:
         2d:1f:65:97:d5:fb:33:8f:ee:03:3e:20:c9:b1:00:60:4c:1a:
         e7:1d:4c:dd:97:07:21:e7:bc:d1:b6:87:a6:20:32:6d:69:ae:
         db:06:13:be:2f:17:39:cc:c6:f2:29:9f:45:b4:4d:ec:ed:8b:
         78:09:a8:a2:3d:c4:5e:6c:db:54:f6:6c:00:d0:43:2b:50:36:
         a0:55:79:dc:c9:43:7b:65:a6:00:66:c2:90:66:38:8f:ec:dc:
         76:2c:03:51:93:05:a1:81:7a:3d:6e:d6:4d:ca:bc:2a:ac:8e:
         fd:fd:9d:ab:c0:d9:d8:d4:07:e4:0b:8f:a2:15:76:cf:ca:99:
         6e:6f:96:a8:4b:c2:b6:b4:df:e5:3b:ad:08:c9:9c:1e:a0:13:
         87:b5:06:a9:1b:e6:f2:e7:6a:b1:31:c0:15:7f:dc:a7:ba:60:
         66:42:22:b2:39:ef:6f:1e:38:52:50:0e:3d:64:11:48:15:18:
         ba:28:1d:8e:a8:a0:f1:fd:ac:21:71:13:9d:3b:fd:3f:ad:4c:
         de:2a:9d:39:f5:ae:34:75:19:4d:6d:b7:1b:08:32:95:fe:f5:
         7d:c7:1d:65:77:44:aa:af:62:8a:44:8c:a6:98:99:be:59:95:
         d6:35:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----