Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfd65b3e-8a0b-3f23-a435-58fbb7e3df54.roa
File:                     dfd65b3e-8a0b-3f23-a435-58fbb7e3df54.roa (raw, json)
Hash identifier:          0nsp4TXIDEBmrY3BvlgBJfZfxtYXtcwt9hcSsm2Ih20=
Subject key identifier:   1C:4D:0D:A1:EE:60:E8:C4:4C:B5:7E:2A:5D:B4:B2:C2:96:66:6C:96
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446F578FE6369CC58C11380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfd65b3e-8a0b-3f23-a435-58fbb7e3df54.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 03 Aug 2023 14:31:00 +0000
asID:                     397423
IP address blocks:        23.26.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:f5:78:fe:63:69:cc:58:c1:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  3 14:31:00 2023 GMT
        Subject: CN=ff079154-700a-4966-8c3c-f953bdf2256d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:99:e7:5c:11:87:5c:21:34:8c:ff:0a:48:
                    73:e6:c0:c7:61:8a:b4:5e:71:1c:a0:9b:5e:05:64:
                    19:a0:61:d9:e1:24:8c:2c:7e:2f:b0:c0:60:05:39:
                    60:38:c0:6e:9e:39:c6:5a:e7:ec:fd:7f:68:26:0a:
                    fe:bd:a9:2d:3e:88:45:f3:e1:f2:f2:20:50:04:07:
                    37:10:68:36:2d:1e:a7:05:85:c2:a9:e8:9d:1c:e8:
                    fe:2a:f9:2b:8d:dc:ef:41:c4:fd:69:88:48:e2:55:
                    10:49:8e:de:cb:89:7a:66:97:5d:9e:d3:29:73:96:
                    67:6c:4c:c0:5c:4c:e9:3d:47:66:61:a5:8f:34:76:
                    d4:89:34:2f:5b:a4:b3:3c:57:3e:c7:f0:e9:1c:de:
                    92:cf:4e:59:ef:81:14:38:1e:38:46:90:7a:de:28:
                    63:a5:97:06:67:52:48:1d:cc:53:b3:8d:de:8d:b7:
                    6c:4c:2c:2f:8f:11:2a:55:91:20:a6:6a:c1:28:b3:
                    3c:c1:6f:a1:16:98:f5:d2:74:d7:cb:3e:3e:4a:35:
                    30:87:94:14:01:13:ad:61:11:31:8a:56:78:e2:4f:
                    0a:1b:09:7b:9a:aa:9e:3f:a1:aa:f4:96:c7:39:8b:
                    6c:d9:45:6d:8b:ce:53:01:c3:60:6c:ee:cc:b0:2f:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:0D:A1:EE:60:E8:C4:4C:B5:7E:2A:5D:B4:B2:C2:96:66:6C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfd65b3e-8a0b-3f23-a435-58fbb7e3df54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:e2:f3:c9:54:31:62:8e:4d:8b:6e:fa:a9:29:9a:de:b4:
         c3:d2:1e:29:bb:ad:97:67:c3:38:d1:22:03:de:75:aa:7e:24:
         64:3b:0b:31:fa:b7:30:ca:50:83:e7:9e:b5:a9:ea:88:d3:e7:
         eb:3a:5a:60:c9:b0:48:d1:3e:9d:ee:01:b5:9c:2d:57:9a:dd:
         7d:16:4b:4b:25:b5:b8:26:ab:bf:d3:96:c0:fa:41:2d:2d:de:
         b4:d4:bd:fa:14:b5:9e:7c:e3:06:73:53:fb:42:ae:b2:57:e7:
         e1:b6:42:5d:4f:d1:9f:cf:57:eb:ca:dc:5c:6b:38:cd:d9:bf:
         ad:1a:f4:05:0e:b6:95:10:bd:4a:9b:c2:79:f5:83:fa:ae:75:
         0e:74:a2:f2:a1:4c:35:f6:62:66:54:41:e0:48:c8:ac:6e:fa:
         11:b5:27:e5:84:7e:1f:d1:09:4f:70:a7:0a:d8:02:25:49:33:
         46:19:b0:a9:dd:e0:0b:32:df:3e:1f:1a:42:e4:b2:5e:5a:a2:
         dd:c1:ee:8d:32:9e:f6:62:ac:a5:f7:71:5d:92:f7:f7:25:09:
         c5:dd:e6:04:ca:48:d0:00:ff:83:e0:da:13:bb:ca:57:b6:95:
         89:be:78:bb:92:60:e5:1a:f9:09:85:e2:8e:23:3f:47:d9:e1:
         db:fd:44:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRvV4/mNpzFjBE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwMzE0MzEwMFowLzEtMCsGA1UEAxMk
ZmYwNzkxNTQtNzAwYS00OTY2LThjM2MtZjk1M2JkZjIyNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRSZ51wRh1whNIz/Ckhz5sDHYYq0XnEcoJte
BWQZoGHZ4SSMLH4vsMBgBTlgOMBunjnGWufs/X9oJgr+vaktPohF8+Hy8iBQBAc3
EGg2LR6nBYXCqeidHOj+KvkrjdzvQcT9aYhI4lUQSY7ey4l6ZpddntMpc5ZnbEzA
XEzpPUdmYaWPNHbUiTQvW6SzPFc+x/DpHN6Sz05Z74EUOB44RpB63ihjpZcGZ1JI
HcxTs43ejbdsTCwvjxEqVZEgpmrBKLM8wW+hFpj10nTXyz4+SjUwh5QUAROtYREx
ilZ44k8KGwl7mqqeP6Gq9JbHOYts2UVti85TAcNgbO7MsC+48wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxNDaHuYOjETLV+Kl20ssKWZmyWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGZkNjViM2UtOGEwYi0z
ZjIzLWE0MzUtNThmYmI3ZTNkZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELx4vPJVDFijk2LbvqpKZretMPSHim7rZdnwzjRIgPedap+JGQ7CzH6
tzDKUIPnnrWp6ojT5+s6WmDJsEjRPp3uAbWcLVea3X0WS0sltbgmq7/TlsD6QS0t
3rTUvfoUtZ584wZzU/tCrrJX5+G2Ql1P0Z/PV+vK3FxrOM3Zv60a9AUOtpUQvUqb
wnn1g/qudQ50ovKhTDX2YmZUQeBIyKxu+hG1J+WEfh/RCU9wpwrYAiVJM0YZsKnd
4Asy3z4fGkLksl5aot3B7o0ynvZirKX3cV2S9/clCcXd5gTKSNAA/4Pg2hO7yle2
lYm+eLuSYOUa+QmF4o4jP0fZ4dv9RII=
-----END CERTIFICATE-----