Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa
File:                     e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa (raw, json)
Hash identifier:          vfPVVn9uL2XIRTLonXEMszYKnj0P/opLH/slaHF8hXI=
Subject key identifier:   1F:0D:C8:00:B7:4E:28:7C:E0:DC:82:E3:1E:BF:90:C2:FB:28:FF:32
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844A79F77EE68EFC6AE995F2DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa
Signing time:             Wed 24 Jan 2024 02:00:26 +0000
ROA not before:           Wed 24 Jan 2024 02:00:26 +0000
ROA not after:            Tue 23 Apr 2024 01:00:26 +0000
asID:                     63023
IP address blocks:        23.26.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 17:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a7:9f:77:ee:68:ef:c6:ae:99:5f:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 24 02:00:26 2024 GMT
            Not After : Apr 23 01:00:26 2024 GMT
        Subject: CN=24f7024f-e393-4b2e-9e6e-cb1adab62b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:85:f1:4d:57:be:ab:d4:cb:32:1a:ae:5a:
                    79:0b:06:ad:f3:20:1a:b0:e8:f4:60:b7:ba:96:95:
                    fd:80:1c:e0:a9:ca:78:b0:a2:8e:67:25:27:ee:c9:
                    1e:71:cd:d6:e4:f2:2d:a2:b2:df:0e:a2:45:8f:67:
                    f3:3e:d9:46:a3:8f:39:af:1a:11:53:41:18:17:b8:
                    46:74:23:41:67:b1:b4:75:1e:b3:43:81:eb:46:41:
                    32:36:fa:58:28:3b:8a:de:18:9e:4c:55:85:d3:43:
                    a6:0d:58:53:59:a1:1d:35:5c:89:d9:78:3b:1a:8d:
                    ab:e5:9d:88:5f:60:42:1a:51:a1:86:57:e9:43:7b:
                    71:79:3d:c4:d7:96:72:a2:9e:d4:7f:73:81:31:6e:
                    95:31:b7:7d:bd:a2:85:c6:5b:f6:dd:ee:fb:7e:e1:
                    14:a1:5b:e0:0b:01:81:10:90:45:77:ce:ce:1e:a3:
                    62:6c:ee:85:53:7f:9e:91:b7:ef:8b:a3:28:37:23:
                    70:eb:db:db:0d:0c:f6:20:33:97:2e:d2:86:28:cc:
                    71:ce:ea:69:3b:f0:08:63:48:6f:04:03:84:37:55:
                    3f:07:7e:6c:f3:39:d4:31:3a:e5:96:d6:be:66:a0:
                    97:60:a2:11:de:1d:c7:96:60:9f:81:f7:9a:f6:a5:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:C8:00:B7:4E:28:7C:E0:DC:82:E3:1E:BF:90:C2:FB:28:FF:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e0f751d2-ce8b-3f66-89ac-f749cf83f37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:5b:0b:a6:50:83:db:87:15:20:f3:45:47:33:07:66:a4:
         24:b5:3c:69:69:95:af:f2:ac:1f:94:36:94:05:15:33:83:c4:
         95:48:f6:2e:f7:60:4e:4a:06:42:22:12:25:cd:89:1f:52:48:
         12:ab:7d:3d:ca:60:fc:59:89:aa:5c:2f:0a:76:82:3e:76:72:
         d0:c5:ea:75:73:e9:23:0d:9f:20:d6:93:76:7f:de:0c:1a:a4:
         2a:d2:09:c2:4d:1a:62:ac:a9:58:92:5c:33:2d:7d:ae:30:2a:
         fa:df:a1:21:8f:36:70:c2:9d:79:af:fe:64:56:6d:21:7d:80:
         97:45:63:f2:e3:8c:ce:4f:da:4a:d3:ac:c0:70:dd:12:65:dd:
         5b:24:60:ed:17:ea:b4:01:0a:ea:cb:ff:d5:04:07:ad:24:58:
         d6:00:2f:e5:50:18:6d:e0:8d:a5:a0:de:18:00:18:b7:88:1b:
         27:a5:e6:7a:49:a2:cf:ec:7d:02:31:4a:7b:46:a6:6e:9f:87:
         22:9f:bc:d5:f6:c7:ae:f4:5e:b8:58:a3:b1:c0:24:a9:d4:ca:
         2b:1c:c7:b5:9f:68:e4:92:7c:f5:a3:39:bf:0e:71:02:50:2f:
         74:18:3f:74:3f:c7:aa:de:e5:37:9a:57:36:be:9f:9e:fb:ee:
         f2:d6:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----