Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b97330-06ed-3404-a0d4-696d5cefa453.roa
File:                     e9b97330-06ed-3404-a0d4-696d5cefa453.roa (raw, json)
Hash identifier:          xMX4LhP3df1HRZ1R3OkLeD1tYIXXrzRmx5rDymrNEJg=
Subject key identifier:   8C:B2:E4:69:CF:E6:B1:EF:63:0B:C7:17:47:2E:C2:22:D7:A1:17:3E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584297DE5776D87155A8F4FEAF7C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b97330-06ed-3404-a0d4-696d5cefa453.roa
Signing time:             Wed 19 Jul 2023 01:00:17 +0000
ROA not before:           Wed 19 Jul 2023 01:00:17 +0000
ROA not after:            Tue 17 Oct 2023 01:00:17 +0000
asID:                     398465
IP address blocks:        23.26.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:de:57:76:d8:71:55:a8:f4:fe:af:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 19 01:00:17 2023 GMT
            Not After : Oct 17 01:00:17 2023 GMT
        Subject: CN=b0c5d489-a474-42fc-869e-2654437bd148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:8c:31:c0:e1:5a:ac:45:33:16:48:06:71:
                    bd:50:f7:56:c4:98:90:ce:f8:1e:50:09:16:2e:f9:
                    d7:74:25:c5:20:89:6f:e3:12:d8:0b:f6:8e:b1:68:
                    de:4f:6c:47:1d:e2:38:aa:b2:f6:a0:46:30:47:b1:
                    1a:ae:da:1a:a4:c6:57:28:81:e9:67:76:1b:65:3e:
                    d7:fc:5c:fb:19:e6:c6:23:fe:bc:4a:87:08:6d:ff:
                    5b:d4:6e:74:8f:bc:6e:fd:f2:d4:35:52:a5:f7:90:
                    20:a8:4d:53:00:fe:f4:49:8c:dd:a1:9d:23:cf:c9:
                    06:1a:32:8b:74:1a:92:8e:ec:5d:73:ad:f8:7a:f8:
                    85:f2:2d:d4:74:4a:26:a1:c9:b8:44:59:0e:5b:4a:
                    b0:d8:f4:a1:05:9e:82:e7:80:af:84:29:87:38:ec:
                    73:0e:eb:d3:a5:1c:d8:55:0c:38:d2:ea:23:80:0d:
                    a8:82:b4:58:f9:bd:46:54:73:7b:79:1b:33:ad:27:
                    cb:8e:53:9e:8c:19:75:d3:d0:f0:27:92:28:5e:0b:
                    30:24:3a:c6:5a:fe:16:65:a0:93:7b:a6:30:32:00:
                    dd:4f:2a:f1:b0:4b:94:34:43:16:4b:01:42:13:3e:
                    7d:61:4a:9a:37:b9:fd:80:41:a6:67:a1:77:88:0b:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:E4:69:CF:E6:B1:EF:63:0B:C7:17:47:2E:C2:22:D7:A1:17:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9b97330-06ed-3404-a0d4-696d5cefa453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f3:76:cf:67:df:37:e5:d8:1a:32:9c:b7:f7:b2:b0:12:b3:
         db:59:2d:50:18:83:69:64:39:dd:b9:c8:b5:d0:a1:75:ed:cd:
         70:fe:8d:84:12:0b:3a:79:87:1d:05:60:a0:db:e2:05:d2:aa:
         91:12:58:20:3f:ee:58:05:12:fa:66:86:29:45:f3:4f:eb:9e:
         15:9c:14:68:ff:fd:fc:0f:0e:19:5a:3a:ac:e8:ac:fa:58:f0:
         bd:47:e1:17:bd:fa:bd:8b:af:70:c2:2f:e8:33:1d:63:b3:37:
         17:a1:75:4b:92:67:27:e3:c1:98:bc:ec:7b:d6:9b:84:94:7a:
         5a:48:28:5d:ab:14:6f:2f:c6:61:b7:1e:f9:de:38:cd:bc:7d:
         d0:94:8b:c6:e6:23:88:db:59:cf:ee:d0:11:8d:b6:84:71:d8:
         a5:f0:52:b9:9a:2e:9a:05:9e:7e:c3:3b:d4:5d:89:33:d5:b7:
         29:f0:28:c4:31:89:06:40:59:cd:60:70:b2:3f:81:8f:b3:07:
         3a:f5:f6:81:1d:06:1d:1c:74:09:f2:7f:ba:e3:fb:b8:b7:65:
         7c:38:67:1e:c5:3b:09:1e:14:19:30:3d:ed:29:5a:dd:5d:ac:
         6a:85:1f:b9:09:44:f6:de:7f:9c:d8:bb:08:10:ee:9c:c0:cd:
         3a:7c:ff:31
-----BEGIN CERTIFICATE-----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