Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ed4e5071-70cc-3dd8-a678-049956933b55.roa
File:                     ed4e5071-70cc-3dd8-a678-049956933b55.roa (raw, json)
Hash identifier:          SjcPM8mpKi5v9hjCLZnGsLEvghPYIUHOKKzFDdBIqM8=
Subject key identifier:   6C:E2:2F:63:C7:BE:65:E3:AA:B0:EF:1A:03:C0:4A:72:E4:98:8A:C6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583FEBB7846C7B8AEF0877D35180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ed4e5071-70cc-3dd8-a678-049956933b55.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 17 Feb 2025 05:00:00 +0000
asID:                     400536
IP address blocks:        23.26.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:eb:b7:84:6c:7b:8a:ef:08:77:d3:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Feb 17 05:00:00 2025 GMT
        Subject: CN=09f5ef17-5765-46d1-adf0-97189c072854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:46:25:f8:b5:9a:5c:e3:74:18:92:f4:99:
                    94:c4:3f:c1:47:13:ed:57:0d:39:27:ae:e3:a8:4a:
                    80:8c:a5:35:b5:54:ce:65:e3:96:6c:7e:b8:d4:a8:
                    6c:46:f1:76:12:36:80:3e:34:d6:12:42:49:71:21:
                    94:f6:32:86:2d:5e:29:41:be:0d:52:1e:6f:e3:5e:
                    5a:fa:0b:cf:17:ec:bf:7e:2c:b1:e4:32:db:6d:32:
                    43:ee:90:c0:9b:35:04:e1:da:e3:7b:cf:3a:21:15:
                    cf:30:f7:f0:ac:2b:fb:56:77:35:ca:7a:c5:d9:b0:
                    b9:9b:2a:6b:ce:c0:cd:b5:ce:c7:64:ba:59:d2:d2:
                    73:50:20:c1:9d:96:08:a1:0a:85:57:f1:bc:4c:56:
                    96:ae:0c:26:66:9e:04:fe:d3:99:c1:5a:7c:f2:af:
                    6b:32:f8:4a:62:1d:d4:bf:b7:01:6e:d4:78:5e:c4:
                    0d:f3:86:99:62:a6:4c:74:3e:37:cc:a6:62:f7:46:
                    1c:c0:c2:84:0c:da:a7:d6:d0:28:ce:80:81:a8:66:
                    05:f1:a4:e1:3c:bd:fa:a8:19:b3:47:91:18:b9:af:
                    a5:4c:a2:78:36:f6:04:91:df:b9:ab:62:e6:b2:b5:
                    e9:48:8f:6c:c7:1d:e8:5f:b1:f3:cf:ad:22:17:b5:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:2F:63:C7:BE:65:E3:AA:B0:EF:1A:03:C0:4A:72:E4:98:8A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ed4e5071-70cc-3dd8-a678-049956933b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:07:ce:8d:e4:ed:af:8b:90:55:36:a7:84:2e:c0:08:92:ae:
         f1:7d:32:cb:fd:e8:25:64:e7:6f:de:76:bb:f4:f1:49:b1:b8:
         61:65:30:d9:4a:b2:59:e9:b2:55:8a:63:04:ca:64:15:c8:ac:
         be:53:c6:02:aa:87:7d:f2:7a:fc:83:c6:7b:92:02:69:ab:6b:
         4c:bd:a1:16:6b:bd:0e:ee:00:29:a5:da:c3:5e:f9:32:42:a5:
         15:22:de:f1:e8:29:b6:41:4f:c6:df:46:66:bf:a7:f0:d2:45:
         62:c6:61:55:be:c6:d7:f0:dd:c8:5c:9e:82:ae:90:22:a4:62:
         99:b8:0a:81:ae:b4:7e:bb:3c:c5:d2:be:df:12:ec:be:18:41:
         bd:05:76:66:0c:99:ff:6e:f6:e3:ac:69:f6:dc:60:08:06:7c:
         b6:51:37:be:cc:b0:6b:f4:d3:b0:9c:70:ab:ac:56:48:c9:ee:
         19:fa:46:e5:19:4a:4d:b9:d3:1d:ad:43:89:c4:9f:d3:c2:b8:
         50:a8:2f:f4:84:23:92:d6:35:43:2d:67:47:5c:72:f5:8c:07:
         e0:41:92:44:a6:ba:f0:d2:33:45:eb:84:36:19:f8:85:77:a7:
         40:80:8f:e3:42:9b:34:d5:ae:e1:fd:7e:f1:3b:19:3a:b2:3a:
         21:3e:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----