Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5d56658-a459-3daf-97ef-a8c1e622f0c8.roa
File:                     f5d56658-a459-3daf-97ef-a8c1e622f0c8.roa (raw, json)
Hash identifier:          aKL/sxE+wXbqNcbBr1APJOA4dV2roxVaY4/LgzOyrZk=
Subject key identifier:   CC:71:8B:30:C7:5E:76:06:56:AF:B7:D1:04:1E:74:BB:BD:41:FD:4D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858449C74C17FF97B5310356ED518
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5d56658-a459-3daf-97ef-a8c1e622f0c8.roa
Signing time:             Sat 20 Jan 2024 02:00:27 +0000
ROA not before:           Sat 20 Jan 2024 02:00:27 +0000
ROA not after:            Fri 19 Apr 2024 01:00:27 +0000
asID:                     834
IP address blocks:        23.26.160.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 21:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9c:74:c1:7f:f9:7b:53:10:35:6e:d5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 20 02:00:27 2024 GMT
            Not After : Apr 19 01:00:27 2024 GMT
        Subject: CN=a93233b6-0d4f-4b5b-b1c9-3ba4e064e907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:55:9a:86:12:fe:4f:2f:cf:68:3f:3e:b6:
                    b1:5b:52:cc:a0:db:e3:85:ab:ae:59:f2:8e:e0:f1:
                    2e:de:2e:fa:7e:f2:88:7d:dc:c8:da:a9:16:4b:9f:
                    8e:71:ee:dc:96:ab:66:4c:db:fa:4a:72:a9:9f:4a:
                    01:71:22:43:0e:a1:73:4e:f3:7f:70:53:7e:1a:37:
                    37:f4:e5:9a:a6:c3:b1:e6:b8:8c:f0:1e:2d:47:62:
                    c8:29:8f:e4:1b:06:9c:f2:ba:76:ae:e9:a4:28:c7:
                    ef:94:67:37:9b:e4:1a:63:0f:d0:11:2a:bc:2e:11:
                    1b:2e:ad:1b:81:12:3f:3b:bb:a4:29:7c:70:38:5b:
                    c3:1f:05:fa:91:46:30:29:1b:6d:c1:09:7f:da:bd:
                    82:f2:4d:ff:a2:95:70:bd:f5:14:b5:df:5e:bb:56:
                    23:53:c9:2e:a9:b0:29:66:9c:8b:8b:cd:b3:15:1e:
                    0d:8c:b3:42:44:11:39:ea:a0:40:be:12:95:c5:2d:
                    87:a2:b3:50:2b:e1:ca:e4:dd:4a:60:1e:d6:f1:03:
                    bb:8f:e4:9a:c8:68:e3:54:09:75:42:9e:fb:95:84:
                    3b:ed:74:ce:16:ec:57:79:a7:ab:7c:cc:44:3e:3d:
                    d5:ff:52:46:f6:3d:91:6e:7a:35:a3:7c:bd:9d:0b:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:71:8B:30:C7:5E:76:06:56:AF:B7:D1:04:1E:74:BB:BD:41:FD:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5d56658-a459-3daf-97ef-a8c1e622f0c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:b8:b8:54:98:d1:3c:1d:bf:93:1a:4d:32:a9:e4:64:65:
         a1:16:24:b5:8b:0b:ee:8f:69:c7:b5:92:f4:bb:06:ad:f4:2d:
         13:a6:0d:91:be:63:7d:8d:d6:19:82:6d:ac:12:0d:03:45:14:
         62:64:ad:a5:22:08:24:19:21:fc:17:d0:95:44:61:fe:28:40:
         89:09:d8:e7:39:81:85:c8:6d:25:06:0b:6d:0a:43:c7:18:51:
         7d:73:34:ae:03:ec:75:41:ad:95:f5:b6:79:f8:be:68:15:23:
         32:70:50:e6:3e:db:1b:fe:3a:1f:f0:f8:65:4b:e6:32:53:b9:
         00:1d:4e:bd:13:c3:fd:8c:3d:b3:da:b9:cc:2e:09:e8:67:72:
         98:83:a4:73:c1:0c:20:63:05:40:7f:82:8b:50:07:b0:f9:5d:
         4b:50:ce:16:2d:e6:94:09:4c:4f:a0:7d:73:c0:87:bb:32:cc:
         fd:de:39:71:02:91:5a:e8:53:3c:ae:55:18:f4:56:e6:c0:d7:
         63:19:ca:5f:b1:91:4f:17:c2:a5:16:55:63:1f:ac:3c:47:fe:
         2e:cd:07:35:21:8f:f4:25:ff:b6:f6:be:08:cc:7f:2b:0f:ad:
         3c:11:b0:d3:52:1d:9f:79:69:c1:9f:0a:15:e1:c9:8d:d0:54:
         f0:a6:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:36:26 2024 by rpki-client on console-ams.rpki-client.org