Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc1cdd1f-6b56-3625-aaa6-28d5ab698140.roa
File:                     fc1cdd1f-6b56-3625-aaa6-28d5ab698140.roa (raw, json)
Hash identifier:          pJVDNjhceLcOP/7ZRPJSn9xufkv0tTE5lIOjX5tZRzU=
Subject key identifier:   8A:75:2C:4F:3D:E8:AE:34:71:75:6E:50:C4:07:03:C2:52:DE:93:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858433BA7AB54C5E6F0DA16DE8080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc1cdd1f-6b56-3625-aaa6-28d5ab698140.roa
Signing time:             Fri 15 Sep 2023 17:02:43 +0000
ROA not before:           Fri 15 Sep 2023 17:02:43 +0000
ROA not after:            Thu 14 Dec 2023 18:02:43 +0000
asID:                     212238
IP address blocks:        23.26.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3b:a7:ab:54:c5:e6:f0:da:16:de:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 15 17:02:43 2023 GMT
            Not After : Dec 14 18:02:43 2023 GMT
        Subject: CN=f5fbcb38-e453-4225-8d9a-7431fabf903c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:03:ac:76:95:0e:e7:ee:4c:71:bf:7e:8c:
                    35:a1:a0:44:68:17:76:43:8e:3d:cb:9d:f8:b9:5a:
                    3c:94:14:f9:1a:39:ec:4c:b2:8e:5e:b3:bc:43:85:
                    57:98:ae:b3:a3:5f:ca:86:f5:1d:55:99:3b:1b:24:
                    54:14:72:e8:9c:fb:b3:eb:1b:27:ff:af:c5:e7:21:
                    e9:08:29:10:48:04:3d:76:c3:40:93:12:8a:3c:f8:
                    da:c6:78:86:54:b7:9f:e5:66:72:48:fc:74:87:7e:
                    8d:23:95:7a:36:a0:b0:ef:4a:12:59:0c:2a:91:52:
                    7a:02:e4:e5:63:9b:f7:00:99:4a:44:c2:cb:56:8d:
                    7e:5d:da:5d:bf:0d:c0:6f:3b:6d:50:e1:21:30:e2:
                    d6:97:74:98:d7:71:15:2b:27:45:d2:54:31:14:c1:
                    d6:37:80:b2:c9:7b:8e:a3:3e:22:c2:95:c7:6c:0b:
                    98:76:e4:2d:fd:2a:71:de:03:91:e7:fd:c7:d4:7e:
                    17:6b:60:7f:a9:cb:99:47:77:9d:3f:7c:eb:d6:d5:
                    97:c6:bb:06:44:14:1a:9d:4e:d6:70:f3:3d:64:92:
                    05:66:47:9f:f3:f0:29:ce:1a:62:79:c5:aa:93:8b:
                    0d:1f:b3:f0:28:db:ba:da:1b:af:d8:07:1d:b3:f2:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:75:2C:4F:3D:E8:AE:34:71:75:6E:50:C4:07:03:C2:52:DE:93:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc1cdd1f-6b56-3625-aaa6-28d5ab698140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:6e:66:62:64:59:c6:61:53:23:7e:aa:d6:a7:35:70:07:
         89:c3:6d:3a:a9:0a:35:85:8f:b6:8c:1b:30:d7:ee:e2:83:45:
         87:ae:77:5c:f0:19:74:76:2c:b4:2c:f8:0a:b4:69:49:44:80:
         2a:61:41:68:37:b2:4e:a7:d3:ac:45:36:e6:20:99:8c:b8:91:
         2e:e9:ca:fe:74:05:c7:66:d4:1e:e0:a1:ca:13:51:3a:70:6f:
         12:61:7b:16:f0:3b:da:b6:d5:3e:dc:b3:cf:2c:63:10:01:91:
         56:f8:de:a3:c2:71:aa:d7:31:6d:98:24:d1:df:cf:fb:26:0a:
         0f:40:1b:3d:b8:9c:67:3f:da:78:a6:4e:54:4d:7f:fd:b0:53:
         96:94:6a:e7:f0:0b:4f:b0:85:4a:9f:6e:ec:af:ed:ed:c0:5d:
         2e:e2:b4:12:b1:5f:3e:3c:23:3d:56:c0:89:56:60:0c:11:5a:
         7d:36:23:03:34:44:00:2c:9c:f0:a8:37:e8:3c:59:57:ff:00:
         71:12:86:82:e3:c7:26:7b:53:45:c4:ff:81:80:82:93:f8:ac:
         b8:8b:d2:ac:21:3f:78:96:2d:69:67:d7:d5:ae:e6:1f:d0:4e:
         24:f0:04:7f:e4:b7:96:6e:6b:5e:4b:d2:ba:0a:ab:1f:e8:c9:
         89:e3:2b:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEM7p6tUxebw2hbegIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkxNTE3MDI0M1oXDTIzMTIxNDE4MDI0M1owLzEtMCsGA1UEAxMk
ZjVmYmNiMzgtZTQ1My00MjI1LThkOWEtNzQzMWZhYmY5MDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA240DrHaVDufuTHG/fow1oaBEaBd2Q449y534
uVo8lBT5GjnsTLKOXrO8Q4VXmK6zo1/KhvUdVZk7GyRUFHLonPuz6xsn/6/F5yHp
CCkQSAQ9dsNAkxKKPPjaxniGVLef5WZySPx0h36NI5V6NqCw70oSWQwqkVJ6AuTl
Y5v3AJlKRMLLVo1+Xdpdvw3AbzttUOEhMOLWl3SY13EVKydF0lQxFMHWN4CyyXuO
oz4iwpXHbAuYduQt/Spx3gOR5/3H1H4Xa2B/qcuZR3edP3zr1tWXxrsGRBQanU7W
cPM9ZJIFZkef8/ApzhpiecWqk4sNH7PwKNu62huv2Acds/I/ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIp1LE896K40cXVuUMQHA8JS3pNSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmMxY2RkMWYtNmI1Ni0z
NjI1LWFhYTYtMjhkNWFiNjk4MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvabmZiZFnGYVMjfqrWpzVwB4nDbTqpCjWFj7aMGzDX7uKDRYeud1zw
GXR2LLQs+Aq0aUlEgCphQWg3sk6n06xFNuYgmYy4kS7pyv50Bcdm1B7gocoTUTpw
bxJhexbwO9q21T7cs88sYxABkVb43qPCcarXMW2YJNHfz/smCg9AGz24nGc/2nim
TlRNf/2wU5aUaufwC0+whUqfbuyv7e3AXS7itBKxXz48Iz1WwIlWYAwRWn02IwM0
RAAsnPCoN+g8WVf/AHEShoLjxyZ7U0XE/4GAgpP4rLiL0qwhP3iWLWln19Wu5h/Q
TiTwBH/kt5Zua15L0roKqx/oyYnjKxM=
-----END CERTIFICATE-----