Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c225b64a-9283-39a3-adfd-d8f3b93a47aa.roa
File:                     c225b64a-9283-39a3-adfd-d8f3b93a47aa.roa (raw, json)
Hash identifier:          7GsW0tXtR7JTEmGYMZh5T7biPt6tHZB0oY3KM9TEanA=
Subject key identifier:   E5:01:4C:0A:33:18:0C:1B:63:DA:66:DF:93:48:A7:B6:AC:70:99:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583FB9F9BB909CFA4E4775BFBCA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c225b64a-9283-39a3-adfd-d8f3b93a47aa.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     1239
IP address blocks:        23.26.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:f9:bb:90:9c:fa:4e:47:75:bf:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=e90ee819-7005-4219-903c-027caeddc94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9c:bb:dc:13:b2:57:a6:69:ca:31:ac:f0:b3:
                    44:20:5f:9f:77:f6:ca:e9:66:2a:18:03:9a:2d:0e:
                    6d:ed:a6:37:88:cf:8f:13:32:a1:e9:bf:2d:df:96:
                    99:7e:09:50:8c:12:ce:fb:48:85:a0:74:5a:14:3c:
                    3b:dd:6c:ee:4a:17:c5:57:44:46:95:69:27:c5:2b:
                    75:db:b7:63:4a:64:48:30:27:fb:db:a5:16:da:0e:
                    2c:38:85:a4:9c:ec:e8:f7:c3:75:11:dd:7e:8d:70:
                    2f:01:a0:7c:4b:e4:aa:bc:f2:66:ca:0f:cb:df:1c:
                    1e:5a:f5:f7:72:55:da:7a:71:dc:b6:d1:09:e6:ab:
                    4d:89:cb:04:f5:5c:52:06:6d:30:6d:50:9c:13:fd:
                    54:88:c1:ba:1f:51:4a:6b:03:42:74:73:70:58:64:
                    c7:96:d7:c5:9f:8f:a8:78:a2:e0:a6:d2:20:fe:4b:
                    5f:8c:51:2b:d4:ac:e0:54:7a:3e:5b:12:ed:87:da:
                    be:a3:c4:35:e9:38:03:f6:6d:f7:e4:8d:bf:8a:91:
                    5e:e8:bf:2e:f0:f7:76:f9:fb:8a:99:c8:07:09:5c:
                    92:d5:ee:d2:00:3c:26:de:37:f8:f3:23:8e:7b:58:
                    e6:71:2b:ac:62:a4:19:26:d0:c9:c3:15:22:3e:65:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:01:4C:0A:33:18:0C:1B:63:DA:66:DF:93:48:A7:B6:AC:70:99:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c225b64a-9283-39a3-adfd-d8f3b93a47aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:29:5c:85:f4:4e:15:77:f1:34:27:27:6a:80:c8:fb:5e:
         14:62:93:2f:ff:4c:f4:74:74:97:63:40:be:03:93:83:17:c4:
         17:f6:db:94:21:3f:6a:26:b0:2d:2a:3d:6c:78:ed:c8:73:de:
         52:b8:b2:e5:c8:f2:14:59:52:68:cf:53:cf:cf:be:59:fc:ea:
         ac:72:a6:00:3a:15:69:54:5b:c8:73:95:69:ee:80:e7:45:77:
         56:27:d1:74:39:ab:53:b6:0f:32:9a:3e:2f:0d:73:24:ef:1f:
         59:8f:b6:89:ba:48:1b:af:03:04:95:8e:2a:7e:f4:af:e8:09:
         0c:0f:f0:05:8b:2d:a5:6e:cf:8f:90:a1:19:cd:bd:ab:74:ed:
         9b:33:21:49:bd:d2:16:3c:9a:b4:a9:31:40:92:3a:27:be:cf:
         c6:12:88:be:07:42:18:a4:20:4c:b2:bb:f3:9d:0e:4b:50:99:
         dc:52:82:01:d1:be:1d:c7:dc:95:db:03:3c:27:77:78:a3:ac:
         7f:fb:5e:59:64:c8:51:60:bb:bd:78:b9:b7:9f:31:4f:8e:f5:
         36:e1:d9:de:27:b4:ea:2a:85:f2:cb:c8:f2:e1:0b:0f:21:fa:
         0e:28:f5:0d:13:05:0a:76:3d:c2:53:5a:eb:4e:1a:29:3f:04:
         7e:4c:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----