Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe3d34d-75a4-3cec-87e6-5b2833612c9b.roa
File:                     dfe3d34d-75a4-3cec-87e6-5b2833612c9b.roa (raw, json)
Hash identifier:          iuGTK2hfi1i33muHRqq7YR6OQKBAyVFWWxJf3UH33jk=
Subject key identifier:   E2:E7:7E:21:1A:0E:BF:75:54:3E:44:DE:7F:3E:8C:BC:EB:46:C0:31
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F06920B6E27D0B017FA287480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe3d34d-75a4-3cec-87e6-5b2833612c9b.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 27 Nov 2024 05:00:00 +0000
asID:                     399471
IP address blocks:        23.26.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:06:92:0b:6e:27:d0:b0:17:fa:28:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Nov 27 05:00:00 2024 GMT
        Subject: CN=98d33cc2-c734-44b9-950e-8923ed5c637f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:04:84:6f:15:42:ff:fd:e4:c7:7e:91:ba:
                    c2:2a:8e:8f:c3:99:3d:4f:88:e3:a9:d9:74:9c:39:
                    cb:6b:e7:94:59:7a:80:6f:dd:3b:ed:ac:ed:40:4b:
                    9c:43:99:f6:7d:ec:cf:09:bf:35:cf:14:d4:32:a9:
                    84:44:3e:4b:22:09:b7:2c:4f:3c:3a:26:53:ea:f9:
                    11:7f:21:7e:6d:7b:02:e0:7a:c8:48:ff:82:c2:03:
                    ac:dc:dd:cd:69:64:af:84:21:8a:d0:e0:bd:cd:d8:
                    bd:62:d3:b3:64:1c:9b:9a:d0:7a:26:ed:9e:c8:26:
                    24:c2:12:6f:e9:96:88:a2:b5:08:3b:1c:c4:44:b2:
                    49:8e:42:a8:4a:9c:c3:98:a9:81:2e:7e:a8:14:a6:
                    2b:9d:03:80:13:22:82:6c:37:0b:f2:23:70:7a:ff:
                    d6:e5:36:46:e6:4c:c0:9f:f0:f2:6b:87:a4:67:f8:
                    15:7e:20:ff:94:8d:bd:30:b0:11:6d:76:6f:a6:57:
                    a5:96:b7:a5:ed:5d:36:99:96:66:32:b1:bd:6f:5e:
                    1d:9f:b2:87:04:64:ee:77:e9:9a:2b:ea:c0:06:98:
                    25:be:8c:c3:07:f3:da:6f:20:83:a1:76:f5:2e:fa:
                    82:28:a8:55:c3:f8:61:53:fd:7b:e0:2c:c3:a6:de:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E7:7E:21:1A:0E:BF:75:54:3E:44:DE:7F:3E:8C:BC:EB:46:C0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfe3d34d-75a4-3cec-87e6-5b2833612c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:79:75:2e:ed:ee:ae:0a:82:0a:49:4f:93:3e:70:a4:9e:
         77:05:6e:1b:f2:0c:e4:1f:2d:99:42:a8:f0:74:bf:ae:0a:ba:
         5f:ea:dc:43:dd:2c:8e:98:95:70:1c:f9:3b:b6:6a:a1:26:5a:
         d3:3a:2e:5b:ac:12:1e:9f:61:92:d6:82:10:21:58:bc:a6:89:
         45:3d:cd:24:d8:e7:35:b4:0a:2d:90:a1:2b:ad:86:ad:7a:0b:
         1e:d1:02:36:59:e0:b2:93:e6:6b:3f:af:27:3b:40:da:ab:6d:
         16:cb:1c:e7:b1:1d:51:9f:45:9e:73:04:60:a9:fa:33:16:f3:
         4a:b3:b5:35:d6:2b:23:e4:31:f7:c1:97:4b:a9:5e:db:d2:4f:
         09:76:17:aa:d6:20:ee:ab:d5:e8:00:72:dc:96:66:8d:f1:cc:
         ab:a7:3e:3d:3a:b3:0f:e5:41:23:38:d5:32:10:3f:86:83:c9:
         ee:1c:e3:58:d0:9f:e2:57:23:61:bc:ae:e8:d5:2a:d8:7d:9d:
         1a:ea:21:b0:aa:b0:f7:a4:08:ab:6b:80:a2:f1:1c:5f:2d:20:
         e1:88:44:f6:7a:e9:55:aa:d4:68:ed:b4:f6:b5:5c:58:47:37:
         c0:0e:57:f2:e7:24:57:4b:d5:d2:83:6c:3b:4f:79:20:b7:2a:
         70:51:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----