Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/803c2d2e-b2f2-34f4-b4dd-2d8ae41b9208.roa
File:                     803c2d2e-b2f2-34f4-b4dd-2d8ae41b9208.roa (raw, json)
Hash identifier:          8wD7mnN3cqAVSPCzPP7voCMsSDRt8cYCerVUBmaM/8Y=
Subject key identifier:   0A:25:8F:A1:B1:76:3A:86:3F:6E:0A:A8:0D:3C:F0:19:BE:E0:40:77
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172DCB2880F
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/803c2d2e-b2f2-34f4-b4dd-2d8ae41b9208.roa
Signing time:             Mon 22 Jun 2020 15:43:07 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Thu 28 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        104.44.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 18:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:dc:b2:88:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Mar 28 04:00:00 2030 GMT
        Subject: CN=b3dd2d31-9639-4d90-843d-a3b888d47024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:ac:24:13:3a:2a:53:63:c5:79:51:30:32:
                    14:ba:e4:62:f3:7e:cd:99:5d:44:ae:dc:de:0b:3b:
                    f0:f8:14:bf:a5:14:6a:33:f8:39:62:ff:01:19:fc:
                    bd:37:23:ab:2d:72:ed:b2:c1:9d:e9:7a:9a:04:37:
                    9f:8b:a9:a4:b6:48:cd:da:54:ba:a2:78:6b:f8:63:
                    32:92:94:a7:02:cc:98:75:4e:0c:43:0f:5f:e7:6a:
                    ed:87:ba:7b:ad:b1:7b:37:ec:01:da:ae:a4:b5:79:
                    d8:d3:a0:3d:43:90:5e:48:ac:cf:c2:88:e6:4c:01:
                    b9:61:91:2d:88:8e:45:95:73:0c:04:9e:af:26:48:
                    5f:33:7b:16:5e:b9:9a:6f:9b:bd:c7:df:b9:00:ae:
                    2c:2e:bb:47:74:88:6a:6e:de:70:af:02:78:dd:06:
                    30:7a:d9:a9:64:87:5f:7f:2e:af:ad:e0:1f:fb:bc:
                    23:6f:27:09:7f:0d:7d:7c:c4:95:56:ba:ad:e9:c4:
                    04:e8:b5:3e:0f:c1:32:b5:a5:cd:e8:82:5c:33:6a:
                    b8:3a:b7:cb:ac:24:10:89:2e:1f:37:86:d3:53:c7:
                    96:8c:8e:df:e5:6a:26:4f:cb:e1:4c:6c:c5:72:82:
                    2d:53:42:b8:0a:49:eb:4c:7e:66:d1:12:e6:e0:52:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:25:8F:A1:B1:76:3A:86:3F:6E:0A:A8:0D:3C:F0:19:BE:E0:40:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/803c2d2e-b2f2-34f4-b4dd-2d8ae41b9208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.44.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d7:86:73:d7:1a:fd:c0:5b:b5:27:f7:43:53:26:f7:b9:4c:
         7f:b2:4d:b3:8e:9d:9b:61:9e:cc:f2:1e:26:9d:e4:05:a5:ae:
         f8:e0:58:c0:d9:68:4a:08:9d:eb:3c:3c:22:92:10:ea:bd:43:
         e2:5e:b2:e4:e8:39:c4:56:cc:73:82:7a:f7:53:a5:40:d1:d4:
         50:1b:60:87:8d:9f:a4:11:ae:6e:f1:42:0d:7c:84:f8:2e:c8:
         95:ab:27:55:15:ba:56:18:b4:86:0e:63:01:b5:6a:af:c7:8c:
         ce:6a:67:66:d0:11:39:7d:3c:54:15:c0:c6:e7:dd:f0:0e:e5:
         7a:87:c2:5a:4d:73:92:cc:56:68:09:48:2a:49:77:09:0e:f5:
         e4:be:95:fd:da:58:07:73:d4:cb:2f:fc:06:05:15:91:32:20:
         27:68:40:28:e1:81:2f:cf:84:f0:72:f6:12:98:9d:b7:89:35:
         09:57:32:b1:58:7a:ca:cb:2d:04:96:00:70:23:04:4e:d2:c3:
         e7:69:a6:68:56:aa:ca:9e:73:1b:81:f9:8f:f9:b2:38:61:3b:
         d1:0b:03:6b:7d:90:3e:be:8d:af:36:54:b7:97:e9:e4:c7:67:
         b8:3e:df:66:67:c1:54:1a:e4:b9:83:6d:e8:b0:39:b9:ad:95:
         e7:72:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----