Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80c360a2-3120-3293-97b3-3918dc84c75c.roa
File:                     80c360a2-3120-3293-97b3-3918dc84c75c.roa (raw, json)
Hash identifier:          Dp7OCWyb40PPhWK7q34goqaReYPlbjJA4RjBEC2cch0=
Subject key identifier:   30:8A:75:1C:96:14:4F:C6:EB:5C:39:F5:FD:70:49:78:83:C9:98:C8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC16762287274
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80c360a2-3120-3293-97b3-3918dc84c75c.roa
Signing time:             Fri 30 Nov 2018 01:07:57 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        104.16.112.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Tue 10 Dec 2024 03:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:28:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=3ddb32e6-bc71-4160-8fc4-c0da40d90bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:1d:ac:82:cd:a8:7e:5f:29:74:97:8b:c8:
                    22:b7:6a:d5:62:88:dd:c8:46:fb:6e:a9:a6:9a:d3:
                    a9:ca:3c:36:14:62:1c:c3:15:36:5c:0f:a0:37:53:
                    72:a4:1b:05:7b:5b:05:23:32:f0:72:cb:24:92:d0:
                    4c:1c:05:6f:fc:9a:42:c7:66:04:e1:d8:2f:55:ed:
                    fb:08:4a:51:be:53:fc:d0:c7:b0:34:32:6b:6e:d0:
                    bd:7c:6e:57:63:4d:99:ff:4a:3f:f1:73:a4:d7:db:
                    8f:39:86:c9:51:53:1e:a8:56:e7:ca:54:91:ce:1d:
                    6f:d7:a6:d4:e7:50:d6:35:70:17:e3:ec:af:ba:0d:
                    5e:45:0b:69:4f:f4:25:dd:1a:b1:b0:a6:da:3d:10:
                    e9:67:60:a8:7f:63:ec:d5:33:c4:ce:a3:a9:3c:26:
                    da:d5:7d:42:84:e0:e2:48:67:36:3a:05:88:6b:cc:
                    b8:74:81:4e:19:81:b6:a6:4f:44:5c:b7:65:02:45:
                    49:77:0a:76:84:44:2f:53:8f:51:1f:7d:76:c1:0e:
                    ee:95:0c:4e:c6:95:78:13:8b:44:a5:55:38:2a:32:
                    5c:ef:ee:f0:60:45:b3:a9:e5:54:94:53:c5:22:4c:
                    c3:5f:9c:d9:1f:0a:ba:ab:ec:5f:33:9d:41:db:cf:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8A:75:1C:96:14:4F:C6:EB:5C:39:F5:FD:70:49:78:83:C9:98:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80c360a2-3120-3293-97b3-3918dc84c75c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.16.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:5e:73:11:ca:fc:6a:b7:16:55:f3:2a:d1:9f:f2:14:78:d1:
         6e:cf:13:3e:2d:13:11:01:17:ae:c6:75:31:4f:9a:b8:f8:01:
         14:eb:c2:83:36:7a:6a:25:34:f8:81:73:a2:65:2e:9d:26:f3:
         5b:ff:d1:d6:32:6b:69:8e:23:6b:5b:9a:f1:c4:d6:a1:c0:74:
         3c:86:c8:e1:7d:e2:bf:6b:e6:94:3c:28:38:44:d6:1f:c3:19:
         73:26:8f:ba:83:f7:86:05:c5:86:c2:e3:fb:0a:ac:0d:ef:01:
         f6:e5:30:aa:f6:a4:7c:96:2a:fa:a4:e9:af:65:68:33:0b:02:
         29:f8:e1:e8:cb:46:e8:a9:60:6c:76:19:6e:aa:e7:57:c0:fa:
         cc:f2:9e:d7:48:51:e3:b4:ba:8b:06:03:5c:20:46:7c:94:ba:
         11:7c:63:4d:d3:30:13:88:f5:fc:8f:65:3f:c2:82:fc:7b:2d:
         15:11:74:fd:0b:c5:6e:e9:98:b4:d1:ce:27:e8:cc:4f:35:20:
         e5:c2:dc:c6:c3:90:65:73:b8:56:61:d0:27:6d:ad:4c:ba:58:
         e4:d4:4e:b8:10:26:d5:5f:84:47:c4:bb:46:16:88:85:8f:81:
         3f:00:69:ea:6d:21:e0:00:40:f6:c7:a5:95:eb:ed:40:a0:a8:
         4a:ff:0f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----