Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fca56b14-ad1e-38e6-aa87-68851cb79c47.roa
File:                     fca56b14-ad1e-38e6-aa87-68851cb79c47.roa (raw, json)
Hash identifier:          2nk0HxV5EZlgZ3U9lx+JZGFn3uHy486vLLndpXvPFz0=
Subject key identifier:   1B:A1:D6:67:50:C3:49:9A:06:08:64:CA:39:24:59:2D:7F:6A:90:46
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC164F6CB7B08
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fca56b14-ad1e-38e6-aa87-68851cb79c47.roa
Signing time:             Wed 01 Aug 2018 18:41:27 +0000
ROA not before:           Wed 01 Aug 2018 04:00:00 +0000
ROA not after:            Fri 30 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        104.31.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 22:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:f6:cb:7b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  1 04:00:00 2018 GMT
            Not After : Jul 30 04:00:00 2027 GMT
        Subject: CN=5b7905e7-3ffe-49b7-ae49-0b01b36f2938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:50:22:75:8f:b7:03:60:10:df:ea:a5:c2:
                    ed:21:f0:4a:46:5c:2b:2f:fc:0a:7c:81:82:ec:1c:
                    69:cf:11:32:80:5c:07:c8:ca:8d:71:16:97:7e:4c:
                    4a:f3:b8:18:b6:ab:6c:1f:8b:e5:8d:91:3c:82:18:
                    68:f8:c7:ce:7a:39:89:0c:5d:e6:cc:8a:5b:fa:15:
                    c7:a6:8e:51:b1:6b:9b:d0:41:02:45:d5:5a:fe:04:
                    c3:56:3d:c2:71:a7:b8:51:b5:08:85:63:a2:a7:79:
                    44:d8:82:86:85:32:1d:af:ef:54:87:09:8b:01:55:
                    c8:a3:26:6a:2f:3f:75:a2:01:cb:b8:50:ff:53:b6:
                    9e:a6:60:1a:59:3c:d3:aa:13:a5:e2:40:eb:c9:7e:
                    ba:4a:d2:65:79:9c:9a:42:f3:70:be:73:04:e7:fb:
                    10:5a:61:81:db:4a:db:fc:ad:c5:4b:c8:b3:07:11:
                    2e:72:ce:5e:e5:86:06:cf:92:14:08:67:10:04:6e:
                    21:21:62:f7:5e:31:fd:83:a8:ac:82:72:bf:f8:9d:
                    80:b0:c5:51:c3:54:d3:fe:44:95:b4:72:55:be:8f:
                    46:74:ba:55:f6:c2:4d:73:36:1a:e6:7d:ac:23:ca:
                    3b:1a:52:a4:ad:99:2a:ff:e5:c9:a6:ad:73:23:ce:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A1:D6:67:50:C3:49:9A:06:08:64:CA:39:24:59:2D:7F:6A:90:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fca56b14-ad1e-38e6-aa87-68851cb79c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.31.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:85:7f:53:4e:a3:68:ca:b7:25:5f:ad:18:3b:8b:8a:75:95:
         8a:5e:25:87:91:d8:e0:44:e8:42:53:48:f2:db:c2:6e:3e:c3:
         98:79:3c:7b:b7:b2:1a:86:1b:96:6c:29:2c:6b:df:ef:6e:16:
         f4:20:51:5e:21:30:3d:20:ff:ae:ec:63:d2:49:42:dd:2f:81:
         b3:e3:75:85:71:fe:28:61:41:b7:93:4d:00:bb:c0:1d:4e:bd:
         e9:ee:ce:0f:e2:44:bc:27:04:7c:f8:16:83:b0:1c:1e:74:11:
         46:2b:9c:f9:e8:56:ce:56:4b:17:d9:0a:78:f5:b7:23:7d:c9:
         7d:fd:71:d1:73:89:c5:6b:80:ff:a8:9b:f9:70:e3:ee:20:c9:
         ae:21:d7:ec:93:a4:54:7b:34:52:b4:cd:d3:d5:25:6a:f6:76:
         04:07:8f:8a:fc:7e:f6:9b:85:ae:c1:42:ae:ac:d2:de:e0:ec:
         8a:a0:78:4e:e8:a6:a9:15:ab:f2:69:f1:f8:68:7d:70:d2:ba:
         ad:84:e2:15:6a:9f:d6:4c:96:59:d7:72:a4:32:81:3d:cd:81:
         26:ca:04:ed:3a:33:5b:c8:48:32:1e:a6:be:8a:74:d1:f7:4a:
         02:9c:a2:f2:3e:90:90:f1:d2:18:54:3c:29:ce:be:66:97:6d:
         c2:3b:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----