Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c531206-93ae-3826-bcb5-d2ac8b59fdea.roa
File:                     0c531206-93ae-3826-bcb5-d2ac8b59fdea.roa (raw, json)
Hash identifier:          VKaV2YkT4zVj4akXFdplQkNSp4vFFnIaf9/danMEgmk=
Subject key identifier:   CB:C4:49:B4:E2:57:6B:C8:83:15:46:3B:D4:A2:9B:82:28:61:8F:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841D988181B8CDE0E1E3A7DEE40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c531206-93ae-3826-bcb5-d2ac8b59fdea.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 13 Aug 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.253.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d9:88:18:1b:8c:de:0e:1e:3a:7d:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 13 04:00:00 2025 GMT
        Subject: CN=fc6e687c-3e2e-4560-a48c-fc11797c04cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:4a:20:c2:a6:6c:d3:e4:f5:a1:be:b6:60:
                    00:c6:e7:25:4b:7a:ed:11:d0:1a:29:83:d0:71:62:
                    c3:ef:44:7c:c4:d4:2b:49:ea:22:1a:9d:1e:23:20:
                    3e:24:e4:13:7f:97:75:57:6e:a0:90:fd:6b:ac:13:
                    0a:8a:4c:7e:65:3b:f5:ab:6f:02:22:6f:71:9d:10:
                    e3:ca:13:0b:9b:d2:31:73:31:96:43:d6:33:d6:b0:
                    2e:95:f4:71:51:d0:29:45:bc:70:41:12:c5:bc:0a:
                    9f:ff:da:84:a2:28:b6:3a:ea:86:d0:54:97:45:d1:
                    8c:74:16:4a:c6:2f:77:5b:cb:21:17:ad:a3:74:3e:
                    14:13:23:4f:74:37:1e:5e:c0:d6:34:92:1a:c2:4f:
                    47:79:e6:68:50:cf:db:b8:d8:57:48:ef:d8:75:e1:
                    88:99:0d:44:1f:28:b2:f8:5c:c8:2f:06:f5:f0:c0:
                    2b:f9:77:ff:55:f3:48:d6:ba:a9:05:24:5c:0d:19:
                    8c:51:2f:1c:7b:4c:c8:be:b8:23:0c:de:c4:ca:63:
                    73:07:dd:69:f7:7b:d0:63:62:77:41:d2:e9:9e:57:
                    8b:18:c9:f0:15:b5:1a:73:d9:96:88:61:45:c4:d1:
                    1f:db:5f:96:ff:9e:d8:1f:71:7e:09:9d:30:0c:26:
                    e9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:49:B4:E2:57:6B:C8:83:15:46:3B:D4:A2:9B:82:28:61:8F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c531206-93ae-3826-bcb5-d2ac8b59fdea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e8:75:e0:b1:15:03:37:84:41:81:dc:fa:44:2f:a9:6e:d9:
         c5:42:57:f9:ac:f3:3f:85:00:76:a0:17:f2:ef:46:bc:1f:4e:
         b2:2a:80:44:fc:05:22:29:4d:d2:66:f9:ae:93:77:cc:45:c2:
         54:68:5c:57:a8:df:c7:bb:b0:c3:a4:78:c3:82:09:02:20:91:
         6a:52:4c:93:a3:42:93:5b:8b:8b:29:0d:06:b2:e3:4d:0d:3b:
         a7:ea:11:66:ec:29:d0:83:ee:9d:5a:af:57:b3:67:f8:48:69:
         da:39:d3:2a:c9:e5:cd:7a:6e:1c:84:7f:80:9f:f1:e9:0c:11:
         21:f1:d9:59:e3:c9:b5:a3:6b:72:aa:9f:55:c4:2d:35:50:04:
         b5:eb:23:e9:80:a2:ab:94:82:c6:8f:2e:13:df:b6:25:58:40:
         39:2d:45:7d:bf:ea:38:70:8d:db:15:ee:85:e0:0f:dc:50:40:
         10:c4:7f:99:ad:5e:91:49:82:53:24:c8:f9:32:54:93:a4:44:
         5b:1b:3c:03:11:69:e0:16:de:37:40:d2:1d:e5:45:ba:8b:bf:
         ac:89:a0:9d:0f:d2:01:33:9e:4b:6d:84:21:b9:8b:c4:1c:d0:
         3c:30:6e:42:bb:e5:eb:b4:b5:3c:86:f6:04:2d:50:c6:53:62:
         b4:a4:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----