Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cd73df1-077d-3613-bfcf-e472f40d919b.roa
File:                     0cd73df1-077d-3613-bfcf-e472f40d919b.roa (raw, json)
Hash identifier:          NqlSYHdytCHr/jrMqPMLYAKoVj4HGUcXC9bBprCPc9s=
Subject key identifier:   C8:6E:65:08:28:49:AD:49:A0:AB:50:50:35:3A:A8:5D:44:A4:E4:A2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840A3AA8DDC050391C487CD5C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cd73df1-077d-3613-bfcf-e472f40d919b.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 24 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        104.165.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a3:aa:8d:dc:05:03:91:c4:87:cd:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Apr 24 04:00:00 2025 GMT
        Subject: CN=60c02497-c430-4c9e-a356-cec3a27a0ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:61:15:47:40:66:81:93:66:e1:ae:68:40:
                    42:07:42:a1:c7:38:c2:9b:57:e3:64:c3:29:7d:03:
                    81:7d:53:89:41:4c:90:10:b1:71:56:ac:2d:7f:36:
                    0e:c8:c4:25:f1:24:cc:51:d3:2c:40:28:26:15:a9:
                    3a:a4:08:12:cf:17:90:70:de:aa:bd:bf:0c:59:45:
                    68:35:6f:9b:ba:e1:ad:ca:62:8e:a0:4c:a2:05:90:
                    36:67:93:1f:8d:8c:20:e4:a2:0b:af:1c:10:30:b0:
                    e7:5c:c2:ee:02:8f:b1:98:02:48:25:c9:00:3d:58:
                    2b:e2:d9:b8:7d:60:fc:4c:d7:86:92:c4:de:6a:f2:
                    e8:cb:b9:fa:97:23:ce:2d:20:f7:c3:6c:d9:3c:88:
                    67:82:3e:11:de:c6:ce:7b:cd:9f:11:f3:3d:b3:53:
                    63:60:1c:ce:eb:9e:62:d6:fb:c0:ef:8d:b4:43:01:
                    f9:75:34:eb:dc:9a:f0:43:34:03:5e:dc:18:b5:cd:
                    69:e1:e4:39:b2:35:3e:78:9f:2e:cc:e5:aa:66:04:
                    79:38:e5:ea:ac:47:79:aa:9e:54:54:eb:b6:71:30:
                    81:b3:2e:aa:51:e0:2b:cf:24:a0:40:c8:c6:00:89:
                    dc:da:37:c4:68:4c:fb:64:f1:44:04:1f:70:90:3e:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6E:65:08:28:49:AD:49:A0:AB:50:50:35:3A:A8:5D:44:A4:E4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cd73df1-077d-3613-bfcf-e472f40d919b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:8a:74:4e:cb:43:63:41:01:b9:ec:aa:7a:ea:fe:47:7f:
         0f:e2:1c:90:47:9e:e1:f2:8b:11:ff:0b:e7:fb:26:bc:79:66:
         f4:b5:de:a3:21:67:93:4e:80:16:6c:f5:73:f1:41:8d:f8:c5:
         66:89:cc:37:ab:85:8f:7f:99:8e:ed:be:1b:4b:30:5f:56:35:
         b6:4d:77:3d:89:09:3b:48:49:6f:6f:cc:b8:3c:bc:99:be:03:
         c4:87:4d:b7:f8:67:d9:4a:cd:2e:75:47:46:c9:07:51:5a:14:
         92:da:09:ca:de:66:08:6f:6c:e6:0a:42:74:cf:75:11:12:4d:
         f7:49:c6:5b:a9:bc:5b:3f:67:98:ee:46:ea:37:24:6e:b7:f6:
         17:8a:37:ca:04:c8:e7:00:52:4b:90:45:c8:6d:47:a0:66:0f:
         0d:98:74:63:eb:bc:f1:8c:5c:14:8e:9d:79:45:65:1c:52:b3:
         cb:79:85:fb:3c:7b:16:85:55:49:5f:4e:89:1a:ae:b2:fe:69:
         13:29:65:1f:f0:c2:4e:a4:bc:05:7c:81:bf:5c:2a:a5:9c:52:
         49:8c:dd:dd:d7:b4:69:3d:30:20:4d:5b:c3:50:a3:95:e6:7a:
         6d:d4:cf:74:a1:da:eb:c5:60:6c:fb:78:dc:f9:22:8b:40:7b:
         36:1a:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----