Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1546d1a9-b933-3172-b1fe-96f0d71ddf74.roa
File:                     1546d1a9-b933-3172-b1fe-96f0d71ddf74.roa (raw, json)
Hash identifier:          uDJhXhk69BG98Vgu1k/j81pCVJ0LIDDGCT+MhwiU9+k=
Subject key identifier:   C5:E6:60:8C:C2:DB:10:55:D4:F1:F9:90:F8:9C:1B:7D:51:D8:1C:24
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583D1A968425A1DC7407BF255600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1546d1a9-b933-3172-b1fe-96f0d71ddf74.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Tue 04 Jun 2024 04:00:00 +0000
asID:                     141039
IP address blocks:        45.38.182.0/24 maxlen: 24
                          104.165.153.0/24 maxlen: 24
                          104.165.242.0/24 maxlen: 24
                          104.165.250.0/24 maxlen: 24
                          104.252.23.0/24 maxlen: 24
                          104.252.93.0/24 maxlen: 24
                          104.253.48.0/24 maxlen: 24
                          104.253.191.0/24 maxlen: 24
                          166.88.131.0/24 maxlen: 24
                          166.88.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1a:96:84:25:a1:dc:74:07:bf:25:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Jun  4 04:00:00 2024 GMT
        Subject: CN=296f6886-44a9-48c7-ae7a-4ac9599f2301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:c1:00:00:52:59:85:a3:84:13:e6:0c:62:
                    52:38:6a:ba:98:29:dd:20:88:a1:f1:f9:1b:3b:1e:
                    30:8e:70:c6:10:7f:92:1b:85:5e:95:83:b1:82:33:
                    47:3b:c8:d8:a1:72:0d:28:82:13:09:d0:79:db:4a:
                    48:39:d1:98:ae:98:f1:6d:bd:71:17:cf:7a:2c:2a:
                    9a:5c:58:1d:33:2c:9c:46:c3:be:24:d1:0e:83:34:
                    dc:d9:f9:7d:76:c6:8b:e2:d5:1c:ea:93:e0:a8:44:
                    f9:71:a7:28:85:51:e8:01:2b:0c:7f:16:b6:7d:a9:
                    0c:ba:81:91:a1:85:42:95:eb:34:5d:41:b5:6c:44:
                    2b:69:3f:89:54:db:23:75:db:f0:4a:a1:69:b4:9f:
                    7d:4b:92:c0:90:8a:e9:2c:8d:6c:16:37:45:86:aa:
                    86:2d:54:24:10:2b:4a:1e:41:40:ff:8b:77:3a:b5:
                    63:c5:53:b1:15:78:95:ec:0b:71:7a:2c:3f:38:d5:
                    7b:db:87:f7:37:91:12:2a:9f:5b:7b:a0:1d:bc:ae:
                    04:67:f6:ed:ec:69:a0:2a:32:1b:db:01:7d:05:d9:
                    4c:a1:f9:4b:e2:e2:1c:db:8c:ba:46:6e:4a:4a:76:
                    c2:7d:cc:ce:49:28:2f:bd:46:fa:c6:56:c0:7e:fa:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E6:60:8C:C2:DB:10:55:D4:F1:F9:90:F8:9C:1B:7D:51:D8:1C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1546d1a9-b933-3172-b1fe-96f0d71ddf74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.182.0/24
                  104.165.153.0/24
                  104.165.242.0/24
                  104.165.250.0/24
                  104.252.23.0/24
                  104.252.93.0/24
                  104.253.48.0/24
                  104.253.191.0/24
                  166.88.131.0/24
                  166.88.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:f2:9f:ba:54:a3:99:cb:a2:af:06:9b:1e:c4:82:df:de:
         95:43:c8:f0:fe:fc:06:5f:18:04:e5:38:86:54:00:da:d3:d6:
         b7:4e:0e:ba:f9:31:59:b3:01:96:b1:49:5f:a4:25:08:d9:d1:
         77:a9:72:1b:08:ce:47:97:ff:e4:33:9a:34:25:d2:3b:45:14:
         c1:fc:e3:80:96:7a:0d:66:d3:16:d9:2a:b2:86:a9:8b:ea:e9:
         ba:da:7d:1b:63:87:76:16:4e:94:1a:c0:55:e4:e6:70:7a:96:
         5c:09:1c:e9:58:38:45:10:ed:f9:38:3d:b2:aa:f4:60:90:b7:
         5e:1b:76:05:38:45:8b:92:97:49:a4:be:eb:36:08:1f:fa:de:
         d4:76:72:34:86:5f:78:ab:a4:b4:72:e0:ae:b6:d2:e3:f4:7e:
         fe:a4:e4:2f:4d:37:d2:93:8e:ce:0c:ee:eb:5f:45:bb:9d:d5:
         5e:a6:54:57:81:2d:15:ce:68:1f:3c:62:66:3a:e8:0c:d6:0c:
         bb:de:fc:15:10:20:9e:6a:8a:e5:7c:de:fa:64:b8:2f:3c:d4:
         e8:58:04:28:43:76:05:c7:60:a0:2e:c7:87:e5:84:cf:ad:1f:
         5e:e1:11:e5:9f:7a:30:4a:81:e9:1d:21:08:9a:77:49:d1:48:
         32:fa:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:55 2023 by rpki-client on console-fra.rpki-client.org