Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a3404c5-092f-3992-9fef-92309617b835.roa
File:                     1a3404c5-092f-3992-9fef-92309617b835.roa (raw, json)
Hash identifier:          /C+kTeVRKb+D+4uIU7TzTOvOsvUdaLkMB4+M6pgDjoE=
Subject key identifier:   05:44:E3:4F:DE:A4:05:80:B3:49:C6:BB:83:6C:68:6E:04:5A:19:DF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840C2CDD3D805D37F3838BBB300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a3404c5-092f-3992-9fef-92309617b835.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sun 25 May 2025 04:00:00 +0000
asID:                     7922
IP address blocks:        107.186.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 04 Mar 2023 20:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c2:cd:d3:d8:05:d3:7f:38:38:bb:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : May 25 04:00:00 2025 GMT
        Subject: CN=10da5a07-95fd-4f62-98f4-b9cd78e5df57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:31:53:91:bf:77:88:e8:46:0a:fc:22:c0:
                    a3:8e:dd:b1:7f:52:04:39:54:bb:d0:94:cd:44:9d:
                    e2:57:d5:d1:a2:14:c3:8e:8a:d7:73:17:76:2f:d2:
                    3c:dc:86:ae:c4:51:a1:7b:8f:bc:14:33:19:5b:a5:
                    96:ff:13:11:33:27:21:94:85:92:46:d4:2a:ab:d1:
                    2d:80:ad:9f:00:d9:39:fb:11:e2:f9:cc:3b:f1:be:
                    87:fc:6b:f0:13:2c:b6:99:53:b2:f8:b7:12:ee:2a:
                    cf:2a:4d:44:52:a7:59:84:fa:cb:31:30:99:06:1c:
                    06:ab:69:9f:f4:a1:16:bd:1c:be:77:f0:87:1f:3e:
                    9e:8f:2c:46:4b:d0:65:70:98:9f:7a:a0:f0:1b:39:
                    cd:f6:fd:f4:a8:07:21:4b:66:6f:8c:cf:89:77:5b:
                    a4:58:53:1d:ce:bd:c8:fe:74:b8:0a:65:c6:05:2a:
                    2a:ac:ae:f0:b1:38:f8:d4:3a:15:26:9b:ef:03:97:
                    8c:ed:80:a2:fc:d3:0b:b0:06:85:29:46:4d:ea:c5:
                    1a:28:ce:47:bb:2f:27:8e:b4:42:a4:e9:5b:27:a2:
                    33:82:75:fa:c1:94:1a:39:02:80:40:3f:36:9d:6a:
                    16:21:db:b6:4d:54:97:72:b2:59:ea:df:a3:66:16:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:E3:4F:DE:A4:05:80:B3:49:C6:BB:83:6C:68:6E:04:5A:19:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1a3404c5-092f-3992-9fef-92309617b835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.186.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:43:db:6c:70:fb:e7:56:dc:cd:15:1a:00:30:1c:10:b8:81:
         b2:2a:4e:36:61:8b:cd:d2:5e:2d:8d:e1:c2:ef:4e:c5:a8:70:
         35:2f:06:e8:46:44:f3:f6:f8:f9:4c:0c:51:99:b9:e3:26:0e:
         c8:ae:e1:a3:15:18:3f:f6:a0:0f:9d:c1:3a:1f:16:ea:b1:66:
         95:59:3b:bf:7a:b5:71:37:b8:69:4e:04:9b:ca:89:05:24:da:
         38:d2:c3:bd:77:4f:43:27:b0:41:6c:29:6d:6e:f3:99:9e:d8:
         40:66:86:f4:fc:c3:95:de:f8:71:55:39:b5:38:72:da:b4:19:
         50:dc:b6:6d:cc:1b:e5:00:a4:41:a4:58:b4:2a:e4:08:11:8d:
         12:88:2d:75:bc:51:3b:a0:bb:9e:5d:70:0c:79:9e:e3:3c:b4:
         05:f9:63:30:37:d8:7f:d9:cd:f5:28:d2:8f:e1:05:10:ac:c1:
         6e:91:9d:04:d1:41:c9:4f:f4:3c:49:da:6a:dd:6a:79:27:0b:
         83:ee:a3:50:19:4d:99:16:37:23:fd:93:58:2b:0a:4c:0f:7a:
         c3:10:82:bc:41:de:e5:60:df:0d:37:f1:9e:63:92:bd:cc:1d:
         44:38:7e:a6:ba:32:be:5b:f9:6b:4a:a3:60:fa:e3:d7:ae:78:
         da:86:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----