Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36910fcb-60e1-39b3-acf9-c8ed1d2aecd8.roa
File:                     36910fcb-60e1-39b3-acf9-c8ed1d2aecd8.roa (raw, json)
Hash identifier:          NWdFQr0MSpdAeI7bpLkrIBg2G2a8MM97qJg1qypo5OA=
Subject key identifier:   F3:5F:F0:60:CB:59:9D:B7:87:AE:C1:4F:67:CB:A7:1C:AE:27:54:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584039AE5D959386526D6FE6B542
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36910fcb-60e1-39b3-acf9-c8ed1d2aecd8.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 17 Mar 2025 04:00:00 +0000
asID:                     136787
IP address blocks:        104.252.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:39:ae:5d:95:93:86:52:6d:6f:e6:b5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 17 04:00:00 2025 GMT
        Subject: CN=ee9db1be-d516-47bc-975c-2ac306206f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:88:55:44:2a:aa:8e:0f:0b:35:6a:bb:ba:
                    2f:fc:4f:7c:04:cd:aa:cd:ea:21:1b:7b:01:03:aa:
                    99:42:83:43:b2:d4:7c:c9:22:e3:a7:70:bd:f7:79:
                    08:4e:cf:69:56:d6:14:7e:0e:d4:e0:a6:e5:6d:4f:
                    18:c0:f5:9a:5c:d9:41:c4:a0:21:d1:9f:1a:79:06:
                    83:48:1b:f4:ee:88:9d:70:18:a5:ba:ba:08:9b:ef:
                    84:7c:c6:d7:47:ee:6a:0b:d8:45:d6:46:ac:9f:2e:
                    6d:95:c7:63:b6:46:6c:15:bd:77:a8:68:17:9f:c5:
                    70:5c:12:0f:c5:8c:e5:63:9e:60:2e:31:be:7a:04:
                    95:b7:04:a8:a1:3e:2e:d7:9a:77:42:e0:c2:72:0d:
                    ad:04:19:02:27:bc:7a:95:77:82:e7:9b:15:7e:4e:
                    6b:44:9b:dd:27:30:a7:84:5e:c1:fd:c8:11:08:e6:
                    77:4a:9a:b4:2a:15:44:c0:be:f6:06:f7:f9:59:ed:
                    39:c7:b3:05:ed:77:67:fc:ed:52:fd:60:8e:21:72:
                    00:c7:f4:39:4a:52:8f:b7:fc:c1:f0:cc:bb:27:ce:
                    b6:5f:d2:22:09:14:f9:e6:94:b1:10:7f:b7:78:bb:
                    94:57:58:5b:8b:fb:5f:bc:a3:51:93:34:9d:87:d1:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:F0:60:CB:59:9D:B7:87:AE:C1:4F:67:CB:A7:1C:AE:27:54:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36910fcb-60e1-39b3-acf9-c8ed1d2aecd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:db:3c:03:6f:92:4e:63:80:68:53:64:07:b3:a7:fe:39:
         79:2e:c6:5e:3b:bc:4b:4a:4a:19:d1:45:e4:5e:35:ca:64:08:
         11:96:14:39:a0:7e:57:ae:2e:6d:c7:5b:9e:5d:89:9f:ae:98:
         76:d8:6f:7f:c1:15:c2:16:90:8f:47:e3:cb:1a:04:6e:ff:d6:
         5c:cd:da:80:64:9c:92:50:19:31:71:42:4b:d1:88:d4:8e:54:
         67:81:1c:cd:74:45:df:ff:fe:32:21:57:ec:88:a7:f8:88:03:
         a7:29:9b:54:50:5b:89:7f:93:97:78:12:ad:02:47:c0:a2:2a:
         f5:f9:9d:de:75:8a:eb:82:67:07:14:5b:64:c2:ae:96:bd:e2:
         d9:e9:f9:c2:bd:23:3c:c1:17:c8:84:73:a4:be:00:cb:54:73:
         67:61:d4:48:6b:50:89:bf:34:d1:79:ba:a9:db:7e:e6:6b:02:
         3a:c2:a6:83:0b:d4:3f:48:e2:4e:90:5d:e2:2f:af:a8:7e:ba:
         66:f9:bf:11:6b:db:61:de:cf:63:30:d7:7d:c2:7b:35:28:4f:
         a5:5d:0f:fe:0c:82:89:1e:7c:cf:5a:2b:80:89:c9:f5:42:14:
         ed:2e:d8:41:e2:7c:72:f1:a2:f0:ff:28:92:30:86:b9:75:49:
         04:d0:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----