Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b9b29d1-05f7-3689-b5c1-ccef645fb2e6.roa
File:                     3b9b29d1-05f7-3689-b5c1-ccef645fb2e6.roa (raw, json)
Hash identifier:          4wRlHRjowx3oqQd+5mlhHJuIroIEO8FbIfqSTfwkJpI=
Subject key identifier:   2D:52:09:A4:CD:CA:8D:A5:54:87:EE:F8:D2:8C:A6:10:90:C3:1D:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841B4A88096AF083C75C7286D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b9b29d1-05f7-3689-b5c1-ccef645fb2e6.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 31 Jul 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.164.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b4:a8:80:96:af:08:3c:75:c7:28:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 31 04:00:00 2025 GMT
        Subject: CN=d37fdae4-ddd9-4fbc-bed4-ecbd02a19e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:1b:49:77:af:81:83:a4:71:92:f7:23:42:
                    63:1f:82:46:95:33:7a:9e:57:42:1b:4b:e2:0b:a2:
                    16:12:3e:94:2a:9e:e4:61:db:66:04:05:69:7d:d1:
                    34:5a:31:c5:c2:5a:70:7d:23:71:f4:4f:1e:97:40:
                    26:d8:40:ff:65:8b:bf:af:e4:83:89:a5:92:b0:9a:
                    b8:58:5d:a6:58:6c:f9:bf:6d:d4:a3:2c:6b:58:20:
                    97:df:f8:32:6e:f5:39:2a:be:47:dd:7b:ec:a0:e1:
                    66:48:ec:9e:33:c5:9d:0b:a7:b2:f0:ee:79:5f:29:
                    d7:de:59:d2:e3:d9:36:a9:33:9c:12:8f:e9:3b:0d:
                    b2:0d:3a:dd:1c:4a:c3:4a:f0:0c:94:b1:7d:01:5a:
                    7d:61:fb:39:93:bc:21:ab:84:b3:4f:54:44:9e:5f:
                    5c:21:a2:32:79:45:ac:67:f7:c6:f8:3a:71:00:17:
                    4b:ea:c7:56:20:8e:97:32:8b:d1:9d:33:08:c0:fa:
                    06:d5:fb:7e:a3:9f:14:84:78:8e:73:ab:4b:ec:55:
                    10:8f:03:d9:90:dd:e8:d2:48:fc:88:a1:7d:11:ef:
                    15:51:7d:59:a7:a0:fe:85:ac:86:16:43:99:6a:97:
                    16:e4:ca:69:dd:8b:3c:82:9e:b6:58:6a:c7:3d:ec:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:09:A4:CD:CA:8D:A5:54:87:EE:F8:D2:8C:A6:10:90:C3:1D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b9b29d1-05f7-3689-b5c1-ccef645fb2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:60:07:55:26:27:3e:e0:c9:28:af:81:79:1f:28:74:6a:75:
         22:24:a5:77:ae:6f:c0:e5:58:a3:98:13:3b:b9:2e:fb:1d:3f:
         8a:50:a3:9f:73:1c:f1:c9:34:9e:70:5a:44:86:5c:95:f1:6b:
         6c:7f:eb:6c:4b:04:51:c5:8a:df:5e:72:85:be:ba:a0:ea:d3:
         43:42:33:4c:44:9d:1f:4d:4b:e2:bb:33:92:9b:60:64:d4:76:
         94:ef:bf:2e:e1:9c:9f:d4:cf:bc:79:ac:fe:bc:3b:3d:82:59:
         83:9e:72:ea:8f:e3:00:9b:57:df:2f:e8:59:af:78:0b:61:70:
         ec:ef:d5:e0:47:30:d1:e0:74:0e:c1:d5:9b:1e:47:00:e4:a5:
         98:ad:7e:db:31:1c:c4:45:b8:b0:b8:79:42:4f:02:9f:c9:c4:
         43:f5:93:b5:78:79:25:a7:cf:4e:09:d9:25:2a:db:8b:2a:b2:
         b1:31:4d:67:be:dc:b5:28:0f:0a:21:ba:26:51:4c:c3:bd:78:
         d8:0c:11:34:b6:db:65:e1:7a:e3:16:ff:3c:e9:5a:2f:f5:a1:
         62:bb:72:f2:2e:02:f8:21:ac:45:83:0d:b7:8f:dc:42:3b:4b:
         ff:e9:b9:92:d1:9c:28:64:12:b4:cb:4d:65:80:d1:31:c3:76:
         e7:5d:da:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEG0qICWrwg8dccobQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDczMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDM3ZmRhZTQtZGRkOS00ZmJjLWJlZDQtZWNiZDAyYTE5ZTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktwbSXevgYOkcZL3I0JjH4JGlTN6nldCG0vi
C6IWEj6UKp7kYdtmBAVpfdE0WjHFwlpwfSNx9E8el0Am2ED/ZYu/r+SDiaWSsJq4
WF2mWGz5v23UoyxrWCCX3/gybvU5Kr5H3XvsoOFmSOyeM8WdC6ey8O55XynX3lnS
49k2qTOcEo/pOw2yDTrdHErDSvAMlLF9AVp9Yfs5k7whq4SzT1REnl9cIaIyeUWs
Z/fG+DpxABdL6sdWII6XMovRnTMIwPoG1ft+o58UhHiOc6tL7FUQjwPZkN3o0kj8
iKF9Ee8VUX1Zp6D+hayGFkOZapcW5Mpp3Ys8gp62WGrHPeyeyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1SCaTNyo2lVIfu+NKMphCQwx3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2I5YjI5ZDEtMDVmNy0z
Njg5LWI1YzEtY2NlZjY0NWZiMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKS8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJgB1UmJz7gySivgXkfKHRqdSIkpXeub8DlWKOYEzu5LvsdP4pQo59z
HPHJNJ5wWkSGXJXxa2x/62xLBFHFit9ecoW+uqDq00NCM0xEnR9NS+K7M5KbYGTU
dpTvvy7hnJ/Uz7x5rP68Oz2CWYOecuqP4wCbV98v6FmveAthcOzv1eBHMNHgdA7B
1ZseRwDkpZitftsxHMRFuLC4eUJPAp/JxEP1k7V4eSWnz04J2SUq24sqsrExTWe+
3LUoDwohuiZRTMO9eNgMETS222XheuMW/zzpWi/1oWK7cvIuAvghrEWDDbeP3EI7
S//puZLRnChkErTLTWWA0THDdudd2iY=
-----END CERTIFICATE-----