Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c67bb82-4a48-3dec-9bc3-e73d68f3965c.roa
File:                     4c67bb82-4a48-3dec-9bc3-e73d68f3965c.roa (raw, json)
Hash identifier:          q/ZxNy2PTvFpcnQCpuE2vf7zMD4qh5yGYOQsb8FjHUk=
Subject key identifier:   EE:8B:16:4C:2D:37:56:B9:DF:36:33:15:0B:01:EC:9C:41:0D:02:23
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841B4A886F29698F01B9C75CBA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c67bb82-4a48-3dec-9bc3-e73d68f3965c.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 31 Jul 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.165.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b4:a8:86:f2:96:98:f0:1b:9c:75:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 31 04:00:00 2025 GMT
        Subject: CN=5532b6e3-d927-464a-b758-91ccf8845997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:88:6e:1d:3f:26:59:bc:64:74:42:24:95:
                    b7:d6:60:76:a0:ee:79:f3:18:d8:31:b3:49:9e:c1:
                    f9:de:bb:d2:bc:7c:2e:ee:ab:a3:29:4f:b4:fb:94:
                    ff:41:42:a7:68:0a:c9:e6:6d:e1:09:28:fa:45:e2:
                    18:02:f3:9b:25:7a:b2:50:ba:3c:0e:bf:b5:b9:0e:
                    65:e8:4c:bc:a5:29:c3:c4:d5:b6:fc:50:c3:60:c9:
                    41:59:81:c4:70:27:53:40:3b:e4:dd:9a:5c:ad:80:
                    93:c6:29:1f:80:d4:33:91:aa:8c:e7:93:eb:c2:ff:
                    da:42:0e:4d:db:02:ed:f1:93:ee:46:91:76:8d:f4:
                    e4:8a:91:4c:b3:83:4a:f2:a3:c5:f4:dc:07:e9:2f:
                    86:12:0d:d7:85:35:7a:0d:52:8c:58:4f:69:c0:d0:
                    cd:93:8e:cc:c5:51:9b:1e:32:c8:dd:a9:fc:95:18:
                    5f:e5:e7:61:03:3c:59:27:29:5d:5b:9e:90:af:d7:
                    e1:c6:94:7f:f5:26:b9:f1:ca:a2:54:40:1b:2c:9b:
                    cd:88:35:c1:e1:61:d5:a3:f8:99:df:18:4b:c9:13:
                    21:b2:fc:99:30:2f:96:53:53:79:8c:c4:f9:71:5f:
                    80:e1:ee:74:cb:17:a8:48:14:40:1f:6b:c6:d0:1a:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8B:16:4C:2D:37:56:B9:DF:36:33:15:0B:01:EC:9C:41:0D:02:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c67bb82-4a48-3dec-9bc3-e73d68f3965c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a9:91:43:d0:a5:be:de:a6:b7:04:38:99:91:a5:3c:3f:51:
         f6:95:eb:17:2a:bf:ff:ab:6f:f3:03:0b:f1:56:9b:e8:09:88:
         f2:23:32:97:6c:48:6d:cb:d1:de:a7:76:6d:1e:f8:22:8b:a5:
         2d:aa:a8:f2:b8:1b:5a:80:e7:2d:7c:a7:ce:71:04:e7:b3:d0:
         ba:66:78:bb:42:7b:42:17:49:f7:a9:3b:9c:24:5a:43:23:21:
         06:8c:72:7e:8b:85:f4:7e:ed:2d:31:57:bb:26:6f:34:f9:b6:
         84:e1:8f:16:84:9d:d8:e9:bf:83:ca:84:3d:0b:ae:4b:d6:43:
         2f:77:ec:a5:be:c5:ec:7d:34:3d:97:3e:c6:d0:95:89:02:19:
         1a:e2:21:86:53:8a:74:33:e4:7c:ca:ef:38:83:4a:b0:58:96:
         5c:44:f0:65:01:9f:62:28:cd:55:d3:66:00:46:eb:d9:7b:40:
         aa:f5:30:34:c0:13:f4:72:54:38:be:64:a1:8e:a3:0b:67:d6:
         50:30:48:32:db:61:b9:56:90:f3:c3:f0:89:20:0a:c5:0c:d3:
         60:21:68:b9:b3:a9:36:00:68:45:28:b6:6c:a9:de:49:4d:90:
         ae:cc:53:f7:7e:a3:73:95:1f:55:95:1f:8b:3e:4b:6b:85:b3:
         e6:d8:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----