Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b48bde9-fb0d-33eb-9c02-16f8dee1d521.roa
File:                     5b48bde9-fb0d-33eb-9c02-16f8dee1d521.roa (raw, json)
Hash identifier:          Hu+MlNdFdgpFEETJ/IM1azlYxdm28ee7wm6ryScETTs=
Subject key identifier:   65:3F:C8:0A:A5:17:5F:AA:58:2F:AA:84:97:C8:B6:7D:B2:20:77:1B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841245958006AE26F5A478F9EE8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b48bde9-fb0d-33eb-9c02-16f8dee1d521.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 09 Jun 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        104.253.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Sep 2023 17:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:24:59:58:00:6a:e2:6f:5a:47:8f:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  9 04:00:00 2025 GMT
        Subject: CN=8b8ee3c4-c6f4-4c2f-9e5b-eb1cd38c082c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:c8:52:ef:a0:c6:fd:b9:63:07:2d:bb:9c:
                    71:89:8f:40:d2:3e:e0:9f:ec:d3:21:f8:8c:14:88:
                    39:32:5e:f1:65:f5:ea:12:b3:01:0e:92:0c:d0:c8:
                    dc:91:5a:e4:45:44:0c:78:8f:54:82:ac:6c:2e:21:
                    94:40:9e:4c:3c:04:6c:20:2c:8a:42:b6:b0:fb:00:
                    3f:a7:82:c9:39:78:e9:4b:75:30:eb:0c:b8:fe:cf:
                    d8:64:f7:9f:76:da:7b:49:71:0c:51:4c:39:8d:92:
                    f5:15:bb:fa:92:2d:2d:25:87:ab:47:75:76:92:fc:
                    eb:bd:f2:57:cd:0a:80:5a:4c:a4:6b:1c:61:00:2a:
                    56:e9:b0:97:32:56:28:ac:30:e1:3f:6c:09:4a:04:
                    a2:ac:da:c7:97:8b:ec:9d:bf:66:bf:83:67:18:76:
                    8e:d6:c9:3e:51:61:ea:08:3a:04:70:00:ec:56:88:
                    44:35:82:9a:46:5c:0a:73:9d:b9:67:c9:d6:5d:5c:
                    dc:5f:dc:4e:00:bb:4e:dc:5c:3f:92:37:e7:f2:df:
                    3e:5f:bf:ef:f5:2b:73:41:05:1e:0c:10:14:84:75:
                    05:d8:11:0d:34:2a:2b:b6:1d:1f:bd:a8:6b:5b:97:
                    db:a7:ef:3d:cb:d5:e0:a4:7a:dd:df:02:b7:db:a5:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3F:C8:0A:A5:17:5F:AA:58:2F:AA:84:97:C8:B6:7D:B2:20:77:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b48bde9-fb0d-33eb-9c02-16f8dee1d521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:17:7a:fa:dd:2b:61:0e:4b:58:03:7f:32:f5:ad:db:4f:26:
         2a:ff:94:f2:b8:c7:97:e1:44:b5:1b:90:43:4e:c8:b7:37:f9:
         f4:00:12:75:63:bb:6c:4f:e2:53:ef:7f:97:5b:1d:a7:87:be:
         fd:06:61:29:71:28:19:1e:b4:14:6e:97:f5:43:f2:1f:95:b0:
         f0:db:dd:67:c2:9b:99:5e:2d:3c:10:bd:56:59:57:c5:6e:e3:
         8d:3d:4e:cc:d0:34:0b:48:2e:f7:68:66:47:d8:c8:74:85:17:
         2f:9f:a0:67:73:c1:3d:95:63:eb:68:b6:c5:87:6f:c6:8b:5e:
         54:06:ba:3b:e7:44:d6:b6:a1:07:2c:ff:ad:b6:c5:de:46:ce:
         6a:74:8e:c6:6e:07:65:31:dd:0c:58:89:7d:a7:a0:3e:4c:86:
         bd:c8:d5:61:a3:23:0e:f1:33:c0:2e:28:f4:ae:af:43:04:10:
         51:8e:7d:7c:e2:05:c5:60:62:86:c4:aa:98:c6:b6:28:ec:54:
         10:08:06:ff:13:4d:69:17:5a:47:e4:61:d6:2a:ed:63:68:00:
         90:fa:a5:a6:b5:79:79:39:d3:96:ff:5a:c0:5a:8c:7b:65:71:
         11:38:92:a9:cd:8c:94:4c:cc:d6:54:21:1b:7c:1e:ae:ec:6b:
         46:26:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----