Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/699cd5af-08f8-3097-af38-575230c81859.roa
File:                     699cd5af-08f8-3097-af38-575230c81859.roa (raw, json)
Hash identifier:          60FrfqXeW/dg0JQppgMOlIBFCJ9sK5QnXplW7QBm21I=
Subject key identifier:   90:AA:8D:E0:0F:15:71:28:A8:D4:82:FA:EE:AD:39:1F:43:EF:A4:A3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584060D809C5F265D05733C72600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/699cd5af-08f8-3097-af38-575230c81859.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 31 Mar 2025 04:00:00 +0000
asID:                     399114
IP address blocks:        107.164.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Jun 2023 23:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:60:d8:09:c5:f2:65:d0:57:33:c7:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 31 04:00:00 2025 GMT
        Subject: CN=29ccc06d-55fd-4967-8300-d9ef8f82f23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3c:c1:01:0b:51:08:90:2e:18:22:69:2b:8d:
                    b7:0f:f6:67:32:2c:8d:37:d1:f8:e7:32:44:09:d8:
                    1d:34:12:b2:aa:54:85:d1:c1:5a:72:b0:d4:65:d3:
                    db:90:f8:15:4a:04:fa:41:7d:35:90:74:94:f0:67:
                    3b:0b:36:41:b7:8d:1f:7a:a1:bf:83:87:d3:61:61:
                    a4:e5:39:df:12:19:c5:44:48:76:32:cb:1c:72:94:
                    33:4e:a9:d3:53:7b:fc:4d:4c:25:6e:35:5d:fa:fc:
                    21:4d:2f:80:c3:12:b2:78:bc:4d:1c:f9:15:68:90:
                    be:63:18:79:50:54:a9:a3:d4:63:23:bb:b9:c3:a2:
                    71:21:36:76:5b:b6:97:3e:2a:1c:8d:3e:ab:a0:d6:
                    e1:ba:24:7f:ff:08:96:f1:77:e5:75:01:00:51:8e:
                    0a:a0:d9:dd:6f:68:f4:6f:8b:4d:ee:b5:e1:64:18:
                    59:f2:94:3e:1a:0f:90:75:27:af:1e:66:67:f8:60:
                    ed:3e:c1:b2:89:ac:62:3a:7c:ab:7e:8c:2f:ef:dd:
                    cf:bf:03:cb:22:2b:78:45:79:69:24:b1:15:7b:d8:
                    74:05:0f:18:79:ec:fa:86:45:75:a9:1b:8f:7e:0e:
                    59:30:6d:d7:16:2f:74:fe:88:29:12:53:91:5b:ab:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AA:8D:E0:0F:15:71:28:A8:D4:82:FA:EE:AD:39:1F:43:EF:A4:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/699cd5af-08f8-3097-af38-575230c81859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:77:f9:3a:25:38:37:37:f6:e8:e9:f3:7c:7a:f6:b8:7b:
         ef:84:3a:8f:0e:b4:b1:83:ae:10:c2:0e:9f:61:7c:a7:3d:ff:
         9b:a7:d5:e6:fb:f7:10:15:09:be:89:b8:3c:e0:79:fd:d1:b8:
         c9:5e:58:32:b3:a9:48:5d:30:cc:ee:0b:35:9d:58:f5:54:08:
         de:57:01:8e:1e:40:fe:c5:83:33:00:c3:1f:5d:18:c2:64:96:
         37:58:e7:1b:9c:f3:42:8b:fd:41:47:76:f9:f2:9b:e9:b7:1f:
         46:9e:85:f0:b7:70:3c:d3:f0:87:a5:15:07:11:48:ca:c3:55:
         27:5d:c4:c6:8c:9a:4d:bd:80:0f:38:84:ef:87:1d:24:d9:68:
         ca:78:60:72:fe:66:44:00:62:9a:e9:81:82:0b:07:68:f1:98:
         c9:8f:a0:8c:a2:38:89:68:51:72:7c:6f:bf:91:01:e7:6b:2e:
         74:7e:3a:79:a5:19:82:8f:7c:47:33:ab:00:14:99:19:85:77:
         0b:47:75:a6:d1:b6:58:a0:39:10:f1:04:47:c8:f3:c3:3a:ba:
         50:75:87:1a:e7:7a:36:8d:63:59:4e:25:67:e4:4c:a5:55:e4:
         40:83:3b:be:58:6d:b6:fb:3b:35:68:c7:c6:a9:92:55:e7:fb:
         67:b8:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----