Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78aff842-55cc-3a4d-ae8d-ea15a2d57001.roa
File:                     78aff842-55cc-3a4d-ae8d-ea15a2d57001.roa (raw, json)
Hash identifier:          VQ84o9pL6gBd0EakKmqdIo6e0kFPM8lmhO35PeLTgtk=
Subject key identifier:   39:15:AD:0A:C2:95:77:74:1A:E8:3D:81:E5:F4:64:3D:30:0E:82:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840A347C28184F4CEA099620D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78aff842-55cc-3a4d-ae8d-ea15a2d57001.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 24 Apr 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        104.253.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 22:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a3:47:c2:81:84:f4:ce:a0:99:62:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Apr 24 04:00:00 2025 GMT
        Subject: CN=26b3176f-8c2c-4922-902a-90f1a22a4d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:d3:6b:6a:be:d1:1c:37:d3:4e:09:52:d2:
                    5c:2a:6b:97:16:14:51:39:05:db:2d:dd:ba:97:65:
                    e5:8e:62:bb:5c:9b:7f:7c:64:25:f6:b3:a2:00:b4:
                    e1:65:4a:15:ff:0f:a5:6c:ba:2c:19:b8:50:5b:ab:
                    60:c3:ca:ff:42:9c:80:a0:14:49:79:6d:7c:6c:34:
                    d8:50:0a:ef:79:ac:79:28:d8:32:5c:e0:41:5f:fd:
                    ba:22:2a:d9:95:58:ea:c3:c5:2d:9a:5a:a8:00:44:
                    9c:51:8a:77:ee:67:cd:8f:70:eb:4b:64:22:71:c4:
                    18:3a:a1:3b:0d:4e:d6:db:5c:dc:79:0f:85:26:4a:
                    13:91:a2:47:2b:fb:be:50:5e:76:8f:16:23:3f:00:
                    75:f7:f9:57:5a:cf:3e:d9:ce:49:ac:0a:30:30:47:
                    f0:a9:12:f2:28:9f:ff:5e:50:4e:52:5f:a6:32:a2:
                    f0:3f:3d:2b:e7:b3:bd:14:ce:99:3c:12:bb:f7:35:
                    95:c7:7a:6d:14:6b:5d:fa:49:94:c6:22:13:68:a1:
                    d9:ef:66:4b:de:d0:15:05:95:a7:b4:93:0b:8b:c6:
                    92:d6:f0:96:f1:31:28:38:f8:22:b4:c4:19:18:85:
                    d3:b3:41:d8:2f:e2:2c:50:5a:08:36:01:31:90:75:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:15:AD:0A:C2:95:77:74:1A:E8:3D:81:E5:F4:64:3D:30:0E:82:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/78aff842-55cc-3a4d-ae8d-ea15a2d57001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:20:96:80:07:81:3c:85:5b:f6:ef:0a:8f:86:b4:ce:c2:
         5d:82:62:a2:7e:73:06:ea:0e:66:f5:7d:c3:f2:6b:56:33:5e:
         d1:fa:15:46:e8:3a:2f:00:92:47:d9:a6:bb:c9:72:8e:36:bc:
         3b:06:63:f9:0b:14:f2:bc:35:00:1e:64:37:a0:49:bd:62:fa:
         15:89:4d:68:0f:e6:89:63:a2:5a:74:3e:95:da:6d:26:70:a3:
         b0:6b:63:ab:db:28:88:d0:40:38:e1:36:ee:cf:ce:47:dc:b4:
         35:9f:4a:3a:d6:df:c3:0a:a4:bd:7f:8c:9b:e4:6e:ca:df:93:
         91:f7:41:ce:aa:e8:f4:1d:34:04:f7:b0:65:64:9a:65:0c:c1:
         bc:dd:43:0c:ed:c4:0d:5d:26:98:49:f6:7c:f9:28:66:47:fb:
         57:4a:47:48:9c:d8:62:02:0e:91:7b:55:c9:8f:b9:7b:29:f8:
         ac:cb:55:9a:41:13:6c:97:1c:d1:c9:6b:36:75:ac:8a:c2:a0:
         35:fe:b8:c6:1d:52:95:a5:40:60:a1:70:3e:d1:a7:ae:21:2f:
         45:54:aa:68:ef:6c:d5:c7:e1:3e:64:a1:72:c7:e8:5d:63:dc:
         73:09:0a:c6:27:f8:37:e8:b2:52:15:8c:f7:e8:5d:b8:3a:6d:
         a6:de:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----