Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/795171a2-3071-3465-a6f2-e28b5e6a1467.roa
File:                     795171a2-3071-3465-a6f2-e28b5e6a1467.roa (raw, json)
Hash identifier:          4svGGvtoGl+f2ywStVt2aUsgx7VI4OAxdDlShR5NyYs=
Subject key identifier:   84:2C:00:58:00:05:EA:E4:05:7A:09:35:6F:2A:B6:2C:AC:EF:8F:02
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584039AF224481FAFB7383E64580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/795171a2-3071-3465-a6f2-e28b5e6a1467.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 17 Mar 2025 04:00:00 +0000
asID:                     136787
IP address blocks:        104.252.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:39:af:22:44:81:fa:fb:73:83:e6:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 17 04:00:00 2025 GMT
        Subject: CN=87b945ec-13a1-40d5-b724-7656f313f0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:34:ef:b9:60:69:8d:61:f1:b0:3f:1c:f0:
                    f2:cf:ae:58:59:94:7b:f5:8c:89:94:85:a8:eb:39:
                    e1:4e:99:28:12:c1:d9:f5:27:db:3f:12:3c:b8:60:
                    7b:02:10:26:9f:59:eb:65:e8:1e:ff:91:99:43:35:
                    7d:39:e8:9c:ce:d6:55:88:63:d5:25:0b:42:9d:cb:
                    74:76:07:18:07:a7:15:c3:0d:15:eb:07:d6:c8:b5:
                    d9:fe:af:33:05:fd:f8:c1:9b:87:48:ca:4b:17:e9:
                    0d:46:8e:72:4d:30:92:72:c6:df:a3:6e:53:10:2a:
                    07:39:23:10:35:93:3e:b5:41:fa:5a:ee:fc:3c:56:
                    d8:9e:76:fa:87:e6:28:c2:5d:ad:6f:25:27:e5:ab:
                    7e:77:d0:8a:06:dd:bd:bf:e5:87:4b:74:ac:d0:e0:
                    37:d1:69:1b:c0:4d:79:0a:d2:98:c0:32:dd:4c:8c:
                    12:57:90:99:4f:ab:f0:9e:eb:4a:9e:75:85:94:77:
                    02:ae:b4:e4:44:0a:99:a1:68:47:f1:b8:88:03:23:
                    7a:0d:58:8a:bb:19:72:12:79:93:ee:29:ef:68:c1:
                    63:79:58:8b:f9:b2:20:55:26:63:ef:88:78:5e:56:
                    89:e9:08:98:c2:7b:d8:9b:cd:f2:be:c5:d3:b3:9e:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2C:00:58:00:05:EA:E4:05:7A:09:35:6F:2A:B6:2C:AC:EF:8F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/795171a2-3071-3465-a6f2-e28b5e6a1467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:0a:80:16:5d:c3:63:85:02:8e:4d:c1:af:38:63:5c:42:
         a5:23:eb:6e:f9:89:8d:ad:24:d8:e8:39:77:cc:e6:b6:2a:d5:
         d2:8d:71:f7:82:99:f4:d7:6c:88:4c:9d:99:dd:14:c6:b9:4e:
         7a:cd:68:ba:f9:a5:cf:32:6c:f4:f4:9a:60:25:af:83:5d:50:
         c5:2a:25:f9:86:99:5b:12:34:6d:27:4b:83:d1:ab:64:7d:5b:
         4e:e4:d1:d7:94:5a:dc:0c:60:aa:82:d2:6d:f7:6c:de:0a:51:
         be:0d:21:f1:4c:5d:fc:05:6a:0c:b7:18:21:f8:ee:94:1c:d3:
         e3:6f:56:6b:e1:fb:22:83:27:2b:1f:32:12:c7:bf:3b:78:75:
         76:fd:c4:5d:1c:e8:a2:6f:f9:cd:15:82:51:b7:52:de:62:04:
         b8:d9:99:98:99:f0:2a:ac:ac:67:78:9a:76:a5:66:1d:82:5b:
         30:3e:41:99:d4:73:46:32:da:2d:a2:a8:2f:85:6f:87:7b:c2:
         fd:26:13:5c:32:a0:83:eb:a3:2f:8c:20:6c:e2:4b:22:f6:9c:
         63:1f:2f:2c:3e:4a:18:98:70:f3:12:56:84:c6:dc:02:10:78:
         d1:43:11:9c:8a:b6:51:1b:30:85:af:64:72:ed:15:fd:33:13:
         a8:7d:63:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEA5ryJEgfr7c4PmRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDMxNzA0MDAwMFowLzEtMCsGA1UEAxMk
ODdiOTQ1ZWMtMTNhMS00MGQ1LWI3MjQtNzY1NmYzMTNmMGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMI077lgaY1h8bA/HPDyz65YWZR79YyJlIWo
6znhTpkoEsHZ9SfbPxI8uGB7AhAmn1nrZege/5GZQzV9OeicztZViGPVJQtCnct0
dgcYB6cVww0V6wfWyLXZ/q8zBf34wZuHSMpLF+kNRo5yTTCScsbfo25TECoHOSMQ
NZM+tUH6Wu78PFbYnnb6h+Yowl2tbyUn5at+d9CKBt29v+WHS3Ss0OA30WkbwE15
CtKYwDLdTIwSV5CZT6vwnutKnnWFlHcCrrTkRAqZoWhH8biIAyN6DViKuxlyEnmT
7invaMFjeViL+bIgVSZj74h4XlaJ6QiYwnvYm83yvsXTs56I6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQsAFgABerkBXoJNW8qtiys748CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzk1MTcxYTItMzA3MS0z
NDY1LWE2ZjItZTI4YjVlNmExNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPx+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdfCoAWXcNjhQKOTcGvOGNcQqUj6275iY2tJNjoOXfM5rYq1dKNcfeC
mfTXbIhMnZndFMa5TnrNaLr5pc8ybPT0mmAlr4NdUMUqJfmGmVsSNG0nS4PRq2R9
W07k0deUWtwMYKqC0m33bN4KUb4NIfFMXfwFagy3GCH47pQc0+NvVmvh+yKDJysf
MhLHvzt4dXb9xF0c6KJv+c0VglG3Ut5iBLjZmZiZ8CqsrGd4mnalZh2CWzA+QZnU
c0Yy2i2iqC+Fb4d7wv0mE1wyoIProy+MIGziSyL2nGMfLyw+ShiYcPMSVoTG3AIQ
eNFDEZyKtlEbMIWvZHLtFf0zE6h9Y6k=
-----END CERTIFICATE-----