Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8cca225a-7565-3396-9544-d34af5a6eea0.roa
File:                     8cca225a-7565-3396-9544-d34af5a6eea0.roa (raw, json)
Hash identifier:          /Z51nSRHvqmXW6Cf2BIx4Pta05cLdyP4UQe5rOT44DY=
Subject key identifier:   68:38:4C:BC:B9:E9:2D:18:94:DF:43:60:76:AF:6C:D1:B0:F9:95:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840A3AB19CEF138451CC3DEBF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8cca225a-7565-3396-9544-d34af5a6eea0.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 24 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        104.253.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Sep 2023 17:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a3:ab:19:ce:f1:38:45:1c:c3:de:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Apr 24 04:00:00 2025 GMT
        Subject: CN=5b9b3846-9055-42cd-b36e-7e356607d91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:ad:f5:53:30:3b:75:a9:8d:29:8d:9e:62:
                    c1:57:60:1a:23:77:0b:d0:b3:7c:ac:4a:d9:ec:82:
                    af:2c:ca:75:cc:f9:53:4d:aa:c3:43:f1:61:b6:4e:
                    c1:46:bc:2f:06:d8:51:41:5a:3d:f0:9d:a6:5e:72:
                    b8:d0:f5:ca:14:2d:46:d5:b2:f6:80:9f:04:b1:d3:
                    7b:fb:0b:cf:56:58:04:0f:b5:a0:0d:02:3b:a1:bd:
                    f1:b2:4f:c7:8a:9d:fc:b7:6a:1a:42:dc:6d:d8:e9:
                    c2:38:b1:64:20:f4:98:36:da:f7:49:c4:b6:2c:29:
                    5c:9c:99:07:e7:19:d5:98:c5:2e:61:e3:bd:24:33:
                    39:21:66:05:49:b8:33:a1:4b:e4:df:35:f5:20:41:
                    0c:33:b2:81:6a:52:1f:bc:a2:c7:f5:2c:62:01:1f:
                    2e:4f:1b:06:ee:5f:3f:4a:f4:fe:b9:18:40:89:95:
                    9c:e0:94:2b:30:d6:be:e9:fd:42:69:6f:6a:dd:6e:
                    e8:b9:d8:e6:a9:08:96:01:c1:42:db:69:03:95:67:
                    8c:a2:2d:07:e3:56:9f:e5:10:ac:05:6b:78:4c:cd:
                    8f:ff:da:21:6d:4c:99:28:14:f5:e0:5f:be:25:ff:
                    ba:e6:d8:7b:bb:12:07:d8:2b:6b:6a:47:53:0c:46:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:38:4C:BC:B9:E9:2D:18:94:DF:43:60:76:AF:6C:D1:B0:F9:95:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8cca225a-7565-3396-9544-d34af5a6eea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:71:3f:d1:7a:c0:94:12:09:dc:49:42:b9:c1:a8:c2:9a:b0:
         cf:e0:ca:fe:e5:7d:a4:4a:1a:2f:94:00:75:79:a1:2c:1a:84:
         0b:92:6f:24:d0:7d:47:ef:28:aa:08:f2:83:f4:b0:72:49:b3:
         95:86:c7:94:cf:0a:d7:9e:9f:53:a2:92:e2:47:09:8f:e5:87:
         6a:ee:dd:7b:70:c3:a3:bf:0a:fa:b1:3f:d1:d5:e6:92:80:6b:
         ef:96:3b:aa:2c:af:d6:52:b4:b6:12:05:e2:17:37:3b:0f:4a:
         b9:90:e9:bc:e2:f7:e4:9d:c9:88:92:56:f7:cf:23:ee:a1:e6:
         bd:92:0b:55:f6:f4:ab:34:64:88:4a:a7:db:5d:87:60:b3:6f:
         9c:33:1d:65:59:41:90:59:e9:6d:4f:b8:d2:27:25:2f:c9:cf:
         43:26:18:ee:a2:3f:ca:1f:91:5f:e6:6a:4a:83:73:a5:5b:90:
         26:69:9f:0e:e6:e5:9a:16:52:0d:02:05:84:d1:73:54:0e:09:
         2e:63:13:af:db:5d:8b:5e:96:3b:f5:24:70:32:f7:be:de:bc:
         47:c3:68:10:9d:5a:78:95:f9:d4:7a:96:45:71:2f:40:e8:fe:
         42:b3:96:cd:8e:8c:30:f5:78:8e:fa:6e:de:1c:a3:35:60:76:
         e6:6f:df:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECjqxnO8ThFHMPev4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDQyNDA0MDAwMFowLzEtMCsGA1UEAxMk
NWI5YjM4NDYtOTA1NS00MmNkLWIzNmUtN2UzNTY2MDdkOTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2it9VMwO3WpjSmNnmLBV2AaI3cL0LN8rErZ
7IKvLMp1zPlTTarDQ/Fhtk7BRrwvBthRQVo98J2mXnK40PXKFC1G1bL2gJ8EsdN7
+wvPVlgED7WgDQI7ob3xsk/Hip38t2oaQtxt2OnCOLFkIPSYNtr3ScS2LClcnJkH
5xnVmMUuYeO9JDM5IWYFSbgzoUvk3zX1IEEMM7KBalIfvKLH9SxiAR8uTxsG7l8/
SvT+uRhAiZWc4JQrMNa+6f1CaW9q3W7oudjmqQiWAcFC22kDlWeMoi0H41af5RCs
BWt4TM2P/9ohbUyZKBT14F++Jf+65th7uxIH2CtrakdTDEYmQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGg4TLy56S0YlN9DYHavbNGw+ZX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGNjYTIyNWEtNzU2NS0z
Mzk2LTk1NDQtZDM0YWY1YTZlZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZxP9F6wJQSCdxJQrnBqMKasM/gyv7lfaRKGi+UAHV5oSwahAuSbyTQ
fUfvKKoI8oP0sHJJs5WGx5TPCteen1OikuJHCY/lh2ru3Xtww6O/CvqxP9HV5pKA
a++WO6osr9ZStLYSBeIXNzsPSrmQ6bzi9+SdyYiSVvfPI+6h5r2SC1X29Ks0ZIhK
p9tdh2Czb5wzHWVZQZBZ6W1PuNInJS/Jz0MmGO6iP8ofkV/makqDc6VbkCZpnw7m
5ZoWUg0CBYTRc1QOCS5jE6/bXYteljv1JHAy977evEfDaBCdWniV+dR6lkVxL0Do
/kKzls2OjDD1eI76bt4cozVgduZv3wY=
-----END CERTIFICATE-----