Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3c7c0c2-5ebd-394e-8aa4-1b42ab9adb18.roa
File:                     a3c7c0c2-5ebd-394e-8aa4-1b42ab9adb18.roa (raw, json)
Hash identifier:          D+d/dYLrc2Lna4C08CND4NIXZG4wjzvboizPosQhs8Q=
Subject key identifier:   B1:9A:BE:EE:BC:1F:30:49:07:F8:50:2B:D9:FC:BB:9B:86:35:F8:E0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841D98824E4C90275DA5201AC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3c7c0c2-5ebd-394e-8aa4-1b42ab9adb18.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 13 Aug 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.253.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d9:88:24:e4:c9:02:75:da:52:01:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 13 04:00:00 2025 GMT
        Subject: CN=70a5e71f-3638-41db-ad14-7f71c7f8447f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:b4:a2:2b:5d:cd:04:f7:66:1a:51:ef:54:
                    16:42:30:67:0d:20:aa:c5:b6:63:38:82:e3:cb:2a:
                    79:75:68:43:31:b8:15:38:11:c8:de:9f:a0:d0:2f:
                    f4:51:08:0c:04:04:63:8e:ef:bd:32:a3:1d:2d:97:
                    de:c7:a6:23:ab:18:7a:4e:b7:44:40:01:b3:79:1a:
                    be:3c:5d:93:75:81:d1:1a:b3:08:3f:67:59:d3:5d:
                    58:b2:a4:24:4b:c5:81:4a:97:eb:69:9a:c0:3a:c0:
                    97:b0:bd:a9:07:14:c6:79:6e:a8:d2:52:8c:b8:99:
                    eb:23:16:88:7e:7c:b7:dd:fc:89:37:97:7a:9d:f4:
                    31:3a:f5:fe:c4:3f:c4:f6:b0:37:7c:1e:a7:a4:a9:
                    03:0f:94:f4:ff:d9:f2:a9:85:8d:12:74:ff:e8:84:
                    d5:e7:0a:25:0c:84:02:8d:33:b6:00:6c:f1:3f:c8:
                    6c:32:b7:60:ac:5c:1b:af:6c:3b:d7:45:a0:4d:71:
                    6d:49:d0:a4:23:6e:70:11:70:15:0c:42:61:7e:90:
                    ee:11:ab:93:0c:ab:99:69:34:c1:e4:df:38:57:e5:
                    e7:a1:b0:f9:e3:7b:05:26:24:17:18:54:9a:37:df:
                    03:bf:61:40:9f:da:89:cf:79:ca:82:49:e6:b4:dd:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9A:BE:EE:BC:1F:30:49:07:F8:50:2B:D9:FC:BB:9B:86:35:F8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3c7c0c2-5ebd-394e-8aa4-1b42ab9adb18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:7b:0a:1c:45:53:6c:0a:8f:fd:5b:df:91:b8:99:25:8b:
         1d:49:01:71:2c:e9:09:85:17:3f:59:8d:bd:f8:26:fa:5d:3a:
         45:9c:1a:c2:98:4d:ff:c2:99:15:d6:04:a5:65:01:65:e3:27:
         66:00:db:c3:47:92:6e:60:7e:47:70:67:3e:89:51:05:d4:74:
         8f:a6:21:9d:e2:02:56:47:d7:2e:e1:29:66:d0:13:e4:bb:26:
         4d:e0:c1:7a:e0:2e:f6:96:14:b6:4d:28:3b:b4:f1:87:33:d2:
         ff:dd:66:a2:57:31:cd:78:db:bd:42:da:53:3f:02:a3:ae:21:
         66:6b:c1:ab:98:36:e5:55:93:f2:4f:9f:be:0d:05:0a:e1:6d:
         23:6d:60:65:57:64:ad:cc:05:c3:95:d2:3c:02:9b:18:20:56:
         b4:ca:89:43:68:80:4d:4d:fc:69:3c:03:b1:e3:35:20:18:d9:
         85:19:68:32:36:b8:e0:6d:3c:5a:7a:9f:33:12:76:b4:37:7c:
         bd:8f:2e:2f:9f:84:cd:0b:1c:9b:d6:e6:5d:11:6c:90:62:02:
         3e:d9:e2:50:68:01:5c:76:03:a6:41:57:8b:69:49:0e:a1:75:
         9b:b8:08:81:7f:9e:80:f6:c7:61:ef:6b:51:02:df:0c:2c:29:
         ef:d9:ba:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHZiCTkyQJ12lIBrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDgxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NzBhNWU3MWYtMzYzOC00MWRiLWFkMTQtN2Y3MWM3Zjg0NDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8e0oitdzQT3ZhpR71QWQjBnDSCqxbZjOILj
yyp5dWhDMbgVOBHI3p+g0C/0UQgMBARjju+9MqMdLZfex6Yjqxh6TrdEQAGzeRq+
PF2TdYHRGrMIP2dZ011YsqQkS8WBSpfraZrAOsCXsL2pBxTGeW6o0lKMuJnrIxaI
fny33fyJN5d6nfQxOvX+xD/E9rA3fB6npKkDD5T0/9nyqYWNEnT/6ITV5wolDIQC
jTO2AGzxP8hsMrdgrFwbr2w710WgTXFtSdCkI25wEXAVDEJhfpDuEauTDKuZaTTB
5N84V+XnobD543sFJiQXGFSaN98Dv2FAn9qJz3nKgknmtN0CsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGavu68HzBJB/hQK9n8u5uGNfjgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTNjN2MwYzItNWViZC0z
OTRlLThhYTQtMWI0MmFiOWFkYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEblewocRVNsCo/9W9+RuJklix1JAXEs6QmFFz9Zjb34JvpdOkWcGsKY
Tf/CmRXWBKVlAWXjJ2YA28NHkm5gfkdwZz6JUQXUdI+mIZ3iAlZH1y7hKWbQE+S7
Jk3gwXrgLvaWFLZNKDu08Ycz0v/dZqJXMc14271C2lM/AqOuIWZrwauYNuVVk/JP
n74NBQrhbSNtYGVXZK3MBcOV0jwCmxggVrTKiUNogE1N/Gk8A7HjNSAY2YUZaDI2
uOBtPFp6nzMSdrQ3fL2PLi+fhM0LHJvW5l0RbJBiAj7Z4lBoAVx2A6ZBV4tpSQ6h
dZu4CIF/noD2x2Hva1EC3wwsKe/Zuh4=
-----END CERTIFICATE-----