Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3e2750c-3ead-3f9b-b978-1ea0c1671185.roa
File:                     a3e2750c-3ead-3f9b-b978-1ea0c1671185.roa (raw, json)
Hash identifier:          I7kjysKVhuJ9vBQHOKRHb/kjR5iyxIpXC18xyV4QsRI=
Subject key identifier:   B1:EC:1D:21:80:AD:86:0D:E2:A6:A9:13:7C:A4:11:91:F4:83:D2:C9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858416D06D5EB2EF2EA8FD631E3C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3e2750c-3ead-3f9b-b978-1ea0c1671185.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sat 05 Jul 2025 04:00:00 +0000
asID:                     54252
IP address blocks:        142.252.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:6d:06:d5:eb:2e:f2:ea:8f:d6:31:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul  5 04:00:00 2025 GMT
        Subject: CN=e759253c-6cc2-40ba-b980-df1d9777c09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:98:b7:d8:a8:73:17:98:f5:c7:0b:67:83:
                    a0:c7:88:73:e6:c5:15:f6:e5:f9:4d:6f:0f:d3:9c:
                    72:cf:d7:8d:19:7f:ce:54:80:8a:45:03:b9:2e:4a:
                    f6:ef:13:8d:97:ae:8c:a0:63:ce:32:8c:ab:2c:84:
                    96:14:9d:c1:15:00:49:0e:5c:40:89:ef:a4:ec:b0:
                    69:ab:ab:a7:ee:91:1f:a3:15:a9:a8:53:fe:6b:c2:
                    21:fc:a6:ae:f5:37:d8:d0:19:05:1d:62:8e:5c:ad:
                    47:83:8f:a4:8d:46:7a:7b:ae:cc:5c:81:b5:43:93:
                    81:99:16:3b:1b:5e:af:b5:c9:83:14:d4:1f:6c:7c:
                    ce:2b:66:e8:4a:33:6c:67:19:36:7a:aa:69:6f:cb:
                    89:e8:fc:58:f5:be:31:db:64:02:fd:c4:39:b9:4a:
                    7f:3f:28:fe:e8:af:a9:01:2e:a2:1a:bd:09:7e:24:
                    83:f3:11:89:7a:9f:a8:c0:1c:c9:28:45:b9:09:69:
                    7a:50:90:76:61:ce:c0:64:a2:3f:31:83:d8:09:39:
                    89:31:84:dd:4a:68:ee:c4:86:f1:9d:c0:2e:c3:33:
                    07:bf:0d:c4:fc:6e:23:92:71:c9:5b:07:11:fe:90:
                    6f:59:34:e1:1d:67:86:c8:7d:ba:42:52:5b:a9:92:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:1D:21:80:AD:86:0D:E2:A6:A9:13:7C:A4:11:91:F4:83:D2:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a3e2750c-3ead-3f9b-b978-1ea0c1671185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:3f:ce:f2:b6:76:52:d1:a8:d5:1a:e7:e9:99:e7:d3:6d:
         7d:11:55:c0:81:d5:5e:05:16:7c:6f:c1:61:6a:42:77:4e:e9:
         c5:12:b0:b4:8b:90:bc:9e:e0:dc:75:e1:38:6d:8f:eb:d9:5e:
         a0:7b:be:e3:8d:a4:2e:f6:76:10:c4:94:c0:d1:38:fc:d8:a3:
         d6:fe:59:b7:2b:6f:59:34:58:9a:83:93:c7:49:4b:09:45:87:
         d9:44:d7:eb:55:65:89:80:b6:86:17:f0:27:66:d4:1c:18:87:
         bf:8e:e9:54:d7:f6:33:58:a7:db:34:c5:da:fe:4f:0b:d9:1b:
         1b:61:88:6a:66:ff:ce:84:38:ba:51:25:cb:41:13:48:76:4c:
         b1:af:83:d5:71:8a:90:d1:c6:35:d1:e1:f3:2b:6c:c1:90:d1:
         23:f9:7b:c6:1d:df:b4:ec:4e:c9:fb:ff:20:86:e7:b2:81:0c:
         16:27:bd:f6:ce:f0:86:70:5c:59:e8:ca:3f:85:64:af:24:e2:
         67:fb:7e:89:ac:6e:b0:e9:2d:d2:a7:1f:31:e9:11:aa:0c:98:
         68:07:5e:01:8a:1c:26:87:8b:c1:a7:fa:2c:2e:35:e6:28:91:
         bb:b7:bf:ec:81:ea:00:c9:45:71:45:06:5b:2c:42:ee:45:0d:
         21:b7:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----