Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6989f1c-3140-3764-9296-926fc31504ab.roa
File:                     a6989f1c-3140-3764-9296-926fc31504ab.roa (raw, json)
Hash identifier:          LUxGgiJ7nQFnlJ/CQ/9lRYJnnB5jA7Mv+3pW7bc9oZw=
Subject key identifier:   1D:1E:BB:0B:0E:FD:49:97:66:67:F1:3E:78:F1:53:AE:2D:AF:20:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841D98831950DEC410B0585B180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6989f1c-3140-3764-9296-926fc31504ab.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 13 Aug 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.253.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d9:88:31:95:0d:ec:41:0b:05:85:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 13 04:00:00 2025 GMT
        Subject: CN=c62abcfb-7302-426a-8eeb-56e8aa0020bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:60:10:83:fb:b5:98:55:85:b5:24:4c:fd:
                    3f:7a:af:12:50:b8:0f:ce:10:b0:01:12:74:94:0e:
                    7f:b4:89:a8:e9:36:3a:c8:03:eb:13:4e:0f:83:34:
                    3e:1d:f5:39:42:4a:17:c8:c5:fc:29:43:03:24:69:
                    25:02:b8:03:b3:56:94:23:91:c0:8b:c5:82:86:bf:
                    82:88:31:25:d1:c1:49:a7:05:f4:ea:b2:7f:6c:80:
                    bb:54:8f:dc:1b:73:7d:c1:96:11:ae:82:7f:58:ce:
                    10:46:30:82:b4:ed:f8:24:b7:cc:c0:9c:88:81:39:
                    5c:1c:37:e5:87:5e:a4:2a:1a:a9:6f:8a:a3:c0:9d:
                    41:da:8f:2e:e4:9d:65:1b:36:ac:ef:f6:03:59:89:
                    41:61:db:53:1d:4f:bd:82:f0:d9:e7:d1:0c:fa:be:
                    6c:a0:27:79:4f:c4:9c:5a:f0:0f:ff:b6:f0:a1:aa:
                    e2:95:3a:8c:2e:0b:7f:0c:30:ed:01:d4:b1:a3:6d:
                    7d:3d:18:b3:54:0b:ba:d8:8f:10:c8:4e:a5:76:c2:
                    a4:12:28:4a:08:d7:fa:95:c7:34:55:ae:e4:79:bf:
                    9d:e0:38:bf:5e:d8:42:66:b3:74:19:be:da:66:2b:
                    5e:a8:52:7d:01:0f:7d:1a:29:bc:5d:18:4b:c7:44:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1E:BB:0B:0E:FD:49:97:66:67:F1:3E:78:F1:53:AE:2D:AF:20:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6989f1c-3140-3764-9296-926fc31504ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:00:31:75:f5:36:78:76:33:85:18:32:27:2c:4f:ce:3e:
         9d:d9:88:e2:f1:ab:96:6f:c8:f7:60:1c:a0:27:80:46:6f:80:
         fe:70:63:8f:dd:ce:fd:c7:83:c5:ce:25:f5:33:d1:e6:c5:6a:
         46:ac:f1:cd:e5:39:24:1a:ce:7c:f2:ef:f9:f8:65:ad:43:20:
         2e:2b:fc:e4:93:af:21:50:79:28:5b:db:3f:f1:2e:d0:6d:e9:
         c7:d3:b5:2b:d4:08:04:a8:ca:41:8e:5e:e4:25:f3:66:0c:9c:
         6f:56:fe:6d:58:f3:d3:aa:64:f1:ac:1b:19:76:48:67:ee:78:
         46:11:c7:44:0e:02:00:ce:dc:c6:e1:f0:ba:09:f5:84:3d:b5:
         3f:ac:31:66:33:06:f1:33:59:14:74:f2:3e:43:93:ab:b9:86:
         ed:86:87:b4:cc:05:74:3c:22:43:40:57:c4:85:e5:e4:9f:71:
         09:28:68:0b:73:49:14:3c:0f:23:d5:5d:08:39:16:e7:9e:e6:
         f4:63:a4:7f:8e:83:73:83:17:c3:df:88:35:e0:36:73:22:14:
         d6:4c:d3:5e:30:55:29:8c:e8:7a:46:0b:e5:0b:92:bb:9b:b6:
         e5:f5:80:34:49:b8:39:e2:cc:70:38:8c:91:a8:a4:0c:6c:ef:
         e4:19:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----