Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8fc9090-c4f1-3b1e-b83d-569499c6424a.roa
File:                     b8fc9090-c4f1-3b1e-b83d-569499c6424a.roa (raw, json)
Hash identifier:          OWtZE46wpuC8vZ0ruok2FOwiQ6jeSUnUEZmRgyd5Jhw=
Subject key identifier:   42:88:F5:9C:65:AA:2B:A0:17:F2:D8:C2:20:EA:57:72:3A:93:F3:AE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840741522B7C255DE3AE6197FBC
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8fc9090-c4f1-3b1e-b83d-569499c6424a.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 07 Apr 2025 04:00:00 +0000
asID:                     7922
IP address blocks:        104.164.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 28 Jul 2023 17:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:74:15:22:b7:c2:55:de:3a:e6:19:7f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Apr  7 04:00:00 2025 GMT
        Subject: CN=c75338f6-2d2e-404b-901e-62b8d094998e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:65:d6:27:d4:ff:0c:28:dc:ea:c6:d5:70:
                    8e:64:34:a8:b7:71:bb:fd:6a:ce:d0:77:0d:21:9b:
                    e0:a2:0e:47:b7:51:94:54:36:8a:71:fa:b7:50:da:
                    ad:55:3f:5d:9f:5a:fd:b0:74:59:6a:cd:c2:e6:b1:
                    93:e2:5e:94:63:01:4e:fc:72:23:69:1e:b9:b5:8d:
                    d7:0d:72:85:38:a0:00:7d:23:78:f5:33:80:68:88:
                    73:d8:27:83:23:9a:c4:7a:67:92:76:9b:68:f7:71:
                    3c:5e:0b:87:63:46:0d:72:a9:22:02:54:30:f1:c0:
                    d5:d4:58:ec:47:fb:e5:8d:dd:cc:93:ef:d3:bf:00:
                    b5:00:5f:32:38:78:2e:4f:6e:66:44:2f:1b:03:33:
                    96:8f:2c:8c:27:fe:01:7f:59:0b:ce:21:73:c8:52:
                    67:8b:d8:c2:46:61:95:93:d9:b3:06:b9:0d:7d:dc:
                    6d:d2:95:bd:c4:72:15:74:09:5f:88:1e:c1:fb:5b:
                    02:75:68:5b:18:e6:79:a1:a9:f0:e2:e6:41:9f:ed:
                    21:40:21:e1:c6:e9:62:5e:41:49:56:3d:05:ed:ff:
                    7c:a8:ae:bd:7d:3c:85:f5:25:38:62:89:86:ce:32:
                    66:d0:eb:c7:77:3e:16:b9:11:31:de:44:65:a2:68:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:88:F5:9C:65:AA:2B:A0:17:F2:D8:C2:20:EA:57:72:3A:93:F3:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8fc9090-c4f1-3b1e-b83d-569499c6424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:71:5f:12:04:e9:cb:f2:56:65:5a:0f:e2:78:bf:f2:7a:33:
         b1:51:2c:94:00:f0:37:e1:0d:c4:66:23:fd:e0:87:a8:3c:b3:
         4a:05:87:d5:9b:27:7a:0b:23:3f:fd:4a:40:05:38:7c:1b:d9:
         fa:c4:6c:8a:c4:96:23:34:e5:2c:4e:74:f8:05:16:f9:a9:cb:
         40:ff:fa:92:77:c2:f7:c2:84:6e:c4:de:57:93:ff:0a:b1:b5:
         de:87:29:62:78:65:ae:1a:e1:70:14:13:29:ce:c6:bd:79:1b:
         bd:8d:db:91:95:da:76:ea:94:86:6a:cc:2f:bd:4a:0d:8f:db:
         6d:55:7b:30:63:23:05:5d:e8:06:04:89:e5:3e:20:99:c9:53:
         89:c1:04:a4:9e:4a:be:6f:29:c5:e6:89:8f:72:97:82:57:d7:
         ad:c8:cd:f0:c6:ce:e3:46:94:bd:0c:80:aa:2d:d0:b0:4f:9d:
         dd:45:24:ff:69:b4:8e:03:1f:b9:f5:ec:bd:60:ab:84:5c:a9:
         90:0e:7b:47:ee:b9:6b:4b:3e:a4:99:77:64:25:ab:51:33:12:
         ef:ec:8c:85:7c:47:9d:04:f0:45:f4:50:4d:6b:9b:d7:e7:40:
         77:72:2a:d0:fb:c4:0d:25:8e:17:53:97:97:42:03:19:cc:c4:
         29:85:71:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----