Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd7ba2bc-97a0-31dd-b14b-142b199af2e1.roa
File:                     bd7ba2bc-97a0-31dd-b14b-142b199af2e1.roa (raw, json)
Hash identifier:          tMjZe8D189WnsKeyZ4+vgBUNtgBtYEkF0fQPApL1PGE=
Subject key identifier:   BB:60:C3:A4:36:F9:76:37:89:A0:08:7B:99:8A:62:EB:F1:F3:E0:3C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584124588E5003769024CD22D300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd7ba2bc-97a0-31dd-b14b-142b199af2e1.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 09 Jun 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        104.165.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:24:58:8e:50:03:76:90:24:cd:22:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  9 04:00:00 2025 GMT
        Subject: CN=ba911549-5b24-4326-baf3-f2ec8a35528f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:f5:5c:f8:b0:ad:53:57:a8:5a:15:11:76:
                    95:47:66:ea:af:f2:05:b6:f5:17:70:79:f3:9a:1d:
                    5d:c8:91:a0:8e:ca:81:24:16:0b:dc:3a:e0:a3:d4:
                    61:fa:db:e2:f6:2c:cf:59:33:f7:56:fa:00:4a:8b:
                    78:0d:ab:2a:2d:7c:a3:06:e6:d0:f3:03:ff:11:27:
                    de:48:15:3d:66:4a:1a:66:b7:15:2e:2c:66:57:1f:
                    db:03:c0:e2:fa:4a:81:ae:49:a6:86:95:e0:49:6a:
                    b9:41:a4:a0:63:60:fa:f7:af:67:e8:b5:6d:94:a2:
                    7e:36:e4:f9:41:3b:3b:e3:45:b6:22:2a:0b:43:c7:
                    6c:77:96:1f:56:39:05:73:c2:64:14:18:a3:16:a9:
                    b2:0c:b9:70:20:a1:5d:e4:65:09:bd:86:c5:3b:cf:
                    3a:42:3b:21:5d:52:46:3d:05:35:e9:6c:17:23:39:
                    c8:de:02:12:65:d8:14:a3:66:80:e6:e2:8e:d0:a5:
                    36:fc:76:e4:78:b8:e8:43:f3:55:19:c2:a8:ae:dd:
                    66:a5:3f:6b:07:a5:30:7f:41:ba:da:e5:28:0f:ea:
                    47:80:58:2a:a4:a8:c5:06:56:1b:da:38:ef:74:bf:
                    05:43:61:ae:30:a1:4d:8a:1b:9b:a0:ed:09:83:a9:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:C3:A4:36:F9:76:37:89:A0:08:7B:99:8A:62:EB:F1:F3:E0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bd7ba2bc-97a0-31dd-b14b-142b199af2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:68:61:83:83:28:a6:2d:91:f7:84:d3:0a:8d:0d:c7:6d:
         54:31:22:08:84:f9:40:b1:1f:a0:1c:ed:d5:5e:8e:88:58:10:
         b3:49:c6:90:70:ba:79:d2:78:42:12:0c:db:49:3b:56:7b:eb:
         38:0b:03:a1:c8:54:08:04:33:ba:df:d0:02:ac:e7:44:e0:12:
         27:4f:05:2a:6c:ce:40:62:70:4b:e5:60:9c:fb:21:cc:e8:66:
         73:42:a2:cf:f3:f6:1d:6e:04:fc:6f:f5:d9:b7:ac:ed:f9:4d:
         d1:dd:f0:44:b7:3b:9f:79:cc:41:66:1b:8b:2a:85:38:b0:bd:
         25:bc:1b:15:fa:13:9e:a3:78:50:1e:28:43:74:68:64:76:6d:
         1d:89:7c:3b:12:e7:9a:0f:31:31:64:12:fe:2f:15:44:72:c4:
         e3:d2:7d:b4:9e:d0:a7:01:61:ed:45:d9:21:5c:2a:69:6c:00:
         63:77:fa:ed:f8:5b:e3:a0:fc:0a:2a:6e:09:f8:69:ee:98:ab:
         38:de:69:cb:42:52:1e:ce:47:38:f8:9f:fe:74:41:e0:a5:dc:
         22:9e:e4:a0:2b:b5:ff:5c:4d:a7:a2:e8:3f:0c:a8:c6:b8:13:
         f3:1b:ca:08:bb:55:71:ce:9e:60:f7:31:41:71:01:52:1d:06:
         08:76:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----