Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c013fc10-1dae-3d05-86a3-696ca562f1b4.roa
File:                     c013fc10-1dae-3d05-86a3-696ca562f1b4.roa (raw, json)
Hash identifier:          W4oxYrEgZfOeT7iUG+kH6qZtZUoJHbfTXRqecErb2PY=
Subject key identifier:   3D:DC:A7:56:30:41:B0:8A:F4:F8:60:D6:B9:8C:4B:0F:4C:FF:D2:7D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840399D7CD18406F1989B5BC110
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c013fc10-1dae-3d05-86a3-696ca562f1b4.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 17 Mar 2025 04:00:00 +0000
asID:                     136787
IP address blocks:        45.39.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 May 2024 17:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:39:9d:7c:d1:84:06:f1:98:9b:5b:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 17 04:00:00 2025 GMT
        Subject: CN=abf3a8ef-5501-416f-b541-194d53762252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:38:77:c5:17:4f:21:f0:7d:12:79:80:38:
                    00:03:c0:55:a9:21:a8:b3:5d:ea:30:99:a9:73:e9:
                    6e:78:cf:26:93:33:e1:9c:20:b4:a1:b2:c3:c5:39:
                    cc:8e:f9:fa:e2:78:3b:fe:a5:6f:c1:6c:a0:56:fd:
                    f1:d4:a4:33:e0:81:9f:37:c8:2f:22:39:5d:fc:4d:
                    dd:90:3a:18:e5:9c:eb:7d:47:99:f5:94:91:e9:ea:
                    92:c7:c9:14:63:8c:d3:ef:55:e8:bb:34:82:83:6c:
                    78:b9:02:48:e0:8c:7d:b6:e2:d9:2e:3e:5f:56:49:
                    7c:5a:97:e1:52:61:a1:8a:53:83:69:26:d2:cc:7d:
                    ff:3b:8f:9b:f4:85:a8:3c:36:4f:1c:49:c0:f9:52:
                    90:cf:f6:7e:34:bc:46:db:33:57:2a:60:db:a5:91:
                    ae:01:73:a7:16:ff:fe:fe:8d:9d:a9:3c:3b:65:a1:
                    c1:8d:bd:fb:af:04:ea:0a:7b:44:52:45:e1:b7:3e:
                    64:3f:e9:bc:c5:ef:ca:0f:68:b7:52:66:35:8b:76:
                    71:3f:5d:bd:7c:01:ae:79:e5:a7:36:37:90:0a:ba:
                    4a:56:9b:4e:8a:d1:f8:4f:fc:c0:e9:91:1c:f5:7d:
                    db:ac:31:7f:d2:1d:41:e5:c5:93:f8:b5:62:da:cc:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DC:A7:56:30:41:B0:8A:F4:F8:60:D6:B9:8C:4B:0F:4C:FF:D2:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c013fc10-1dae-3d05-86a3-696ca562f1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:d9:f0:ba:87:bf:fa:33:8c:a7:b5:8c:7e:2c:7f:e9:f2:
         d0:ba:56:7c:f7:9b:61:96:20:32:ef:f6:88:5c:fe:d8:d1:c5:
         22:d4:34:06:76:9b:63:92:ad:07:d3:f6:17:01:7c:2f:ae:30:
         e9:3a:f7:fc:3d:e8:90:b8:fd:81:33:70:52:0a:35:05:c5:6f:
         8b:ac:62:99:51:ab:93:83:d0:2a:cf:6a:0c:4a:f3:53:7d:59:
         db:2e:45:b7:59:45:e0:cc:6e:60:57:1c:09:7f:ed:27:15:f6:
         01:05:cf:b1:dc:ea:85:32:6a:2c:e7:0c:92:06:fc:79:40:64:
         5c:4c:2d:bc:d8:b9:c8:d5:b5:fc:5d:e3:e2:d1:db:f3:d5:58:
         a6:75:18:66:c0:d5:61:21:b0:da:c4:45:fa:c4:5f:3a:db:83:
         38:fa:f3:74:5a:59:51:ee:a7:9e:e2:f3:53:db:35:b9:ba:82:
         45:b7:b6:35:89:db:0f:28:71:74:cd:64:4d:0c:8c:e3:da:de:
         6a:05:e7:cf:0c:4b:75:6d:c9:37:b7:da:9d:7c:5b:aa:36:82:
         9b:22:9b:93:58:89:94:6c:43:66:27:5a:5e:81:e4:8c:cb:e0:
         01:a3:db:03:7b:93:17:82:30:1f:97:ad:92:12:9e:8f:10:9a:
         fb:60:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----