Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8225c32-d1ae-3d5a-bc43-48de897f4143.roa
File:                     c8225c32-d1ae-3d5a-bc43-48de897f4143.roa (raw, json)
Hash identifier:          FxnVFioBHzmWkaUAyxQUrwn4MHiAgSohc0ffE7Cn0U8=
Subject key identifier:   6E:B8:06:7B:D3:F9:82:59:71:22:2C:39:B6:E6:D5:F2:C3:94:A0:7B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583EB57CC89FD2BDB55E91B7F380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8225c32-d1ae-3d5a-bc43-48de897f4143.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Tue 29 Oct 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        104.253.8.0/24 maxlen: 24
                          142.111.236.0/24 maxlen: 24
                          142.252.5.0/24 maxlen: 24
                          104.252.231.0/24 maxlen: 24
                          104.253.31.0/24 maxlen: 24
                          142.111.239.0/24 maxlen: 24
                          104.252.241.0/24 maxlen: 24
                          104.252.239.0/24 maxlen: 24
                          104.252.162.0/24 maxlen: 24
                          104.253.1.0/24 maxlen: 24
                          142.111.241.0/24 maxlen: 24
                          142.252.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b5:7c:c8:9f:d2:bd:b5:5e:91:b7:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Oct 29 04:00:00 2024 GMT
        Subject: CN=c0dbff9c-f9bc-4e4f-ad9d-8a421a16a20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:84:33:16:8a:37:8d:eb:4f:3b:fa:83:65:
                    d4:82:83:0c:a5:44:6d:cd:06:23:95:35:fe:da:ef:
                    4a:63:70:ad:16:ed:fc:ef:0d:75:d9:c5:7c:b5:c0:
                    ec:55:42:27:64:91:57:3a:3b:02:9b:a7:9d:dd:05:
                    8f:de:96:bd:f8:18:a0:2b:9b:18:19:ce:c5:08:00:
                    9c:8c:fe:dc:93:7e:7c:14:03:63:fc:14:83:1d:a3:
                    ce:3d:1f:7c:b2:85:39:65:c8:62:ce:9c:f4:e6:09:
                    4a:fc:06:57:30:4c:ed:95:8e:01:b9:f1:02:b7:20:
                    8b:3f:91:53:0f:a5:72:8a:2f:48:68:15:5b:93:cd:
                    6b:9c:da:e1:e7:c4:87:b9:76:22:dd:d9:91:08:5e:
                    c5:51:40:68:9d:3f:64:a1:29:f5:ad:9e:c3:a1:77:
                    44:36:e3:64:af:05:fc:2f:5f:5e:2b:2c:b9:36:d3:
                    d7:69:8b:50:5b:8e:90:f2:46:9e:f5:b0:0e:e8:2e:
                    93:88:df:18:3a:28:d1:27:04:c5:0e:48:4b:fd:a9:
                    54:ee:98:a1:ab:e8:58:e2:4e:12:b3:4c:ef:9c:f5:
                    c1:39:18:d1:f9:83:09:cd:e7:e4:0e:0d:96:6d:bb:
                    56:78:e2:08:32:c4:01:3a:e7:5c:6d:53:f4:f1:be:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B8:06:7B:D3:F9:82:59:71:22:2C:39:B6:E6:D5:F2:C3:94:A0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8225c32-d1ae-3d5a-bc43-48de897f4143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.162.0/24
                  104.252.231.0/24
                  104.252.239.0/24
                  104.252.241.0/24
                  104.253.1.0/24
                  104.253.8.0/24
                  104.253.31.0/24
                  142.111.236.0/24
                  142.111.239.0/24
                  142.111.241.0/24
                  142.252.5.0/24
                  142.252.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f9:8f:9e:19:18:67:a1:66:b7:6d:36:83:c4:e2:ff:12:5f:
         3e:a6:99:50:84:87:8f:97:49:5e:e4:de:d9:da:65:a7:b6:40:
         90:dc:08:94:6c:f4:6d:98:ec:a8:98:7f:9d:25:05:43:de:bf:
         01:a8:6e:fe:11:3c:0e:00:8f:1e:e7:59:96:35:69:d3:eb:b4:
         60:11:93:e0:c9:be:46:80:2a:52:51:c7:b5:79:94:d0:92:40:
         39:83:c6:7a:35:f7:13:69:a3:c9:1e:56:0f:97:50:cd:8c:b3:
         93:08:b3:af:24:35:ff:84:9d:cf:d7:83:97:bb:a5:c4:db:ff:
         20:6d:56:59:07:4e:21:9c:b8:6b:be:32:d7:58:7d:f1:bc:72:
         32:d8:5d:ed:a0:4c:3f:2a:ac:97:07:a6:d6:7f:e8:5b:bf:43:
         1a:7d:ff:1f:6c:8e:46:e2:4a:68:f5:32:cf:ac:66:4f:32:78:
         c8:ce:9d:9a:bf:7e:f4:3c:ff:17:5e:8d:d6:53:b9:d8:d3:b3:
         f6:56:c2:b4:8b:3f:74:ce:81:7d:db:fb:6e:38:21:37:91:5f:
         ee:e1:d0:ef:c8:43:53:59:64:af:da:7d:42:56:b8:0a:24:17:
         8b:6d:a9:be:dc:f9:e3:f7:18:ea:5e:bc:4a:69:3b:87:71:3b:
         6c:8b:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 21:35:17 2023 by rpki-client on console-ams.rpki-client.org