Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0e23047-edfa-37c0-8c5d-54b140e7538e.roa
File:                     d0e23047-edfa-37c0-8c5d-54b140e7538e.roa (raw, json)
Hash identifier:          dzW9KauyAHxOIeID53zC18Fp5gHW6Jg5gJ1lxUVz7/Q=
Subject key identifier:   39:C8:47:B0:86:2E:23:BB:2C:08:B3:67:9C:3C:1C:E9:51:26:D8:59
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584124587FAEA8038E9CC2940880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0e23047-edfa-37c0-8c5d-54b140e7538e.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 09 Jun 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        172.120.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 22:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:24:58:7f:ae:a8:03:8e:9c:c2:94:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  9 04:00:00 2025 GMT
        Subject: CN=d2aa08b8-a012-41c0-9cf3-e9c21e057502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:e6:80:01:10:8e:d6:84:75:a0:86:60:4f:
                    dc:16:72:2d:dd:b2:e6:14:4a:ae:f1:67:2e:21:07:
                    6d:55:d0:17:f4:e9:16:38:6d:d3:00:ba:e3:99:ce:
                    36:b6:4e:64:1f:04:8d:02:38:8b:34:52:79:de:9f:
                    9a:d8:5b:82:58:54:ad:19:a2:5e:6b:97:43:ba:9e:
                    f3:de:84:8b:63:54:9a:20:60:b6:19:f7:2d:91:92:
                    ae:a1:2f:b7:7e:b1:3c:47:7e:a7:51:56:e5:d8:7f:
                    32:f4:6b:c6:97:71:3d:79:79:32:31:1d:f5:3d:51:
                    44:47:98:45:8e:7a:40:59:cd:4c:7f:e0:31:13:61:
                    84:d4:9a:b1:42:92:6f:82:18:7b:87:5d:db:db:e3:
                    57:76:5c:ea:64:b7:63:6c:67:68:41:af:e9:40:77:
                    18:73:40:bd:d7:d2:9f:62:c4:3e:be:27:07:6b:b3:
                    e4:22:85:94:a5:43:5a:b0:3a:fc:de:37:da:fe:05:
                    89:7b:c2:3b:23:0d:df:94:12:00:31:bf:c9:ea:5b:
                    ec:68:c6:0e:2c:1e:02:be:7e:51:1c:6c:c4:3b:4c:
                    0a:42:93:45:4c:7c:29:b9:b1:55:d9:44:4c:47:e2:
                    f8:d2:a8:78:e8:2c:ff:7f:0e:e7:ce:ae:a9:47:48:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:47:B0:86:2E:23:BB:2C:08:B3:67:9C:3C:1C:E9:51:26:D8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0e23047-edfa-37c0-8c5d-54b140e7538e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:49:73:86:a8:85:68:0a:c2:3f:f0:ab:01:c0:6d:0f:5d:62:
         3c:88:78:8a:ba:70:b0:65:77:76:1d:06:95:09:2a:d5:1b:94:
         c7:d4:ad:f6:17:6e:e3:38:81:b9:f5:e4:b8:30:68:35:10:97:
         38:e8:00:69:4c:de:7b:c9:54:91:c7:13:51:57:36:fa:7d:ca:
         f8:18:30:42:c7:66:49:ce:ed:7e:72:b1:27:6c:77:ae:9f:45:
         ef:7a:82:3c:ce:13:d6:1d:d2:ce:5d:a0:1b:2f:f3:e5:32:32:
         38:f5:f8:bf:b5:0e:e5:99:5b:08:e1:a1:da:3f:36:a9:d2:ba:
         dd:ae:66:f3:b4:87:75:5b:52:72:07:f1:7a:0e:27:71:b8:3f:
         dc:40:f9:ca:e2:1c:b6:33:13:63:58:ad:f1:10:58:22:7a:ed:
         f7:01:cf:7a:66:af:0b:92:bb:8c:85:10:55:92:86:00:7c:18:
         44:92:6e:08:c5:4a:cf:ce:2d:b3:e6:d8:fa:d7:aa:e3:b9:2f:
         24:9e:55:22:ac:82:71:43:d2:fa:79:92:ed:da:e2:c1:11:56:
         69:00:cb:af:d0:fc:28:bd:d2:93:ff:00:b1:74:ab:e9:fd:da:
         42:26:94:75:ac:98:01:82:75:22:87:2c:71:78:10:21:77:8f:
         f9:23:4c:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEkWH+uqAOOnMKUCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDYwOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDJhYTA4YjgtYTAxMi00MWMwLTljZjMtZTljMjFlMDU3NTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVXmgAEQjtaEdaCGYE/cFnIt3bLmFEqu8Wcu
IQdtVdAX9OkWOG3TALrjmc42tk5kHwSNAjiLNFJ53p+a2FuCWFStGaJea5dDup7z
3oSLY1SaIGC2GfctkZKuoS+3frE8R36nUVbl2H8y9GvGl3E9eXkyMR31PVFER5hF
jnpAWc1Mf+AxE2GE1JqxQpJvghh7h13b2+NXdlzqZLdjbGdoQa/pQHcYc0C919Kf
YsQ+vicHa7PkIoWUpUNasDr83jfa/gWJe8I7Iw3flBIAMb/J6lvsaMYOLB4Cvn5R
HGzEO0wKQpNFTHwpubFV2URMR+L40qh46Cz/fw7nzq6pR0ibUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnIR7CGLiO7LAizZ5w8HOlRJthZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDBlMjMwNDctZWRmYS0z
N2MwLThjNWQtNTRiMTQwZTc1MzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlJc4aohWgKwj/wqwHAbQ9dYjyIeIq6cLBld3YdBpUJKtUblMfUrfYX
buM4gbn15LgwaDUQlzjoAGlM3nvJVJHHE1FXNvp9yvgYMELHZknO7X5ysSdsd66f
Re96gjzOE9Yd0s5doBsv8+UyMjj1+L+1DuWZWwjhodo/NqnSut2uZvO0h3VbUnIH
8XoOJ3G4P9xA+criHLYzE2NYrfEQWCJ67fcBz3pmrwuSu4yFEFWShgB8GESSbgjF
Ss/OLbPm2PrXquO5LySeVSKsgnFD0vp5ku3a4sERVmkAy6/Q/Ci90pP/ALF0q+n9
2kImlHWsmAGCdSKHLHF4ECF3j/kjTI0=
-----END CERTIFICATE-----