Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fdd9d4-7814-3caa-892f-8c6e674ea61f.roa
File:                     d2fdd9d4-7814-3caa-892f-8c6e674ea61f.roa (raw, json)
Hash identifier:          i7l+3OCtsKpzW4TFtkoq7HPsDXNodqOuZHDb2Zx7Vb0=
Subject key identifier:   A2:9C:D5:90:59:88:D7:78:0B:5B:FD:F6:9E:C7:40:E0:16:DC:43:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841D988AB45F4FCEC88BCFBDD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fdd9d4-7814-3caa-892f-8c6e674ea61f.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 13 Aug 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.253.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d9:88:ab:45:f4:fc:ec:88:bc:fb:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 13 04:00:00 2025 GMT
        Subject: CN=e922d56b-4e19-4f58-8d94-a8cac7d3b9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:92:70:84:f9:fd:a2:d4:02:3d:72:a2:ee:
                    44:81:08:c5:ee:f5:94:7c:2f:76:0f:4e:97:b4:85:
                    ff:db:7f:e7:41:1e:e9:7a:9e:b1:58:11:a1:26:af:
                    75:74:b4:68:e2:cd:8b:85:99:b1:5e:4b:09:a8:c5:
                    bb:b8:99:dc:f4:e9:c5:7c:cb:43:b9:27:92:83:f5:
                    d5:37:62:f0:38:5b:08:7c:d9:62:70:c8:40:55:ce:
                    d3:42:59:6a:80:0a:47:0f:42:7b:70:98:9e:94:43:
                    3e:21:3c:83:fe:42:18:bc:29:b8:5b:d0:20:45:f8:
                    58:f0:cb:ec:e8:1a:7f:2d:47:5e:18:b2:38:e8:38:
                    8a:8d:c4:36:a0:ec:aa:10:17:6d:c0:03:a0:bc:10:
                    74:f3:ec:2d:9f:71:b7:13:f5:24:b6:92:af:51:a4:
                    5f:28:3c:f5:c9:45:e5:9c:70:2c:0e:a8:5a:ef:74:
                    56:79:5a:29:29:83:9b:4a:62:ce:09:dc:5b:a9:a8:
                    43:2a:35:c8:30:e4:b8:8e:a4:3b:be:f4:9a:60:72:
                    56:35:63:a6:54:cc:35:72:e6:cb:54:f1:91:e8:5c:
                    64:45:36:c5:f2:dc:a5:d1:79:00:5a:9d:b4:5c:b1:
                    19:bb:97:99:87:60:af:3e:65:6b:25:70:49:13:13:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9C:D5:90:59:88:D7:78:0B:5B:FD:F6:9E:C7:40:E0:16:DC:43:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fdd9d4-7814-3caa-892f-8c6e674ea61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:66:6f:30:23:4e:32:48:cb:4d:3d:0c:ea:68:33:e0:82:0b:
         64:13:cf:3e:a2:07:34:29:1c:83:64:60:ae:e3:7a:a5:b7:46:
         4b:27:3c:be:05:3f:49:db:38:02:58:27:37:9d:5b:62:03:82:
         cd:bf:70:18:f8:72:26:de:1a:20:63:a8:e0:cb:e7:4d:f6:d1:
         77:a1:64:a2:ff:f8:bb:32:9f:d8:84:11:19:c3:d4:0a:83:a0:
         cb:5a:57:a1:3a:ea:62:22:a1:cb:81:68:a4:44:1f:17:06:dc:
         bc:f9:c0:7d:6d:bc:b7:43:87:42:fc:77:21:31:c3:af:2b:79:
         06:d6:2d:c7:2e:89:2e:e7:c5:0e:d4:71:b5:f4:d6:41:17:62:
         54:32:4b:9a:cc:81:22:91:ff:ea:b3:b0:8f:49:3b:af:5d:b3:
         00:e5:2b:ba:18:0a:fd:60:bc:00:c2:eb:f4:61:5d:36:7c:50:
         2e:e1:a6:e0:fc:0b:58:6d:32:09:f9:df:ee:ab:68:65:da:b8:
         c8:60:10:85:2a:5e:df:c9:5f:4e:43:2f:ee:b0:08:1a:50:a3:
         37:27:3d:06:fb:0b:62:72:f4:6a:bf:9a:67:f6:92:24:01:9d:
         3b:0f:65:86:db:97:18:8c:72:f5:bd:ef:49:77:a9:57:40:f2:
         e4:09:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----