Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4da3420-ab8f-3007-b34c-f528955a4126.roa
File:                     d4da3420-ab8f-3007-b34c-f528955a4126.roa (raw, json)
Hash identifier:          HRrVsImpxnd2/uIeZYpqepGT+q+JWdGV7YkxAdS3qIQ=
Subject key identifier:   3C:7F:AF:4E:4A:C4:64:75:A0:C6:56:75:85:31:73:68:9A:D4:D1:CE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841D987D2FE7425CC04A5809A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4da3420-ab8f-3007-b34c-f528955a4126.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 13 Aug 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.252.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d9:87:d2:fe:74:25:cc:04:a5:80:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 13 04:00:00 2025 GMT
        Subject: CN=e83b3bc3-dfc8-4b28-9ba6-4fcaa77b91aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:04:ba:93:f1:71:c0:a4:5b:af:8d:6c:be:2b:
                    76:8e:d9:bd:35:c7:90:3a:05:f8:17:18:48:79:82:
                    15:e1:a5:e2:02:21:dc:75:cf:48:90:48:3f:c5:ab:
                    f4:f9:6f:a6:1b:8c:00:36:24:17:ca:cf:95:5e:54:
                    74:d5:8d:07:fd:e6:60:ad:cf:dd:ea:6b:20:34:3c:
                    49:47:25:23:81:f6:2f:53:49:7e:79:cb:0a:23:be:
                    ee:2a:10:a6:92:79:d2:56:c2:a4:2d:7f:ca:1d:e2:
                    3a:5e:08:9c:d4:53:fe:f6:98:ce:9f:e2:33:46:93:
                    a9:85:63:11:25:1a:0f:32:28:40:0b:d4:7f:45:30:
                    8c:5f:a0:4f:f3:7a:79:71:35:fc:23:fa:78:71:ef:
                    54:b2:a9:ab:18:12:fa:f5:ed:42:5f:a2:53:01:2a:
                    26:09:6e:53:2b:10:80:49:b3:32:15:05:f4:21:b4:
                    4d:cc:4d:61:a9:97:f8:9f:a5:07:b6:78:6c:e8:ea:
                    94:30:e4:04:b7:15:85:78:f3:2e:a1:1e:51:96:6b:
                    22:4a:62:c7:0d:b9:3e:27:9d:71:98:42:24:bb:29:
                    e3:50:70:fd:72:e6:74:d4:ea:16:f2:ee:e4:0c:6d:
                    65:9b:4a:c8:4b:a5:87:4b:90:a1:93:51:3a:ff:9b:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7F:AF:4E:4A:C4:64:75:A0:C6:56:75:85:31:73:68:9A:D4:D1:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d4da3420-ab8f-3007-b34c-f528955a4126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:44:67:e5:97:d3:19:73:29:7d:51:2f:db:5e:fe:19:e6:
         3a:9a:7d:e0:38:30:3a:c1:7b:83:37:72:6a:00:90:1e:e1:c2:
         de:1b:ab:80:53:61:c8:63:70:90:b5:81:44:0d:27:71:aa:89:
         59:71:44:b6:0e:86:44:14:e8:bd:b0:89:2e:c9:25:b7:ef:4c:
         89:dc:7b:3b:6a:8b:4a:ec:85:b7:ca:91:8d:a7:36:76:ee:0d:
         e8:f7:45:8a:51:a1:35:9c:d5:e5:94:fc:d4:b5:fe:a0:9a:e6:
         f2:40:d6:25:ba:8a:83:18:87:f9:fd:d4:b6:c5:f5:57:b1:d3:
         74:18:de:40:fb:1b:fa:62:bd:8b:93:10:f1:5d:ed:86:f7:dd:
         d4:09:95:4a:70:21:76:cd:f9:b1:72:47:63:f6:c8:9a:de:aa:
         e4:98:a5:4d:ab:46:7c:61:a9:71:39:6e:4c:7a:f3:ed:4c:43:
         28:72:25:a3:c0:0d:35:f6:6a:9d:4d:ad:0e:71:f8:85:88:43:
         e5:62:8f:4e:f7:16:0a:67:4e:8b:8f:cd:92:21:aa:aa:db:1c:
         fe:82:2c:42:24:95:28:fe:c5:5a:d0:ba:bd:98:00:20:43:08:
         2d:2d:b7:e5:7b:be:bc:c3:72:7d:d3:fb:1f:9a:c6:cb:07:13:
         de:dc:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----