Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da490d26-1b3f-3653-b3ad-eed67209e6de.roa
File:                     da490d26-1b3f-3653-b3ad-eed67209e6de.roa (raw, json)
Hash identifier:          kvdkMzs+kfYDIHhgEnZfYt1Ml5DH3EutPPz8ZC0Oj+8=
Subject key identifier:   19:95:38:CE:14:14:0F:39:34:2A:0F:63:05:79:3B:84:59:61:9B:89
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858418854CECA8A05661180871880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da490d26-1b3f-3653-b3ad-eed67209e6de.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Tue 15 Jul 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        104.164.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:88:54:ce:ca:8a:05:66:11:80:87:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 15 04:00:00 2025 GMT
        Subject: CN=0d089ab0-a2e1-46de-97d0-1c6259ddb075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:d6:0b:4c:a8:0f:9c:0b:91:ba:5b:34:a8:
                    06:f6:b8:48:91:0d:90:59:c0:5e:5e:91:f3:94:f3:
                    7c:98:6a:30:29:c7:03:76:77:ff:fe:0a:45:56:af:
                    53:aa:97:8f:25:3c:b3:71:80:b7:b9:c3:81:12:f9:
                    39:1f:48:21:d7:88:25:b1:9f:80:5b:79:49:7e:e4:
                    72:f7:91:38:48:b7:dc:58:72:cf:6f:9a:b0:39:bf:
                    71:4a:22:73:14:97:d6:21:93:3f:0e:72:e4:c0:53:
                    e8:6a:ff:d5:b1:94:3d:60:8b:bb:93:ff:62:3a:67:
                    b0:48:d6:54:9d:32:58:0b:eb:c5:2c:41:3e:99:3e:
                    2c:05:53:a4:d3:de:0a:84:f8:7c:1c:11:bb:b3:fb:
                    03:c7:73:f3:7a:51:95:61:29:31:24:37:98:98:08:
                    99:8c:b6:6c:65:73:19:f4:0d:62:87:ec:31:2f:e3:
                    fe:ac:35:25:76:32:70:fe:e1:8b:11:40:e2:e7:c0:
                    30:72:55:99:8a:37:60:af:a8:41:64:28:75:79:8f:
                    fd:b6:3b:9e:9f:03:23:ce:cf:98:eb:b3:3d:14:89:
                    93:93:0c:1f:66:09:a4:64:96:eb:37:99:25:0f:de:
                    f5:ca:29:29:e4:ff:fa:af:15:67:e3:07:ea:87:83:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:95:38:CE:14:14:0F:39:34:2A:0F:63:05:79:3B:84:59:61:9B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da490d26-1b3f-3653-b3ad-eed67209e6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:5d:f1:a4:9d:f3:55:56:69:7e:71:1b:69:44:8e:72:fe:
         52:c1:90:d9:90:60:50:f8:a2:2e:88:3a:c5:6c:a8:fe:a7:84:
         07:27:04:af:f1:ee:d0:12:92:96:89:22:aa:b4:72:bd:f9:99:
         41:d2:c7:73:c7:48:ff:f3:2b:91:2b:1d:8f:28:9b:56:1d:09:
         4f:53:c4:5c:4f:e3:22:21:89:75:8f:72:2a:37:05:72:97:af:
         28:66:a5:98:01:ae:4a:b4:15:fd:52:38:d4:a6:60:1f:3a:e2:
         27:88:32:19:6f:78:e8:bc:64:83:22:37:1b:ab:8d:65:af:6f:
         a4:97:f2:4d:b0:f6:15:1e:0f:83:d2:fc:6b:c0:cb:13:be:11:
         8d:af:39:c8:b6:6d:78:a8:0e:bd:e7:58:cf:76:1f:81:65:57:
         fb:2b:d5:c5:76:b0:2b:bf:7f:13:96:68:05:d3:2a:a9:94:f0:
         98:5d:3e:67:54:ae:2c:05:68:e4:8d:10:c3:cd:7e:64:44:60:
         46:16:23:07:f6:f6:b5:f5:a2:1b:04:4d:17:58:4f:92:8e:48:
         0c:6c:bc:2c:db:bc:88:84:19:be:34:7f:4c:3c:d2:ec:7e:90:
         4a:93:ab:a1:be:bc:8f:8b:1f:b0:5c:a4:71:05:52:b2:de:0f:
         f5:df:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----