Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df601623-1511-325b-8181-51894ee0e961.roa
File:                     df601623-1511-325b-8181-51894ee0e961.roa (raw, json)
Hash identifier:          xJ6GY0GkFU8v7fGebMvPG+vytBqE++BN3xUY8ybW5mA=
Subject key identifier:   D3:01:AD:A8:F3:2C:6D:DE:A2:1A:29:31:D0:E6:7D:F1:25:4F:72:B2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841B4A867254E618DDE0C944B20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df601623-1511-325b-8181-51894ee0e961.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 31 Jul 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        45.39.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b4:a8:67:25:4e:61:8d:de:0c:94:4b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 31 04:00:00 2025 GMT
        Subject: CN=414a119f-621f-4c86-8685-c4c189e314d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:71:4d:ac:28:7e:82:f6:47:8a:58:83:ea:
                    f9:e7:a2:ed:72:e6:39:73:69:87:ba:93:0b:e4:2b:
                    b2:ca:20:73:57:dd:80:4d:dd:d2:ff:ee:68:97:41:
                    fc:c9:27:ca:07:71:d4:62:eb:fa:f6:61:a2:9d:6d:
                    7e:32:aa:59:92:a0:b5:2e:9a:88:81:b3:39:ad:88:
                    51:ee:76:f1:d8:b4:60:18:57:46:7b:44:cf:cf:b1:
                    63:46:10:37:b7:0d:6f:73:ce:62:8a:cf:e5:39:a0:
                    b0:a3:7f:ee:0c:d2:0a:86:b1:93:1d:6e:ee:53:88:
                    92:87:d5:75:81:21:6c:41:ad:94:4b:5c:7f:4c:5e:
                    ec:59:09:b0:76:9f:6b:09:0b:c8:32:39:2d:37:2c:
                    f8:a1:e0:6d:72:d5:c4:83:d1:82:63:a6:a7:59:ba:
                    96:e4:0d:45:c0:cb:98:21:92:5f:c6:82:4b:25:1c:
                    e7:19:ab:c0:66:8d:f1:de:a3:6e:c1:e3:b9:88:86:
                    a5:7c:55:96:63:aa:b5:fb:cb:97:4f:76:7c:0e:96:
                    25:e3:b2:1d:a6:c6:28:23:f4:ec:c0:4b:33:1b:a7:
                    38:1a:bd:aa:6d:1b:de:01:66:08:58:cf:6e:ea:7d:
                    f4:a2:69:06:52:a5:e0:a2:1f:9f:f6:44:4c:3b:0b:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:AD:A8:F3:2C:6D:DE:A2:1A:29:31:D0:E6:7D:F1:25:4F:72:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df601623-1511-325b-8181-51894ee0e961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:16:e4:e7:14:df:a7:43:d1:38:3c:99:22:86:0f:4d:ac:95:
         d3:f7:38:f2:ae:ab:5f:f3:7a:21:e3:19:37:f0:2e:46:46:bb:
         bc:c5:0f:7b:84:5c:e5:3b:a2:cd:ad:7f:b6:92:b7:e8:a8:b5:
         89:8a:4e:1e:b0:6e:2f:86:3b:bf:c5:bd:a7:98:f5:01:4d:5d:
         9d:c5:db:2f:53:cc:61:dc:09:64:1d:68:30:72:9c:13:6a:d4:
         a6:e7:88:fd:9f:1e:13:63:da:c2:e1:0d:65:b0:4b:fb:01:0f:
         c9:96:6f:37:4b:6a:ac:60:ee:15:85:e2:84:c5:4a:e2:c2:77:
         d6:72:13:4e:83:ec:39:d6:5f:c7:39:b9:35:72:65:92:ea:b4:
         69:9d:7f:c0:54:53:98:06:22:a9:8e:aa:15:3a:1d:73:92:e3:
         4b:b6:a1:2b:af:97:d4:61:29:d7:d9:94:25:27:54:e1:3b:85:
         bb:72:85:14:d3:e5:92:69:d9:14:8a:85:86:41:1e:f3:48:c4:
         6a:bc:75:f6:4b:ac:67:d3:92:d8:21:43:ae:e9:ab:d8:b7:54:
         0a:86:c4:17:ba:a9:72:0b:70:b0:35:d1:0f:08:6f:2a:15:13:
         52:07:d7:fb:09:e0:d0:df:f9:9b:33:f5:f0:44:67:25:a7:52:
         1e:c4:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----