Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e215bf51-5093-30ec-89b9-fc00f362fde3.roa
File:                     e215bf51-5093-30ec-89b9-fc00f362fde3.roa (raw, json)
Hash identifier:          1xc9a5rVlOktQrkc259P6vO5Uf7fkdHEVnsxKOB7awk=
Subject key identifier:   D5:98:BA:1B:5A:C0:32:24:0C:CE:4D:56:13:22:BE:4C:96:6C:38:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584009EDF46D52DEE916436408D0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e215bf51-5093-30ec-89b9-fc00f362fde3.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Fri 28 Feb 2025 05:00:00 +0000
asID:                     1239
IP address blocks:        104.253.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Mar 2023 17:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:09:ed:f4:6d:52:de:e9:16:43:64:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Feb 28 05:00:00 2025 GMT
        Subject: CN=57fffc3a-1308-4468-8038-1eefb68862d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:75:1c:e5:92:8f:e1:df:74:0a:a1:88:75:
                    7f:95:92:0a:03:3b:1e:7a:d8:72:a5:c7:54:9f:b1:
                    8c:a2:f0:83:1f:1b:72:fd:a2:be:23:e8:60:42:b2:
                    56:f6:46:3f:b4:fe:e4:de:6b:cd:ae:d7:e1:d0:30:
                    42:df:07:2e:97:5c:31:42:0f:49:49:0a:cf:3f:67:
                    a6:71:e8:44:79:0e:48:16:7b:10:65:fc:7d:3f:68:
                    8c:b0:3e:2a:d5:09:e2:48:e8:ea:70:e7:e6:eb:a4:
                    e1:8e:2a:ab:c2:cc:a7:3d:51:fe:47:b6:3b:81:51:
                    2f:11:6f:26:dd:28:ab:04:48:65:b5:a3:c2:5f:30:
                    fc:86:ff:20:ef:85:7f:8b:e5:1c:c0:28:a9:3e:ac:
                    b5:9f:0d:bc:63:7a:3f:74:1a:ae:b5:88:2e:c2:84:
                    a8:69:9f:20:d8:51:fb:7b:08:11:36:48:06:6d:bf:
                    37:0a:33:9d:5a:f3:2e:80:70:3c:b1:c0:a1:04:e9:
                    af:b5:d5:81:f6:53:c1:ed:15:3d:93:30:d2:90:ce:
                    58:66:b3:70:de:50:8d:15:0e:9e:1e:ab:c7:fd:af:
                    f0:79:77:30:a8:4f:85:ea:2b:c8:ec:69:94:a1:7f:
                    6b:a6:c7:60:88:eb:83:4b:08:0d:48:d1:22:39:ca:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:BA:1B:5A:C0:32:24:0C:CE:4D:56:13:22:BE:4C:96:6C:38:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e215bf51-5093-30ec-89b9-fc00f362fde3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:88:6d:ac:f0:19:61:3e:78:cd:fd:11:22:12:9d:df:c8:
         dc:c7:c2:b0:50:dd:53:48:53:1e:bb:9a:9f:21:fe:9c:73:4b:
         c1:2a:84:72:1b:15:2d:3c:e0:fe:cf:54:a2:3f:3b:4d:2b:f2:
         db:a7:ff:41:3a:2e:92:80:60:5b:05:38:3e:22:52:1c:35:0c:
         b8:ad:81:23:ce:a4:3c:76:70:e3:80:f1:10:f3:da:48:05:53:
         e5:4b:a9:ee:39:bc:66:ce:b8:0c:6d:c1:12:b7:09:e5:cd:1f:
         00:14:30:bd:b1:23:59:41:98:01:6b:d0:07:e4:9e:32:d2:af:
         74:29:d6:b6:10:86:ac:ed:40:53:7c:ce:76:b1:ba:fe:91:0d:
         87:22:38:09:71:c1:d4:00:11:e6:20:2c:12:e1:e6:26:44:66:
         fe:c8:15:37:61:fd:14:aa:9c:f6:fa:1a:13:0f:6a:f6:95:19:
         fa:ca:70:d0:be:dd:ec:2c:48:1f:5e:ae:d4:ea:20:ee:ef:b9:
         e5:50:2f:22:f6:9e:4b:00:f4:57:96:d9:0e:78:9f:a3:30:76:
         5d:04:dc:15:93:bd:3f:b5:57:22:3a:05:44:a1:da:0e:53:ad:
         59:eb:88:16:19:d0:01:b4:54:e8:d0:60:fa:57:8e:47:1e:89:
         42:7e:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----