Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e3bbbd07-61a6-39a9-a32d-1b63f7ce9ac9.roa
File:                     e3bbbd07-61a6-39a9-a32d-1b63f7ce9ac9.roa (raw, json)
Hash identifier:          /xkmIMLwRMaNlPzKxaNfZbF3AgwQY2tX4N3sctk+ssg=
Subject key identifier:   57:BC:5D:C4:F1:27:3A:B4:B3:23:B8:75:DD:DD:BB:29:22:84:17:EF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841D988BE1BEC64D8398650CE9F
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e3bbbd07-61a6-39a9-a32d-1b63f7ce9ac9.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 13 Aug 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        104.253.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d9:88:be:1b:ec:64:d8:39:86:50:ce:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 13 04:00:00 2025 GMT
        Subject: CN=bc06adbc-6159-4ed0-85a1-28526719c3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:c3:2d:64:3f:67:96:aa:6d:9e:a8:14:4d:
                    c5:1f:94:d4:85:a9:85:7a:cd:dd:18:b3:5b:42:06:
                    e9:56:3e:48:e4:93:79:7e:80:c5:bb:b9:15:f7:b5:
                    3f:2b:7e:07:91:70:2a:08:da:98:24:17:de:de:f0:
                    2c:d6:d8:bc:c1:49:a3:50:bb:77:ba:94:30:27:03:
                    9b:4d:54:1d:68:6a:55:a5:73:ba:e1:23:c5:60:b6:
                    2e:4d:72:0b:fe:53:1f:25:5e:13:4d:7b:bc:35:bf:
                    95:bf:a6:0e:aa:88:b6:87:06:10:eb:86:cb:2b:f0:
                    2a:24:82:fa:e0:d1:3e:45:2d:3d:9a:0c:20:9f:34:
                    b8:d2:99:d9:5a:e0:59:4d:9a:95:d7:74:82:bf:f0:
                    4c:4a:3b:63:a8:f5:23:0c:c2:44:e7:1a:c2:08:bf:
                    33:17:cd:4c:30:4f:a0:87:83:cc:72:7b:d0:a9:60:
                    67:15:94:e7:8b:92:de:9e:0c:94:f5:d1:1a:a4:65:
                    56:0f:d9:b3:15:e6:49:71:ec:2b:8b:a1:c6:05:2c:
                    1c:d1:a9:3d:64:78:95:a4:c7:04:a8:73:6a:48:2e:
                    30:a5:ab:42:a1:7f:dd:5f:e2:d1:12:02:a6:9c:4e:
                    74:d9:b1:13:00:f4:b6:06:ad:64:4d:17:92:cf:35:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BC:5D:C4:F1:27:3A:B4:B3:23:B8:75:DD:DD:BB:29:22:84:17:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e3bbbd07-61a6-39a9-a32d-1b63f7ce9ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3e:1c:0c:03:97:18:76:aa:e4:21:b8:ea:b0:5d:f8:e2:02:
         8c:52:9b:b5:91:50:39:1c:93:97:95:6c:e3:fd:cd:28:fd:c9:
         b0:42:8a:65:10:01:43:e9:cd:33:94:e1:44:be:d6:57:be:5e:
         01:42:09:23:b8:c2:5c:cf:74:f2:2b:b0:35:8f:e3:f3:3c:46:
         73:7b:a6:fd:0f:09:88:10:66:8f:63:02:78:c3:06:5b:06:8e:
         3d:4f:58:a2:b4:85:2a:b6:9f:98:d9:c6:07:63:f0:68:ed:bc:
         f4:cd:e2:a2:6e:26:2c:55:5a:cb:c2:57:e9:0d:12:44:ce:56:
         4b:04:99:a1:95:90:37:95:fd:95:8b:31:90:8f:78:2c:bd:54:
         59:87:3a:53:b0:c4:17:2b:8d:f5:b3:1b:29:69:36:18:3b:2f:
         cb:44:82:ed:91:43:4b:55:a4:bc:bf:c0:01:d1:a5:50:c9:5c:
         9b:cf:ac:c9:c2:ab:db:30:3b:cb:e1:7b:fd:57:b2:2a:fc:81:
         3f:67:ff:18:3c:8b:ed:5b:98:ae:d5:81:73:c5:a7:a9:cc:21:
         61:30:f6:0c:cf:7b:a2:3e:51:b2:a0:40:ac:98:01:56:bd:d3:
         58:3d:3b:f7:5f:34:06:4d:93:7f:20:b6:f1:a5:99:d5:a4:75:
         c2:1f:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----