Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4e1bd50-21cc-3e13-8158-29c5e511f64a.roa
File:                     e4e1bd50-21cc-3e13-8158-29c5e511f64a.roa (raw, json)
Hash identifier:          rWmeh7GVxHQlfwKyVMrif0R1eIDEJdcmGe5d4KpSgEU=
Subject key identifier:   B8:9F:45:6E:06:07:31:17:28:9B:2C:AE:3E:89:0C:EB:46:87:93:57
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841B4A860CC22C1B8DFFB569400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4e1bd50-21cc-3e13-8158-29c5e511f64a.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 31 Jul 2025 04:00:00 +0000
asID:                     209854
IP address blocks:        45.39.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Sep 2024 18:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b4:a8:60:cc:22:c1:b8:df:fb:56:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 31 04:00:00 2025 GMT
        Subject: CN=e90d494a-562d-4b59-9984-df6a574f5ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:74:92:de:1e:56:6d:f1:7e:d4:16:44:c7:
                    83:e3:1e:63:16:2f:56:02:51:c7:f5:68:a2:78:d8:
                    78:ab:d4:d4:11:c3:65:47:46:6c:6a:50:9e:7c:57:
                    06:55:71:5f:ae:04:13:79:b9:6d:62:cc:6a:dc:c7:
                    e4:11:2b:ac:f5:00:c7:4b:22:4c:a0:10:c9:18:cd:
                    65:3c:11:b1:a6:99:24:d0:a8:50:56:89:bf:12:68:
                    91:08:3d:5b:da:e1:99:8d:49:2a:71:2d:d6:f5:54:
                    19:b2:f7:27:f7:25:90:11:0f:19:29:0c:14:74:c9:
                    a0:22:53:69:cd:37:18:44:14:a2:6f:e2:18:82:0f:
                    38:4c:00:76:ee:01:24:06:dc:0d:27:16:17:ff:ca:
                    53:af:cb:53:94:18:21:98:15:18:33:4d:28:e5:6a:
                    72:90:98:90:2e:bc:66:3b:60:28:b4:77:fc:1b:73:
                    ea:70:18:78:3e:6b:88:83:85:69:5e:93:39:ed:f5:
                    11:f6:f6:5e:ba:38:5d:2b:c7:2f:d1:27:fa:24:93:
                    0d:7a:dc:ff:c0:03:c1:51:6d:90:13:4d:13:1b:c6:
                    69:84:ea:74:51:e8:72:4b:0f:72:9d:27:10:39:d3:
                    a1:c5:27:c3:7f:fa:97:6b:2e:47:23:4f:46:35:f3:
                    f8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9F:45:6E:06:07:31:17:28:9B:2C:AE:3E:89:0C:EB:46:87:93:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4e1bd50-21cc-3e13-8158-29c5e511f64a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:23:d6:84:7b:7a:1c:b2:17:72:66:ea:ce:8e:ae:51:04:71:
         5a:d6:a0:fa:fa:13:b2:8d:27:0c:9f:a6:85:f4:a2:6f:c8:91:
         b9:87:77:d8:92:08:b8:e9:f1:b3:88:fe:47:89:c3:7d:eb:52:
         45:c1:71:1c:47:b8:5f:e7:72:45:06:8b:a0:85:bb:3b:2c:1b:
         98:4c:88:96:69:0f:da:f5:bb:8e:9f:e5:22:ea:8a:6f:64:0c:
         23:fa:f9:d7:7a:be:64:fa:71:d2:66:d6:bf:59:05:04:8d:a8:
         7e:76:93:7e:82:6f:c1:ed:c2:7e:67:84:81:24:9c:f3:36:d6:
         c5:b8:bc:b6:48:5c:97:78:16:d8:04:2d:b9:12:69:de:ab:8d:
         67:d0:9c:2a:21:26:bb:49:80:36:a3:21:d9:99:a5:6f:c0:8b:
         1e:9d:49:8f:7b:41:6c:da:4e:92:a2:0c:02:99:06:4e:a9:5f:
         84:32:f6:e5:fc:e5:70:3a:25:3c:b0:27:ba:87:13:53:bb:ba:
         31:bf:e7:34:2b:c7:27:4d:24:5f:52:fa:35:5e:a9:81:2e:bb:
         86:f3:01:a0:89:5d:df:89:d0:dd:00:63:09:98:da:0f:6a:30:
         f8:3b:0c:49:1e:83:64:ad:37:1d:94:1a:f2:51:2a:5c:93:da:
         4b:11:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----