Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2c524f8-55ac-3cff-bed4-232ffcb3b079.roa
File:                     f2c524f8-55ac-3cff-bed4-232ffcb3b079.roa (raw, json)
Hash identifier:          p9mBB/8ea3vKUK5UaklKDeZltKX0Iq4LZvHQoLHNgqg=
Subject key identifier:   37:CF:42:14:BD:1B:55:84:FD:A2:D8:81:22:E0:81:AE:24:DB:86:E6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584076AEE5BC95AFFCB2F55E2580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2c524f8-55ac-3cff-bed4-232ffcb3b079.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Tue 08 Apr 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        172.252.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 22:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:76:ae:e5:bc:95:af:fc:b2:f5:5e:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Apr  8 04:00:00 2025 GMT
        Subject: CN=b6730fe0-9033-423f-94f5-3880d0a5443e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:15:c7:ea:da:95:b7:96:cf:1a:e0:cc:b0:
                    9c:a8:22:47:aa:b8:89:f8:43:f2:15:7f:c7:cb:1c:
                    c4:50:97:d6:1e:d1:d5:22:a8:23:9c:0d:87:d7:48:
                    75:98:72:8c:3b:39:d9:19:93:d2:76:18:ee:10:68:
                    87:83:e8:aa:54:8f:62:55:21:ee:71:3a:52:c0:3e:
                    56:3d:0f:a3:65:72:d5:0c:3e:c9:fa:cd:cb:c7:37:
                    b6:33:97:e2:53:6e:69:f6:6b:8e:56:a0:03:f3:b8:
                    e5:ac:ae:56:88:e9:37:b9:d8:f7:55:81:3b:f4:a3:
                    a2:62:ef:81:85:b0:31:03:58:11:eb:c0:8d:08:2f:
                    77:87:0a:08:fd:44:09:1b:16:55:3a:8f:a5:a2:02:
                    d1:d9:e7:b9:d3:05:4d:9a:c9:56:74:cb:56:1f:5f:
                    a7:2f:8a:a5:5c:a3:d9:b7:81:dd:ac:0b:2e:4f:fb:
                    38:49:bc:34:0e:e3:31:b6:d6:45:98:5d:4f:16:86:
                    54:de:57:d9:67:6d:04:ad:f2:cb:e9:c5:7d:0e:e6:
                    fb:f5:e3:89:7f:c2:d1:54:14:54:1a:8e:55:86:32:
                    8b:22:8f:81:8a:44:bc:2b:9f:18:c4:99:61:c2:54:
                    50:3e:70:40:8b:f9:59:07:5d:65:f3:8c:24:e5:c2:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:42:14:BD:1B:55:84:FD:A2:D8:81:22:E0:81:AE:24:DB:86:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2c524f8-55ac-3cff-bed4-232ffcb3b079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:87:dc:ee:34:55:54:f6:10:77:b1:6d:e6:7d:68:41:39:9e:
         c1:e6:c8:9b:be:69:5a:de:42:b8:28:e1:8f:dd:c5:48:6a:67:
         ad:67:96:63:8f:2d:c4:a2:ee:a1:86:ea:44:18:eb:ec:f5:27:
         66:5d:89:94:eb:fe:c2:31:c6:5f:53:f2:4c:96:8f:f3:be:eb:
         0e:d5:ba:d7:fb:f0:2b:c5:98:ca:cc:44:ab:4e:a9:f4:5b:b1:
         be:d6:42:9f:b1:c4:53:c6:66:86:35:6c:07:97:c4:58:3b:ed:
         d0:71:e3:ad:be:18:ce:16:d0:b5:ab:d2:e1:7a:ee:c7:3b:b6:
         3f:1d:37:19:f5:d0:33:0f:85:be:26:76:6e:15:a8:6c:d6:4c:
         0c:10:c1:13:5f:df:93:62:6e:30:c0:a3:6f:e4:9c:f0:01:5e:
         d4:ae:61:82:5d:29:77:4f:5d:7b:21:d9:6c:a4:80:ee:2b:7e:
         7f:40:4d:b2:5a:c1:a0:d2:dd:9d:50:b2:91:5a:84:00:b9:c7:
         66:f2:1f:f6:69:77:77:ac:27:42:7b:d6:c7:fb:04:cf:70:b2:
         aa:89:94:d2:53:8e:28:0a:c5:ee:16:05:ab:9c:d2:b4:76:28:
         b8:45:04:2c:2e:c2:d7:3b:c7:e2:a5:d9:7e:73:5a:18:0a:66:
         d1:88:a7:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB2ruW8la/8svVeJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDQwODA0MDAwMFowLzEtMCsGA1UEAxMk
YjY3MzBmZTAtOTAzMy00MjNmLTk0ZjUtMzg4MGQwYTU0NDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAsVx+ralbeWzxrgzLCcqCJHqriJ+EPyFX/H
yxzEUJfWHtHVIqgjnA2H10h1mHKMOznZGZPSdhjuEGiHg+iqVI9iVSHucTpSwD5W
PQ+jZXLVDD7J+s3Lxze2M5fiU25p9muOVqAD87jlrK5WiOk3udj3VYE79KOiYu+B
hbAxA1gR68CNCC93hwoI/UQJGxZVOo+logLR2ee50wVNmslWdMtWH1+nL4qlXKPZ
t4HdrAsuT/s4Sbw0DuMxttZFmF1PFoZU3lfZZ20ErfLL6cV9Dub79eOJf8LRVBRU
Go5VhjKLIo+BikS8K58YxJlhwlRQPnBAi/lZB11l84wk5cK89QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfPQhS9G1WE/aLYgSLgga4k24bmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjJjNTI0ZjgtNTVhYy0z
Y2ZmLWJlZDQtMjMyZmZjYjNiMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyH3O40VVT2EHexbeZ9aEE5nsHmyJu+aVreQrgo4Y/dxUhqZ61nlmOP
LcSi7qGG6kQY6+z1J2ZdiZTr/sIxxl9T8kyWj/O+6w7Vutf78CvFmMrMRKtOqfRb
sb7WQp+xxFPGZoY1bAeXxFg77dBx462+GM4W0LWr0uF67sc7tj8dNxn10DMPhb4m
dm4VqGzWTAwQwRNf35NibjDAo2/knPABXtSuYYJdKXdPXXsh2WykgO4rfn9ATbJa
waDS3Z1QspFahAC5x2byH/Zpd3esJ0J71sf7BM9wsqqJlNJTjigKxe4WBauc0rR2
KLhFBCwuwtc7x+Kl2X5zWhgKZtGIp+I=
-----END CERTIFICATE-----