Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f86963b2-1ab5-3ce2-b681-00a4c6cf010d.roa
File:                     f86963b2-1ab5-3ce2-b681-00a4c6cf010d.roa (raw, json)
Hash identifier:          5OqZ5eDlT5MlogJolTdOeht6+Ej7uWNonnzuTm3hKds=
Subject key identifier:   86:A9:4A:9D:75:73:86:B2:62:87:19:DB:AD:B9:28:D2:92:EC:C4:C4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285840C2CD8789F067D04B56042900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f86963b2-1ab5-3ce2-b681-00a4c6cf010d.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sun 25 May 2025 04:00:00 +0000
asID:                     7922
IP address blocks:        104.252.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c2:cd:87:89:f0:67:d0:4b:56:04:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : May 25 04:00:00 2025 GMT
        Subject: CN=b65fabb5-1992-4a23-a8ba-9ee19bd88a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:e5:8c:32:d8:ca:6e:89:e7:d2:68:46:a7:
                    32:04:ed:58:fd:56:ac:8b:91:0e:0b:ae:b4:6d:33:
                    e4:fe:09:a2:82:2f:f1:41:8d:83:2e:e3:2f:8b:0b:
                    0c:55:f4:87:74:dc:9a:02:c8:e8:e1:fc:5e:af:57:
                    3a:ab:b3:74:d5:24:58:f8:ab:63:89:69:dd:81:d9:
                    5d:1a:bd:95:a3:8e:92:c3:c9:62:7f:10:ea:3d:65:
                    64:99:16:00:37:d6:27:43:c8:de:40:ba:14:50:76:
                    63:6d:b5:6e:8a:b9:85:3a:39:67:dc:3a:5e:2c:b6:
                    f6:b8:bd:25:05:19:b2:07:ca:2f:f9:35:8e:3d:b3:
                    04:3c:f7:ed:ac:61:f7:ac:f3:7c:13:c4:9f:81:79:
                    99:e3:24:f5:3f:c7:1f:bc:03:5c:fe:02:77:94:2d:
                    83:62:a7:ce:bd:fd:66:3d:de:2e:59:37:a8:42:ee:
                    8d:18:7b:36:4e:aa:0b:04:e2:90:16:ae:50:eb:42:
                    a9:45:f3:9a:63:04:ac:44:65:05:79:ec:a3:ad:30:
                    f4:1b:df:a1:6d:27:cc:ff:cc:0b:b6:ac:7b:64:04:
                    fc:da:ed:3f:95:59:90:6e:e3:2e:53:77:76:65:9e:
                    c6:70:eb:7b:90:96:c3:17:e4:70:8e:9c:b8:0c:7e:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A9:4A:9D:75:73:86:B2:62:87:19:DB:AD:B9:28:D2:92:EC:C4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f86963b2-1ab5-3ce2-b681-00a4c6cf010d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ab:42:1b:ea:cb:1f:38:60:43:34:af:6f:af:4c:5e:26:d8:
         63:d3:25:00:3e:52:6b:48:01:2e:10:e9:84:8e:0b:52:fe:06:
         dc:55:c9:25:dc:f8:35:db:59:1d:a2:d6:c2:83:93:c7:bc:41:
         2e:96:70:bb:9c:d4:75:a5:b5:08:28:8f:d0:a1:c7:52:78:ff:
         ec:12:0a:0e:5d:90:68:96:86:17:35:0b:6c:6c:12:48:44:b9:
         3c:97:fd:e7:97:61:a6:bf:13:73:59:fd:c1:7f:9f:74:4b:18:
         0c:9a:ff:05:ef:ec:27:df:45:c5:9d:f7:84:69:bd:17:1d:d2:
         f1:56:9f:9c:65:a2:f6:a5:5c:0c:83:47:c3:b7:f6:af:f5:e2:
         7f:42:ae:53:0a:31:ee:6d:ab:6f:21:c3:3b:5c:33:99:72:be:
         69:b7:41:06:9e:e0:6d:b0:74:a2:97:fe:c5:76:6d:0e:d7:e7:
         e4:a4:51:28:98:55:13:ba:88:44:31:4a:72:46:7f:73:14:a5:
         8c:67:b2:e2:2e:3b:50:ba:34:02:82:0a:63:f6:a6:dd:52:72:
         13:09:7c:54:bd:dc:32:43:92:29:5a:89:51:9f:db:db:ea:4f:
         90:78:d3:12:f5:1e:52:6a:e9:3f:c0:7a:e1:fe:4f:97:75:7b:
         3b:3f:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----