Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fa12b478-429d-3603-923a-1d643a03d6e3.roa
File:                     fa12b478-429d-3603-923a-1d643a03d6e3.roa (raw, json)
Hash identifier:          heQ6VZ2heLOl9JhTwOoH3QyxWQguU8yj4dCekaQabok=
Subject key identifier:   06:D1:56:E0:D6:C2:2D:23:AD:25:A8:39:5A:89:67:94:E8:18:7C:93
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858416120B53C310D6761D563C820
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fa12b478-429d-3603-923a-1d643a03d6e3.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Tue 01 Jul 2025 04:00:00 +0000
asID:                     212238
IP address blocks:        107.164.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 02:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:61:20:b5:3c:31:0d:67:61:d5:63:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul  1 04:00:00 2025 GMT
        Subject: CN=eb6f58be-1acf-470f-a971-11b8db37d702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:ae:d2:e8:de:6d:67:36:35:32:36:22:70:
                    16:be:41:f5:19:e3:ef:b3:00:cd:c9:e3:fe:3d:7a:
                    95:2c:a3:9b:45:af:04:cc:21:37:c4:5d:ee:e2:37:
                    d6:aa:f7:0c:cc:e0:82:c4:57:bf:2d:ff:fb:c0:7c:
                    e2:0d:ab:09:61:29:93:43:0f:79:c5:92:8a:70:b0:
                    13:24:71:47:d5:c1:bd:0d:28:e1:60:1d:2d:2b:23:
                    57:71:44:b8:b1:2d:90:f9:ee:01:2f:80:dd:55:4d:
                    1d:10:e4:fb:54:fc:9a:2f:fc:cf:39:97:aa:da:8f:
                    ff:f5:7f:2d:78:31:61:07:ef:c2:eb:7e:89:ef:5e:
                    4b:a9:2a:52:c7:2a:12:8a:fa:af:a8:69:b0:d4:bc:
                    de:c4:03:0d:f9:dc:a4:7b:e2:c8:ca:be:55:73:e2:
                    02:45:de:f8:c6:93:47:99:03:39:26:5a:e5:3d:a6:
                    ba:c9:21:c0:de:76:ff:46:5c:24:3a:89:f8:d7:ef:
                    5c:b7:ee:c8:92:9d:68:4a:71:85:68:81:f1:89:af:
                    48:ff:cc:05:07:e5:66:a6:e5:8d:02:fc:ae:76:6e:
                    e1:e1:78:5b:2a:63:f4:77:8b:87:ee:a9:05:61:02:
                    02:a6:6e:ac:71:fb:35:24:84:df:1d:37:10:f1:1f:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D1:56:E0:D6:C2:2D:23:AD:25:A8:39:5A:89:67:94:E8:18:7C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fa12b478-429d-3603-923a-1d643a03d6e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:22:c1:4f:7a:86:e3:52:74:cd:14:b0:c4:fc:10:ec:e9:5a:
         21:4f:bc:61:c6:a3:f6:2f:f8:83:5a:39:e1:61:37:58:02:b2:
         37:79:d8:aa:31:17:f0:0c:13:9e:25:a3:d2:4c:b6:f7:75:f2:
         f5:ff:aa:02:ad:e3:4f:ed:3b:0a:3f:4d:33:22:c3:b0:4e:56:
         0e:ea:c8:72:ae:34:f1:7c:2a:65:b7:ba:ba:9b:16:71:57:3a:
         62:1b:8f:f5:ac:74:6f:73:6c:62:57:20:27:40:79:14:31:b5:
         ea:40:28:53:5e:2a:e6:fa:f3:7f:bd:b1:5c:0c:5d:b1:5f:5e:
         2c:42:22:36:29:7b:7f:31:63:56:1b:5e:e2:b0:f5:e7:82:62:
         4a:14:46:1d:65:0a:0f:a4:bd:ca:19:14:58:55:cf:62:19:ac:
         3b:f3:b3:fa:5a:79:dc:34:2c:af:55:b3:85:98:45:35:df:75:
         79:32:d7:77:d8:1b:35:c3:36:8d:9f:d6:58:50:f5:9f:4f:2b:
         89:3b:ba:d9:bc:b7:1d:03:c2:4b:d2:61:1a:cb:67:46:ad:91:
         3c:67:4d:4d:aa:d1:1b:ce:d7:18:76:e3:12:cd:fe:09:47:48:
         5d:8c:9b:2e:43:4f:da:0e:d7:55:e0:73:d3:48:f0:42:e8:35:
         51:9f:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----