Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd3ad581-f21e-38ab-8685-67a387f76b75.roa
File:                     fd3ad581-f21e-38ab-8685-67a387f76b75.roa (raw, json)
Hash identifier:          FiOpUodDMAy0vvebwor/P2iFYyW5tI219oxUarY3eJU=
Subject key identifier:   83:68:ED:8A:5E:70:CE:0F:59:E0:92:CD:A0:3D:C4:CE:6D:4A:F6:8D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858406099270C4472CB7138B7FAC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd3ad581-f21e-38ab-8685-67a387f76b75.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 31 Mar 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        107.164.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 14:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:60:99:27:0c:44:72:cb:71:38:b7:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 31 04:00:00 2025 GMT
        Subject: CN=f4d16425-cc62-4b6e-a4ce-597336402c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4d:a6:0f:59:a7:29:4b:96:38:10:18:3f:60:
                    39:64:69:63:fc:8c:5c:83:d1:6c:37:c9:9d:b6:ac:
                    6d:bf:da:c1:7c:d7:78:01:8a:8d:06:97:57:78:ae:
                    ef:95:61:c9:47:e7:25:3b:58:5f:e9:9b:ce:00:d9:
                    5f:59:bf:b6:9a:38:95:79:b6:90:34:bb:3b:fb:aa:
                    10:9d:0c:8a:a2:a4:bc:ba:8d:2d:b0:fc:c0:1b:09:
                    08:16:0d:43:ec:d0:0a:ca:72:69:17:4e:ae:c5:78:
                    21:f6:6a:95:9f:34:5b:0d:d1:35:1e:a2:d8:b4:b1:
                    6b:4a:5d:f7:21:c1:03:ac:f1:cc:71:a6:12:cf:41:
                    f7:cb:bf:42:15:fb:c9:23:29:d2:07:90:75:1e:73:
                    cb:29:b1:77:d8:26:6b:c5:f2:d6:23:37:0d:c4:73:
                    57:99:56:ff:ff:88:f1:6c:7f:5e:35:c9:ed:2d:4e:
                    8a:14:79:37:05:d2:21:85:65:3a:8c:a0:cc:d6:8e:
                    f5:3d:78:3e:c0:fb:c6:1e:65:01:f2:69:87:47:b7:
                    6a:69:2e:cd:89:a6:fc:d5:92:7b:c4:7a:23:f7:ea:
                    25:19:bc:75:58:8a:37:fc:23:31:19:24:10:3a:7c:
                    03:e9:e5:e9:aa:e3:7b:7a:cd:ae:c6:2d:e1:e2:ac:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:ED:8A:5E:70:CE:0F:59:E0:92:CD:A0:3D:C4:CE:6D:4A:F6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd3ad581-f21e-38ab-8685-67a387f76b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:18:4b:4d:c7:a0:1c:a7:30:a8:3f:a2:00:df:6b:68:0d:af:
         17:92:c5:38:05:25:3f:47:7b:69:e0:90:ae:41:ef:e3:ee:d1:
         da:c2:2c:fc:14:67:bf:5e:97:9b:72:33:e5:bf:77:10:83:df:
         e9:66:46:61:8b:bc:ef:6e:3c:f4:c6:62:54:94:b8:40:0b:b9:
         5a:b0:76:77:50:8a:93:bd:37:30:c2:03:44:f7:dc:23:d6:a0:
         e8:2d:9f:51:c0:25:01:27:ab:6d:69:de:32:73:d6:7c:a8:57:
         77:a0:f4:81:d9:2e:fa:7c:84:3e:78:0f:5d:b5:98:ff:f4:a8:
         0b:d2:a0:3c:c9:1a:44:57:73:79:d1:1e:c3:01:87:57:aa:b9:
         13:da:31:b8:d8:3a:63:a9:1f:05:a8:a0:8f:a6:61:c3:82:06:
         79:16:67:00:b6:d4:45:d7:ec:a3:34:42:29:2d:26:03:ab:4d:
         80:ec:3d:32:7e:21:60:5e:9e:10:dc:93:da:b6:9f:74:82:ae:
         49:85:5d:0a:00:c2:f1:76:aa:f9:b9:a2:01:b8:ab:51:8a:16:
         b7:43:ab:66:21:b9:68:bc:8d:dd:82:7f:40:47:69:29:f4:76:
         a8:97:1d:29:de:bf:a2:db:d5:01:46:ed:25:88:70:bf:27:7f:
         da:2e:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----