Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c100d817-a547-36bb-806c-e99394387e6d.roa
File:                     c100d817-a547-36bb-806c-e99394387e6d.roa (raw, json)
Hash identifier:          ZeFDELBNiOVZtYDCLljAMfvbaxmGiKtyt9h5GrnlA3c=
Subject key identifier:   BF:F0:9C:AA:79:18:5C:7D:45:F7:7C:5B:73:C3:17:29:19:54:41:A5
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328583DD3B7ADA172543AD26D094C40
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c100d817-a547-36bb-806c-e99394387e6d.roa
Signing time:             Wed 10 Mar 2021 14:05:34 +0000
ROA not before:           Wed 10 Mar 2021 14:05:34 +0000
ROA not after:            Sat 10 Aug 2024 04:00:00 +0000
asID:                     8100
IP address blocks:        104.218.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 15 Oct 2022 11:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d3:b7:ad:a1:72:54:3a:d2:6d:09:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Mar 10 14:05:34 2021 GMT
            Not After : Aug 10 04:00:00 2024 GMT
        Subject: CN=14b6d395-339d-4173-9cb8-eb9dd64ae7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:63:76:c6:74:d4:cd:8c:b3:17:b5:c2:b9:
                    d5:44:7e:fc:a6:9c:89:da:7b:07:5e:e5:77:0d:52:
                    9e:0b:b6:ac:2e:08:20:33:aa:20:e9:f7:fe:5f:7d:
                    dd:cd:a8:f9:e9:82:ea:bd:4c:c5:e9:83:f9:db:51:
                    da:70:b1:0e:65:d5:3d:07:08:05:c3:21:e1:84:9b:
                    70:3b:93:8b:90:39:7c:d4:b5:bd:eb:18:e8:ea:b0:
                    9c:d5:79:ae:d6:21:eb:fa:70:a9:eb:66:b4:78:61:
                    af:a1:ca:a1:19:ac:49:fa:5f:5d:6a:af:ea:8a:27:
                    5a:62:c7:87:2b:82:e4:d4:72:ca:88:84:d2:79:58:
                    af:df:cb:6c:b6:b0:b3:2e:b2:50:5a:4a:9a:da:16:
                    47:ed:6d:44:03:e6:ca:e1:56:c5:93:cd:82:33:75:
                    a7:cc:a6:90:1d:aa:41:90:79:6e:c4:dc:c6:c8:ec:
                    a5:fd:40:fe:02:02:a7:89:b3:09:eb:d4:04:7e:90:
                    50:7e:02:a2:f5:d3:dd:70:f2:d7:e8:eb:e2:89:46:
                    2b:06:2e:ff:09:0f:e2:0b:b8:ba:ce:03:ff:e1:bd:
                    ad:8f:60:a3:6d:b0:8d:90:d8:3e:3d:44:9c:d2:79:
                    a2:dd:7a:5c:63:48:d2:d4:21:c3:cb:8b:e7:3c:3f:
                    d7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:9C:AA:79:18:5C:7D:45:F7:7C:5B:73:C3:17:29:19:54:41:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c100d817-a547-36bb-806c-e99394387e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:45:a6:43:98:e3:62:1e:7b:64:7f:83:13:d9:4a:7f:59:c9:
         a5:06:bd:f7:3b:c8:31:89:86:78:64:f0:24:e5:8f:9b:23:ed:
         33:6f:fa:1e:db:8f:16:f3:1d:ab:ce:4d:75:21:76:66:50:3b:
         8e:19:1a:87:26:4e:a1:27:88:da:12:8f:60:21:fd:0a:ca:6f:
         b1:6d:fb:72:9c:e6:7a:06:53:6a:16:00:ba:16:d2:e2:3f:07:
         1a:5b:34:40:66:27:0f:af:17:b2:00:97:2d:f9:5e:c0:e6:ee:
         93:2d:59:af:3a:2a:70:6f:72:68:75:f2:7f:a8:39:60:18:c1:
         f9:6d:a5:e5:4f:f7:e1:fa:c6:14:d7:cf:42:c5:ce:bb:9d:71:
         b6:29:f5:c4:f4:bb:26:3c:29:c9:c0:03:28:3f:08:65:3e:4d:
         06:34:fa:66:80:6e:37:0b:7d:d8:75:3f:d9:33:ff:39:03:1f:
         82:ca:2e:e2:b4:54:55:53:37:82:bc:b3:ef:dc:0c:44:f2:8b:
         85:7b:0b:9c:31:29:ae:f0:00:38:c6:54:d0:07:4e:65:28:91:
         93:76:0c:9d:94:20:b3:63:cb:9a:2c:30:89:b4:00:d2:38:77:
         f5:f2:8f:9c:d3:81:09:0b:fc:15:df:14:0c:64:b4:97:36:db:
         ed:93:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----