Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/36f4237b-d34d-313a-ad66-8e2673d0bca2.roa
File:                     36f4237b-d34d-313a-ad66-8e2673d0bca2.roa (raw, json)
Hash identifier:          ptVllpYeYtF3fGjuT2eBsIajLn297E3p31lzZ40VlwA=
Subject key identifier:   C6:01:16:93:E6:2C:4B:5C:14:96:7E:95:54:DB:9F:BA:57:EE:19:A6
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F43285846943F89A3D1518793963CB260
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/36f4237b-d34d-313a-ad66-8e2673d0bca2.roa
Signing time:             Thu 18 Jul 2024 13:00:33 +0000
ROA not before:           Thu 18 Jul 2024 13:00:33 +0000
ROA not after:            Wed 16 Oct 2024 13:00:33 +0000
asID:                     13213
IP address blocks:        206.217.200.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 16:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:3f:89:a3:d1:51:87:93:96:3c:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jul 18 13:00:33 2024 GMT
            Not After : Oct 16 13:00:33 2024 GMT
        Subject: CN=6666c2b9-dd5e-4273-99b4-c1d7532cf8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:a5:6b:02:2b:ee:9f:04:d3:c6:04:c9:65:
                    fb:04:65:75:b9:1c:03:16:61:ab:ed:f4:90:5f:3e:
                    aa:5f:d5:e3:6f:b6:e3:cd:15:da:21:99:09:38:70:
                    bb:27:f5:78:b0:5f:bb:79:fd:d6:51:33:ae:96:1c:
                    ca:db:72:26:94:f5:bd:32:b5:af:77:5f:a2:cc:55:
                    de:01:2d:0d:23:35:48:a4:8d:3f:bf:cc:1a:4c:d0:
                    19:be:89:93:57:d6:f2:d5:43:f9:42:e1:0c:9b:03:
                    2d:a0:d9:06:1a:45:0e:d7:a4:85:79:4b:40:1a:dd:
                    31:49:7f:b7:4d:61:2c:de:2d:fe:e4:b1:5c:d9:97:
                    e1:06:5e:26:fa:b7:c1:e0:65:30:a8:a3:20:21:f5:
                    4d:0b:d7:c7:33:2e:36:01:08:fc:f7:7b:0c:56:e1:
                    92:60:16:c3:20:23:00:34:7e:a6:07:8c:b8:28:ca:
                    5e:43:3c:a5:fa:3f:f8:26:24:53:04:9e:6a:d2:c5:
                    1a:69:e9:8b:63:a8:7b:88:82:3b:83:bb:a1:22:a0:
                    21:31:a3:18:35:c1:c0:4b:a1:5c:ae:3d:49:18:e4:
                    5e:af:17:8f:eb:66:7b:d9:4e:f6:f4:d8:54:08:b2:
                    63:94:0c:1d:9a:2e:e2:74:f6:1a:df:96:ff:bf:f0:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:01:16:93:E6:2C:4B:5C:14:96:7E:95:54:DB:9F:BA:57:EE:19:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/36f4237b-d34d-313a-ad66-8e2673d0bca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.217.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:01:01:27:6d:bb:b9:76:e2:2f:02:0c:e7:2e:a3:69:43:bd:
         35:f4:0c:85:da:9a:03:82:57:72:07:c1:d0:74:45:b4:5d:c5:
         f9:5d:32:5e:72:b0:3b:a1:12:17:d9:0f:2c:d7:f1:58:d0:78:
         67:6f:24:10:22:42:d7:b2:3c:82:99:d3:e8:a0:4d:e4:ff:52:
         5e:02:ca:61:f6:d9:ab:47:25:f2:e8:c0:78:6a:fa:69:7c:0d:
         b1:7c:f2:62:8f:a2:b6:4a:ed:91:e6:d0:37:5d:75:de:4d:a1:
         16:8e:7d:74:4b:10:5f:0f:70:02:00:21:08:92:b5:89:9b:28:
         e2:75:db:34:37:3a:73:92:8f:f6:2b:1b:8f:89:6d:4d:bf:85:
         59:e5:86:18:71:7c:ed:f3:13:62:27:94:b2:4c:da:18:4c:01:
         d6:88:b3:29:77:b9:f5:a9:2b:ac:54:ae:72:fc:b6:7f:26:54:
         a9:39:10:25:85:67:9c:7e:bb:15:4d:34:3b:c4:a2:1f:e3:53:
         ad:9f:8b:bc:2d:c9:74:a0:e3:64:5a:2c:7a:d2:9c:2e:ea:55:
         d0:a0:b6:99:44:0e:92:2b:ac:a4:7d:75:2d:72:29:9e:9c:51:
         6e:79:ea:96:0e:73:52:e8:8d:5e:22:57:5b:f1:78:17:33:a4:
         99:06:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----