Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/b2d4c7eb-8956-30df-88ca-c05a5e566a40.roa
File:                     b2d4c7eb-8956-30df-88ca-c05a5e566a40.roa (raw, json)
Hash identifier:          WkwI2stu88t8O+WS//IQLDz05aLACummJU68P1DRekM=
Subject key identifier:   51:FB:25:1C:FD:AA:BF:FA:28:77:2B:F7:60:9D:64:62:85:22:C4:21
Certificate issuer:       /CN=0c75fe19-a93c-4656-bf2d-b205565f9d07
Certificate serial:       010D0C9F4328584012389978C697F3E6AC0F2C80
Authority key identifier: 6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/b2d4c7eb-8956-30df-88ca-c05a5e566a40.roa
Signing time:             Fri 23 Jul 2021 13:39:44 +0000
ROA not before:           Fri 23 Jul 2021 13:39:44 +0000
ROA not after:            Mon 03 Mar 2025 05:00:00 +0000
asID:                     10482
IP address blocks:        204.209.208.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:12:38:99:78:c6:97:f3:e6:ac:0f:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c75fe19-a93c-4656-bf2d-b205565f9d07
        Validity
            Not Before: Jul 23 13:39:44 2021 GMT
            Not After : Mar  3 05:00:00 2025 GMT
        Subject: CN=5959b575-9297-4bb6-9619-69eed3610b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:08:8b:0f:e8:d4:88:1e:8f:9e:85:c4:79:72:
                    74:3f:0c:43:04:a0:69:22:cf:c4:be:e8:b5:d2:e3:
                    e8:54:3d:52:b7:0d:51:16:3a:22:96:65:89:d6:cc:
                    87:ef:22:19:22:1b:57:80:09:85:25:20:88:2d:35:
                    0b:43:7e:f2:a4:f7:01:f6:32:44:47:0b:9a:75:62:
                    ee:34:6e:25:d9:b3:11:88:87:6d:9a:62:0b:76:8f:
                    58:3d:33:87:18:12:5e:9c:26:18:ab:ee:88:4e:34:
                    81:10:98:36:36:17:82:cb:2b:5d:95:1f:bf:ea:c0:
                    f6:21:d5:78:7c:97:2f:81:ab:5f:b3:2c:d5:84:bf:
                    55:ef:7a:74:16:f2:44:3e:79:c8:cb:dc:1c:21:03:
                    e0:48:64:ea:c6:0c:7b:1e:35:3f:1f:8a:20:9c:57:
                    6c:68:49:05:3e:8e:ae:2c:6c:45:15:b3:76:d2:dd:
                    b9:ae:81:5c:d8:f9:03:11:8b:f3:fa:79:3d:67:cd:
                    40:48:a1:20:df:55:99:d5:99:fa:28:cd:89:f0:e0:
                    66:f3:44:5e:9a:40:9e:f4:32:63:75:e3:ab:3f:df:
                    07:d9:39:23:1b:a3:0f:fc:de:71:38:9b:9f:62:50:
                    a3:8c:82:5c:9d:2f:d4:ba:6d:57:48:da:f8:45:23:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FB:25:1C:FD:AA:BF:FA:28:77:2B:F7:60:9D:64:62:85:22:C4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/b2d4c7eb-8956-30df-88ca-c05a5e566a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.crl

            X509v3 Authority Key Identifier:
                keyid:6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:5f:a5:be:6c:17:68:50:cc:7d:92:f4:8d:e6:9e:ed:06:
         85:37:16:5d:64:d3:a6:ad:72:8f:8b:fd:73:1c:71:70:5d:3b:
         e5:be:89:97:4e:47:6a:46:ff:4c:6f:70:36:72:3f:25:8b:78:
         b2:cb:7e:c1:c0:63:89:c5:dd:82:f7:8d:7a:97:41:7c:a8:5f:
         84:f5:52:01:49:1f:24:bd:cb:51:ad:16:ba:1a:67:f7:5e:ed:
         c0:26:0a:cf:0b:40:ca:73:ff:00:66:50:50:14:4e:f8:65:57:
         fd:1b:c4:e0:2f:3c:be:cf:1e:d9:35:b4:d6:71:8a:f1:34:ed:
         88:e5:14:61:d7:9c:37:04:da:55:73:d0:08:50:84:bc:d5:3c:
         60:09:6d:b6:77:64:3a:59:e4:bf:85:ca:bf:b6:a7:58:46:b0:
         ff:75:7a:42:43:91:3e:d0:71:8a:81:47:1e:0c:91:24:24:9b:
         f9:74:3a:7c:0a:0f:81:c6:17:ef:db:e3:c1:0c:16:c1:26:cc:
         78:a3:45:16:52:32:a8:4a:a9:47:91:53:53:fb:d2:33:67:f1:
         9d:c8:fe:f0:f2:0c:2c:4c:45:22:87:7f:14:de:b6:97:5f:ea:
         e1:5c:e5:56:95:d3:e1:9c:11:25:03:d4:d3:c1:e9:3d:58:bd:
         db:bd:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----