Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2ab3ca13-ca51-3d30-9094-f292ea202c47.roa
File:                     2ab3ca13-ca51-3d30-9094-f292ea202c47.roa (raw, json)
Hash identifier:          Et4uCHaar0tA63e0NvmG2+w5pQJ7+uFq1gPeX1LhXo0=
Subject key identifier:   ED:E7:1B:32:63:23:D5:B2:CD:A1:3B:2F:79:3C:8C:A3:A3:1A:B1:6E
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285840318A041B03C1AF41B7919D80
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2ab3ca13-ca51-3d30-9094-f292ea202c47.roa
Signing time:             Thu 07 Jan 2021 14:36:59 +0000
ROA not before:           Thu 07 Jan 2021 14:36:59 +0000
ROA not after:            Fri 14 Mar 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        104.156.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:31:8a:04:1b:03:c1:af:41:b7:91:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 14:36:59 2021 GMT
            Not After : Mar 14 04:00:00 2025 GMT
        Subject: CN=66aadd7e-2b0f-4bc5-92c7-9a977a6e9522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:91:04:47:12:02:38:c3:fd:05:dc:e9:c8:
                    32:58:31:b4:7a:04:a0:21:2a:0a:fa:1c:12:85:d8:
                    2e:58:b0:b5:26:2c:7c:94:4b:ba:30:08:bb:ac:9a:
                    d7:82:73:42:cc:08:7f:60:92:0d:21:75:ac:91:61:
                    40:22:e3:74:a9:81:c0:e1:ef:4c:42:dd:53:5f:ef:
                    92:ed:9c:05:40:dc:9f:b7:ee:cc:91:85:b1:8e:a3:
                    ff:0d:ed:58:6d:37:68:f0:82:e0:b9:cd:39:67:9f:
                    8e:e4:e4:e7:66:0c:ba:57:26:55:0e:bd:97:6d:84:
                    30:dc:39:f4:4a:25:ab:cf:18:25:c1:39:9c:85:3b:
                    4d:45:2b:a1:8f:12:4f:61:a2:83:4c:7e:1e:6c:db:
                    04:c4:14:c8:ec:07:26:6f:c6:1c:c0:9c:63:b2:9b:
                    aa:2f:07:7e:db:1e:09:f8:03:f0:2f:67:f5:c1:55:
                    eb:84:0e:11:92:5a:22:b7:42:01:67:0c:eb:65:57:
                    af:c6:c4:d4:98:88:0d:0a:7c:ae:89:da:6d:cd:a5:
                    70:63:ab:46:3c:17:52:ce:8e:a1:91:d1:c5:09:ee:
                    13:ef:36:7d:af:a8:e8:5e:86:9f:a6:85:5b:c5:4b:
                    51:62:06:f8:50:1a:2c:49:ea:c1:fe:31:39:dc:42:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E7:1B:32:63:23:D5:B2:CD:A1:3B:2F:79:3C:8C:A3:A3:1A:B1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2ab3ca13-ca51-3d30-9094-f292ea202c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:3a:73:b6:45:26:3a:bb:16:17:c1:ab:f8:29:12:f1:60:
         24:0c:ae:7a:5d:d3:32:58:00:ac:b1:37:bf:0d:c0:81:ca:ad:
         67:e2:d5:0f:cb:ae:5c:cf:fb:73:f7:e3:f1:be:c3:56:b9:f5:
         b7:80:4a:98:3d:7c:12:22:ec:e1:8a:c9:63:46:81:5d:0f:c2:
         4c:c7:09:c0:ae:14:56:26:29:14:50:07:7b:d2:be:54:4a:fa:
         c5:0e:17:fa:b0:28:22:3c:6a:84:4e:17:8e:de:6b:c1:ae:15:
         db:40:9e:e9:73:8a:f1:9d:70:27:3a:2b:b3:48:0a:d6:bd:26:
         00:69:9d:25:4c:b4:2b:92:da:b0:6c:14:a2:a0:b0:79:f6:a1:
         69:70:43:df:46:06:ca:a1:ea:36:54:11:8a:38:72:04:31:ee:
         ef:09:71:2d:76:02:a8:6c:e7:fa:fc:c0:b9:4c:e8:7e:76:55:
         1d:4c:d9:07:6f:d7:59:9d:8b:0b:48:75:61:16:53:2b:bc:ce:
         11:74:0f:3d:a3:c5:ef:9b:ef:d1:eb:73:6c:a8:5d:3f:3f:c5:
         cf:9f:22:a6:bd:c5:22:d0:43:0e:96:0a:13:f4:88:71:cf:2f:
         bf:0f:b1:c6:60:5f:a4:89:13:47:76:b8:10:89:06:02:22:f1:
         ee:4d:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----