Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/66b212e5-009b-3796-a0f9-a683c11499ec.roa
File:                     66b212e5-009b-3796-a0f9-a683c11499ec.roa (raw, json)
Hash identifier:          P+Md7Jm0oxXPoqost22+/V+9HA+HsSrmZwwmk9eoTDE=
Subject key identifier:   D5:6B:EB:F9:78:FD:A7:0E:86:04:0C:90:58:18:96:82:4C:83:CF:04
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583F79458204D3D26541C81ED800
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/66b212e5-009b-3796-a0f9-a683c11499ec.roa
Signing time:             Thu 07 Jan 2021 14:36:59 +0000
ROA not before:           Thu 07 Jan 2021 14:36:59 +0000
ROA not after:            Tue 07 Jan 2025 05:00:00 +0000
asID:                     209737
IP address blocks:        209.142.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:79:45:82:04:d3:d2:65:41:c8:1e:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 14:36:59 2021 GMT
            Not After : Jan  7 05:00:00 2025 GMT
        Subject: CN=d0b993ce-de88-4d9a-9621-40d25ef0c2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:5d:6a:a9:fe:a8:37:8e:aa:c4:eb:b3:ec:
                    00:f1:99:ab:4c:38:40:c9:fd:77:c9:7b:f9:6a:c0:
                    3f:07:99:a5:08:58:f0:1d:ea:39:d9:05:9b:fb:4d:
                    3a:c8:a0:1a:e6:15:d2:2d:3c:b6:76:80:0b:1b:f0:
                    ca:a7:33:25:c8:8f:44:75:bc:78:fb:fe:25:66:33:
                    ee:41:68:38:fb:ea:d6:5d:ce:4e:f5:08:8e:5a:65:
                    50:52:b6:97:f0:74:63:2a:7b:ec:a2:22:38:80:7c:
                    27:4f:4f:47:77:12:df:a2:cd:48:73:60:ac:0f:18:
                    6f:a4:ff:5a:ba:93:57:d2:51:4e:99:12:e6:5e:51:
                    79:b9:36:e5:e0:e3:54:4f:8a:d9:5d:e1:5a:b1:d8:
                    1a:24:6e:14:92:29:2c:0c:0f:d7:7f:21:22:fb:c6:
                    f6:fe:05:ae:1c:93:8d:3f:33:8a:72:d2:59:91:72:
                    d1:26:c5:2d:d1:24:17:f1:c6:57:b9:fd:89:f0:16:
                    d2:04:00:b2:dc:fe:60:5e:ba:89:30:4e:0a:6d:06:
                    2b:1e:cd:c0:09:0a:ce:e6:52:73:2a:2d:9d:de:13:
                    ed:f4:66:57:f8:e6:84:8e:a7:f8:12:81:ce:4a:d1:
                    b1:7b:24:83:e0:3f:6b:8f:64:c5:0e:c5:bc:e2:84:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6B:EB:F9:78:FD:A7:0E:86:04:0C:90:58:18:96:82:4C:83:CF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/66b212e5-009b-3796-a0f9-a683c11499ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:88:c8:d5:46:c4:a1:e1:2a:b6:97:06:f7:f8:0c:0c:ec:
         e6:bb:fe:90:f5:68:b3:c3:dd:3e:d9:c5:7e:22:bc:8f:63:19:
         7e:fa:ad:05:8b:1c:a4:55:f3:0d:0e:0b:6a:07:07:fe:7c:c8:
         c6:4b:ea:ec:64:73:9c:48:a6:55:5d:43:16:42:a5:70:f5:cd:
         db:b5:7e:c9:40:a4:9e:c1:b6:5c:82:29:b3:5a:57:ae:38:6c:
         97:d9:69:16:ff:e4:59:18:2d:d9:0b:61:e4:02:b2:00:54:39:
         cb:e1:ae:a0:02:3c:2b:68:7c:3a:4f:aa:1d:fd:c5:f6:26:cc:
         4f:2a:ed:97:84:ad:68:32:7a:49:dd:49:9e:78:33:db:e9:0d:
         95:ea:53:d1:e1:a5:b7:49:4b:05:8d:af:f5:4a:a5:13:23:0d:
         5c:70:a9:f1:fc:7b:91:bd:f0:a5:b3:fb:19:d2:27:09:57:8e:
         98:21:08:10:3d:82:d6:1d:62:f9:50:11:ae:b1:94:92:3c:5d:
         ac:90:4b:f0:5f:2e:31:f5:ec:07:78:39:e3:a0:6c:63:a3:0e:
         f9:7e:2a:16:ba:f9:f8:0c:37:4c:5b:b4:da:1b:f0:57:e0:73:
         3f:c4:a7:c3:8e:89:67:32:c7:5e:29:f2:89:98:4b:ea:08:80:
         7a:eb:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----