Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/88863d35-a285-3a60-8f37-3e3c4c6b150f.roa
File:                     88863d35-a285-3a60-8f37-3e3c4c6b150f.roa (raw, json)
Hash identifier:          9PPLyBjnqm9sNidleO99gtDNeL8zfZ/ckc1W8xxByKM=
Subject key identifier:   DD:4B:68:93:87:8D:10:FE:EF:5C:48:04:C7:9D:09:90:A5:06:71:80
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F43285841BD0B048A1CE36147F739C38C
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/88863d35-a285-3a60-8f37-3e3c4c6b150f.roa
Signing time:             Thu 07 Jan 2021 14:36:59 +0000
ROA not before:           Thu 07 Jan 2021 14:36:59 +0000
ROA not after:            Sun 03 Aug 2025 04:00:00 +0000
asID:                     36829
IP address blocks:        104.156.151.0/24 maxlen: 24
                          172.111.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bd:0b:04:8a:1c:e3:61:47:f7:39:c3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 14:36:59 2021 GMT
            Not After : Aug  3 04:00:00 2025 GMT
        Subject: CN=783dcc9a-db57-405e-8279-d60637150d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:86:03:b3:ce:ad:03:bb:1a:75:78:b9:81:
                    28:10:2a:b1:e6:5b:00:f6:1a:35:15:e6:fe:3a:de:
                    a4:b6:13:34:5d:13:9a:81:ee:55:bd:3c:92:49:2e:
                    c5:09:ff:03:21:d0:01:47:30:ba:da:5d:78:b4:38:
                    d7:5f:f2:29:80:ea:16:dc:f8:77:19:22:4a:9d:9d:
                    00:82:38:69:d1:7a:20:3c:c1:4f:be:70:f8:87:94:
                    6a:7c:85:45:63:f5:5f:5c:75:54:7b:06:f4:91:88:
                    7d:6a:95:97:cd:d6:df:ab:e2:72:bb:f5:ea:37:17:
                    7f:a9:6c:02:0a:d3:70:39:63:d1:62:32:8a:70:54:
                    af:84:84:f8:6a:3d:16:bb:b6:e3:61:e0:21:a3:6d:
                    6d:51:03:4a:52:2a:d5:d1:9d:d5:5b:70:a4:57:9f:
                    3a:1e:1b:68:2a:b5:80:c9:bc:a6:6f:3d:ae:7b:b5:
                    c7:2d:61:da:79:07:06:49:2f:6b:c1:46:a0:ac:25:
                    58:ba:c6:28:6b:79:c6:9c:aa:4e:26:9a:13:50:47:
                    0e:ed:ce:bb:48:a9:59:8d:50:98:90:56:77:87:0d:
                    1d:fb:48:4b:2b:ef:4d:37:02:0a:00:e1:fb:6d:38:
                    a9:4f:5f:5f:12:c1:11:6d:a7:d7:45:76:03:36:89:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:68:93:87:8D:10:FE:EF:5C:48:04:C7:9D:09:90:A5:06:71:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/88863d35-a285-3a60-8f37-3e3c4c6b150f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24
                  172.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9a:b8:d8:50:90:38:73:71:f5:fa:6c:dd:91:3e:1c:01:8f:
         62:9d:87:08:23:2a:ca:22:5b:9d:c8:d3:d6:bd:a1:5c:24:51:
         b3:4d:ab:34:4c:e5:8f:ce:eb:b1:7d:b9:b4:74:93:8d:67:f3:
         04:79:41:71:e5:0b:9d:3e:d8:bd:9b:a2:8a:e8:cb:65:e8:dc:
         15:7b:48:a4:48:b2:70:41:8c:77:97:dc:a3:af:07:0a:53:db:
         7f:80:f5:a9:5b:8a:46:4b:f2:16:af:14:43:0f:85:33:fc:49:
         33:45:0b:85:6c:3d:71:7d:67:0e:b3:ff:e6:ec:74:80:1c:58:
         af:62:42:ef:7e:e5:be:04:33:05:6a:87:6d:92:1b:24:a8:2c:
         2e:5a:5b:9d:b1:d6:7f:44:8f:64:69:f0:61:33:4f:c1:d6:56:
         3d:c9:8b:a6:fe:9f:20:b0:72:ba:b1:8e:a7:2f:27:e8:76:9b:
         98:35:d6:65:8e:1f:7e:dd:df:0e:04:e9:14:d2:3b:4a:bd:34:
         7b:c0:0d:9c:e2:d0:57:d1:a2:77:00:d6:a2:50:06:07:29:3a:
         32:7f:18:e3:31:4c:8c:75:a0:f3:dd:04:7b:36:ce:d5:8d:59:
         06:75:4a:3b:3b:ba:14:d2:07:78:33:7f:b1:f8:89:f6:2c:00:
         11:82:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org