Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9256680e-9af8-30d2-9e62-74ab2e29a220.roa
File:                     9256680e-9af8-30d2-9e62-74ab2e29a220.roa (raw, json)
Hash identifier:          1+ABJncghmBKQNX1hLNH+AQ9W60zs+kEkE5fXkZ3zc4=
Subject key identifier:   8F:D3:78:7E:3F:7E:22:1D:0B:8B:67:A3:C9:C1:5B:1D:D1:11:93:00
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583CA6142A2B8E453809C572CA00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9256680e-9af8-30d2-9e62-74ab2e29a220.roa
Signing time:             Thu 07 Jan 2021 05:00:00 +0000
ROA not before:           Thu 07 Jan 2021 05:00:00 +0000
ROA not after:            Tue 23 Apr 2024 04:00:00 +0000
asID:                     61317
IP address blocks:        104.156.151.0/24 maxlen: 24
                          104.156.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a6:14:2a:2b:8e:45:38:09:c5:72:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 05:00:00 2021 GMT
            Not After : Apr 23 04:00:00 2024 GMT
        Subject: CN=d21df901-70bf-4eec-a9c0-a15f6aa5c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6d:ef:75:dd:77:15:f5:f7:e2:46:f7:8e:2e:
                    0a:ba:67:04:16:05:88:1f:8f:2d:d4:69:c5:37:63:
                    ac:69:ee:f5:f5:fb:3b:1d:1c:22:ff:fd:14:90:8c:
                    02:82:51:51:8d:56:5b:56:44:b9:82:40:22:52:34:
                    9e:86:50:28:34:40:c9:ad:0c:4b:3a:da:31:a1:15:
                    98:46:87:a1:c4:b8:09:3a:02:05:01:39:98:79:6d:
                    69:7a:76:1f:e6:17:89:97:b8:d0:83:62:c7:1b:a3:
                    51:12:2c:d7:43:95:11:5d:ab:f1:d2:70:ed:37:b7:
                    75:65:91:6a:42:e8:ef:7a:3e:bb:8a:76:62:28:1b:
                    1b:f4:ce:81:26:68:02:52:48:84:a5:a5:5f:bc:18:
                    23:cb:fc:59:fb:34:d5:4c:fc:4b:88:ea:cf:fd:84:
                    a4:0c:7a:dc:ee:0c:46:88:47:df:f4:b3:ea:14:5f:
                    c9:b3:cd:81:51:da:b6:f8:f3:8c:92:c3:9b:fb:c1:
                    aa:8c:51:4a:92:c0:28:b9:37:55:09:6b:ef:5b:36:
                    21:0c:24:b6:e7:29:aa:cf:65:0d:74:a2:e0:f4:ac:
                    08:2b:3e:fc:ed:f3:1e:15:b7:64:1b:17:6d:7f:d3:
                    30:05:ec:e6:1e:62:0b:e8:59:c9:c7:d4:b5:c2:39:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D3:78:7E:3F:7E:22:1D:0B:8B:67:A3:C9:C1:5B:1D:D1:11:93:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/9256680e-9af8-30d2-9e62-74ab2e29a220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.149.0/24
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:70:9c:2b:3e:ce:8c:79:92:85:37:a3:18:ab:62:12:e1:
         3b:f0:25:84:89:b7:5b:cd:c5:f9:d0:22:74:f2:16:14:db:df:
         1f:67:bb:b7:90:43:57:e2:f1:f5:9c:0c:d4:0d:7f:cb:7a:4a:
         4b:69:0f:ad:71:b2:4e:a1:f3:c2:cb:28:b3:1a:05:da:10:9b:
         ea:2c:57:7f:fd:71:4a:82:cf:8b:b6:cd:e0:2c:80:1d:26:a0:
         71:3b:aa:ea:c1:09:06:cc:be:1f:55:53:9c:51:93:82:c8:96:
         a5:41:9d:0b:b7:c2:34:c2:c3:64:6a:34:e9:27:c3:91:89:a2:
         0b:0a:8f:25:18:95:25:14:6b:32:e0:7e:98:de:68:e5:90:1d:
         0c:84:8d:4c:42:54:0c:97:cb:0e:45:dc:37:3b:99:7b:3d:5a:
         55:a6:e2:40:86:4c:96:6a:af:4c:ee:a1:6d:95:a1:46:bb:a0:
         56:bc:3a:e9:25:d5:0a:a7:60:4a:de:5d:8d:b4:dc:ad:ad:16:
         90:54:ae:a5:fa:c7:3a:0e:60:8a:57:67:ba:3d:ad:62:7c:7f:
         ce:2b:d8:b9:1b:28:ed:db:ee:77:c3:d3:27:bc:7d:fe:bb:82:
         62:4a:b7:fe:3e:a3:fe:b2:d1:db:1b:80:eb:3d:4d:a4:ab:be:
         ea:39:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-ams.rpki-client.org