Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/36e603ef-d122-34eb-8e60-7ea71c3d36ed.roa
File:                     36e603ef-d122-34eb-8e60-7ea71c3d36ed.roa (raw, json)
Hash identifier:          avKj+DOtr8ypMhL6psR4R2trDnx/9l5ClBBeVNiA2+Q=
Subject key identifier:   BE:D6:CF:27:33:07:3C:53:A7:0C:EC:9A:AA:A6:AE:CB:68:4F:78:CF
Certificate issuer:       /CN=3767dced-4e89-4965-b8de-50e421201b4d
Certificate serial:       010D0C9F4328584289E8F25A4185CE7DD5BBAC40
Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/36e603ef-d122-34eb-8e60-7ea71c3d36ed.roa
Signing time:             Fri 14 Jul 2023 01:00:16 +0000
ROA not before:           Fri 14 Jul 2023 01:00:16 +0000
ROA not after:            Thu 12 Oct 2023 01:00:16 +0000
asID:                     198949
IP address blocks:        151.159.240.0/20 maxlen: 24
                          151.159.216.0/22 maxlen: 24
                          151.159.208.0/21 maxlen: 24
                          151.159.192.0/20 maxlen: 24
                          151.159.128.0/18 maxlen: 24
                          151.159.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:89:e8:f2:5a:41:85:ce:7d:d5:bb:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d
        Validity
            Not Before: Jul 14 01:00:16 2023 GMT
            Not After : Oct 12 01:00:16 2023 GMT
        Subject: CN=d273eb7a-99d2-485c-92ef-2874fb18efcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:c8:55:ad:ba:eb:78:ef:f5:5f:79:39:ec:
                    4e:51:c9:fb:2d:ae:56:ba:5c:1a:17:b8:c1:d0:54:
                    9b:e6:24:fc:5e:18:74:28:e5:c3:cc:c0:cb:0e:fa:
                    31:2e:ca:28:26:81:d0:60:e2:07:8e:91:34:96:c8:
                    7b:99:7b:5f:21:b9:d7:77:37:1f:9b:41:0a:88:b4:
                    56:36:1f:cf:f0:63:89:12:d7:e0:99:ee:2e:4e:db:
                    79:37:8c:58:16:88:7d:ee:10:ca:9e:e2:9c:07:ea:
                    16:71:e0:ef:bc:a3:03:51:b2:e3:a5:1f:ac:11:53:
                    aa:fa:09:03:60:b0:19:bb:83:7b:8d:1a:ec:35:22:
                    1e:c2:9e:ef:f5:79:cf:83:60:07:56:21:e7:12:69:
                    43:ee:aa:a7:48:89:2d:37:aa:35:e0:1c:c1:fe:87:
                    d6:6b:4b:cc:f3:e2:cb:83:b6:e7:8b:9e:45:ba:97:
                    bb:04:d2:b5:29:51:ba:0e:0a:e2:cb:fe:0a:4e:56:
                    a7:25:06:66:ad:ff:5b:87:85:a5:a2:39:9e:4c:72:
                    a5:66:88:09:77:e1:00:4d:0a:a1:d1:e9:9e:e2:10:
                    84:23:e7:fc:1f:48:eb:d0:f8:d4:dd:54:69:bc:8f:
                    7d:9f:f3:16:6c:dd:85:96:b3:40:8b:cb:8a:66:31:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:CF:27:33:07:3C:53:A7:0C:EC:9A:AA:A6:AE:CB:68:4F:78:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/36e603ef-d122-34eb-8e60-7ea71c3d36ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl

            X509v3 Authority Key Identifier:
                keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.159.0.0-151.159.219.255
                  151.159.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c7:1c:ff:a3:55:87:59:9c:24:76:c8:b6:9e:ca:e5:72:8b:
         b8:66:e5:3e:4b:8c:84:0e:99:5e:2e:11:57:ad:23:f9:32:a4:
         62:51:6f:bd:43:69:3a:d1:79:00:07:b6:aa:95:5a:98:b2:65:
         ac:4c:a9:60:36:02:03:29:75:31:53:29:df:fb:e0:0b:e2:86:
         32:41:4a:31:fd:74:06:25:c7:09:4f:31:2d:67:d7:d1:82:22:
         e0:54:61:54:1f:1f:6b:1a:a0:84:61:97:4f:f5:c1:5a:9b:b9:
         6f:b1:01:2c:a4:99:c3:dd:c5:0b:32:c6:2d:67:c3:bb:52:f5:
         60:b9:65:73:fd:1a:5b:cd:5a:f4:77:fe:72:bc:57:97:50:81:
         b4:33:3f:44:b3:6f:e4:d1:b7:13:fa:b8:e4:96:3b:d4:7e:93:
         c0:4b:02:c5:f7:53:c5:89:1a:4c:7c:75:95:ef:ad:50:3a:00:
         63:a8:36:be:e2:09:5b:d3:4c:81:68:3b:1b:c1:19:5f:13:6f:
         4a:0a:c9:ad:be:bf:15:1e:04:3e:b3:7e:29:b2:44:20:d7:e7:
         50:91:c2:4f:3e:31:b9:fe:f4:bb:8e:fd:a2:2f:ba:a5:4d:92:
         ae:aa:2d:75:10:21:a3:f0:d5:f6:30:8f:7d:cc:04:fb:44:4e:
         b9:0b:f6:85
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 21 22:23:21 2023 by rpki-client on console-ams.rpki-client.org