Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a3b9f3d-1fe3-3756-961d-f8077a5de7d3.roa
File:                     2a3b9f3d-1fe3-3756-961d-f8077a5de7d3.roa (raw, json)
Hash identifier:          wK0OUmQr6Pn3DDvXBWvUMYarGUiqPEUnZtuYVwRuCsE=
Subject key identifier:   F8:58:9B:D3:1A:9A:3A:B0:8D:A6:EF:4A:FD:37:8F:D8:7C:1B:E9:57
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA14A0825A821940395DF3A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a3b9f3d-1fe3-3756-961d-f8077a5de7d3.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:1800::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:4a:08:25:a8:21:94:03:95:df:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=68348a00-13a0-4cd6-8749-8a4cd00ecab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:af:4d:8d:fc:0a:9c:30:15:8e:01:b5:c7:
                    e6:9f:b7:d0:9f:24:42:03:d5:32:95:e7:77:f9:ee:
                    4a:6d:0d:ec:bf:21:7d:9d:4e:c8:b8:1d:38:be:4a:
                    77:6c:95:bc:c1:c2:14:7b:97:5c:fc:b0:0b:dc:32:
                    97:11:a8:cd:51:35:e6:fe:cc:07:c5:ce:19:20:78:
                    bd:4d:11:53:af:69:49:25:80:0b:e2:fe:6c:34:f0:
                    60:5a:d9:81:5c:e4:91:a9:d2:7e:b9:25:e1:66:d5:
                    e2:f7:53:0b:dd:b4:72:f2:10:ab:42:3f:28:12:27:
                    ea:f4:f5:5f:90:eb:1d:f0:d4:d7:43:46:51:74:e7:
                    82:d7:52:e2:56:5d:fb:56:c6:f9:9c:be:63:1c:25:
                    71:85:1f:fe:c5:9c:8c:e0:57:8d:3d:aa:a8:d0:e2:
                    aa:bb:78:72:56:66:5d:77:5c:86:ba:16:af:90:56:
                    00:d0:15:f7:cf:c0:c1:65:71:a8:a3:8b:69:9d:5e:
                    81:7a:d5:e1:53:b6:a5:2d:50:9d:aa:bf:dc:70:37:
                    8d:cb:50:b3:bb:94:cd:eb:e8:54:ce:4b:42:71:9b:
                    6d:e1:26:ed:28:a6:ec:a4:34:f2:f1:07:32:cf:29:
                    3d:5e:0f:2c:65:d5:c8:54:d7:33:1e:af:79:16:d4:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:58:9B:D3:1A:9A:3A:B0:8D:A6:EF:4A:FD:37:8F:D8:7C:1B:E9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a3b9f3d-1fe3-3756-961d-f8077a5de7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:1800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:25:21:4b:b2:12:1d:5b:8d:0d:07:f2:75:40:2b:8a:f2:ae:
         7a:44:ce:49:90:b9:f1:ec:f5:a3:d7:81:83:6d:44:b2:2d:e0:
         df:47:92:b3:7c:46:5e:a9:62:4c:51:18:f9:0e:31:39:71:f6:
         f9:00:9e:06:0c:52:d2:d7:9b:ac:68:7c:2e:6c:56:68:45:3a:
         50:13:4e:88:ff:42:1d:de:c6:3f:ff:64:ae:a4:e7:71:4e:90:
         86:da:da:ea:99:a4:20:e3:b9:fc:0e:5f:28:60:3d:6c:22:d1:
         44:17:05:41:10:f1:6b:6e:82:39:9e:cc:ab:14:a8:3b:08:2a:
         e2:eb:3a:24:d7:45:01:09:7c:b8:ce:e4:e6:a0:4e:19:29:39:
         b8:06:4d:08:d1:ed:b2:a6:53:52:ae:df:be:03:2a:4d:c8:54:
         b7:a1:d0:c6:16:18:5a:e2:aa:96:cb:e0:d9:54:d3:6d:41:d0:
         15:ac:d1:42:5b:09:6b:18:74:ab:0c:9c:a5:8f:6b:db:c6:4f:
         7d:71:58:cb:d2:da:85:55:56:79:a1:55:06:14:46:3a:f1:7f:
         0b:fe:56:67:47:bd:62:32:3a:81:9c:02:06:3b:ef:d1:2e:cd:
         8e:77:65:76:3c:5e:ff:f8:cb:cf:ea:e6:93:48:5a:67:cf:bf:
         63:84:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:18 2024 by rpki-client on console-ams.rpki-client.org