Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/363d5ae0-0c1e-35fe-933b-ae0ca8280b54.roa
File:                     363d5ae0-0c1e-35fe-933b-ae0ca8280b54.roa (raw, json)
Hash identifier:          m4A/IOVdzJbAaek2EP4pn2Pd8EYOwDjerxnllcdMc3E=
Subject key identifier:   E3:E1:D2:B3:2D:18:43:CF:85:06:5B:A9:89:A4:D9:AC:97:15:5B:B9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D0CBC18357339E21EDBF16220
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/363d5ae0-0c1e-35fe-933b-ae0ca8280b54.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        2001:4988::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:bc:18:35:73:39:e2:1e:db:f1:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2028 GMT
        Subject: CN=77f61f80-cbb0-4f0e-871e-e9f863cd5a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:4c:50:b2:64:be:1c:7d:33:94:90:09:51:
                    d0:fc:dd:46:7a:48:77:2f:ea:b9:b7:3a:c0:73:13:
                    a2:33:7a:f3:b7:9c:48:a5:34:1d:f6:4c:cc:d8:38:
                    87:08:52:43:32:82:4f:05:a5:6f:d4:41:aa:59:25:
                    cf:00:cf:55:a0:b1:fe:91:35:65:15:ca:6e:71:80:
                    0c:31:72:e5:ea:5f:13:bc:02:b2:22:94:31:a1:ca:
                    6b:4d:cc:af:8b:2a:92:4f:09:bf:c2:14:2e:a1:8f:
                    2f:f2:a9:0e:cf:d8:5f:f2:ff:49:a8:1c:af:63:28:
                    06:7f:20:c4:4d:73:ea:84:ab:39:ad:a4:54:68:66:
                    59:40:ca:57:e7:a6:94:ca:8b:82:8c:85:b4:e3:8e:
                    da:68:f0:0a:5e:e4:cd:db:3b:29:16:1d:47:b6:67:
                    75:ce:60:d6:da:8a:8f:1a:95:39:d3:7d:da:c5:ad:
                    76:9a:1d:5f:21:dc:0d:56:d6:b0:d7:a9:72:e5:f6:
                    5a:41:54:f7:14:ce:bb:2b:fe:dd:df:0d:04:fd:4a:
                    92:7d:1f:19:68:2d:72:a4:08:64:96:a9:fc:b5:c8:
                    5d:01:ed:29:42:96:71:b6:42:4e:2d:50:6c:b0:76:
                    49:f7:81:e7:84:a8:f7:27:dd:7d:6e:fe:c0:be:58:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E1:D2:B3:2D:18:43:CF:85:06:5B:A9:89:A4:D9:AC:97:15:5B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/363d5ae0-0c1e-35fe-933b-ae0ca8280b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4988::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:94:1c:e0:e9:bc:21:cf:d8:19:50:7d:1f:04:44:15:05:12:
         08:2f:dc:96:51:ab:86:c3:bf:47:47:8e:e5:1c:86:0c:31:ba:
         7e:d0:a4:c4:17:9b:1d:3d:62:4d:53:4b:b3:97:1c:b0:44:b7:
         7f:24:9e:e5:22:5a:7c:87:5c:99:d3:74:b3:6f:b7:4d:fb:68:
         92:f7:fd:a3:0f:7d:64:62:6a:13:ca:ce:76:65:5d:97:af:05:
         71:6f:a5:b8:a9:76:71:7f:05:bc:4f:f7:63:66:5d:50:f9:ca:
         9f:15:77:1c:8a:1d:c8:9b:77:e9:21:f7:1b:65:32:26:be:f8:
         c5:09:44:08:c8:38:bb:3c:07:65:3d:44:b0:a5:13:9e:c1:73:
         87:b8:40:69:ef:0a:3d:62:9d:49:37:b5:28:bd:22:f9:8c:37:
         dd:a5:74:38:82:44:83:98:47:6c:80:c4:da:ac:36:48:c9:c2:
         31:7b:c2:4c:64:4b:d8:b8:9b:20:72:07:17:cd:4c:1c:d7:98:
         c5:a4:fe:69:cf:bc:cb:49:c9:8a:27:c9:38:08:37:bd:98:ab:
         f0:35:8f:b0:b7:5f:de:31:1b:2e:41:2d:d8:20:94:f9:f0:53:
         e7:4c:26:7b:2a:9e:26:7d:68:38:cf:90:2c:99:e1:d7:f7:1c:
         06:c0:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----