Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41a54699-3f88-3865-af71-cd5b17ae8333.roa
File:                     41a54699-3f88-3865-af71-cd5b17ae8333.roa (raw, json)
Hash identifier:          YnctQ+W9huOtEpN/uvij2pmrF7UrMpHlARXLkMhUGqo=
Subject key identifier:   52:D8:42:83:26:46:13:84:F0:73:FC:47:68:44:63:DA:C7:2B:8C:2D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D1AD280C9E4033563AD9B0740
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41a54699-3f88-3865-af71-cd5b17ae8333.roa
Signing time:             Wed 02 Mar 2022 05:00:00 +0000
ROA not before:           Wed 02 Mar 2022 05:00:00 +0000
ROA not after:            Wed 23 Feb 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        2607:fec0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1a:d2:80:c9:e4:03:35:63:ad:9b:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  2 05:00:00 2022 GMT
            Not After : Feb 23 05:00:00 2028 GMT
        Subject: CN=8f79d47e-ee6f-4306-86d1-a434abd0a05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:db:62:26:5f:6c:be:f9:e5:1c:f0:7f:cb:
                    1d:50:1d:ed:94:19:db:6d:68:7f:cb:ba:a5:93:b4:
                    20:80:41:ce:45:28:a9:dd:27:59:05:7e:21:63:70:
                    49:fa:3e:f4:24:18:e4:35:2f:3c:db:f7:ec:aa:56:
                    28:43:1b:6d:06:18:35:50:1b:01:80:20:20:54:5c:
                    7c:0e:9a:55:be:eb:4d:e1:b9:47:45:a9:f2:77:1c:
                    27:a3:26:ef:ed:a0:02:60:08:f3:4c:73:e8:f5:a2:
                    16:be:8a:c1:ac:bb:2a:45:55:0e:73:5d:60:f8:a2:
                    42:ad:72:95:5d:f3:dc:19:aa:61:dc:4a:2e:ec:41:
                    51:65:30:0e:c4:99:bb:8e:56:8e:e1:9a:ed:6c:bf:
                    8f:54:4e:97:9f:e8:2c:0d:5c:12:8d:34:dd:3c:d3:
                    29:f5:e0:49:7f:0a:bd:a3:66:c3:0a:3c:34:50:88:
                    1d:96:a1:36:65:0a:3d:b4:db:62:15:f5:c3:d0:1d:
                    c5:83:8c:53:10:27:a8:d4:86:08:19:2f:45:3c:2b:
                    36:4d:1e:4e:d4:69:73:a7:8c:ab:8d:68:73:1f:5c:
                    a4:87:05:81:67:af:dd:10:6b:c9:1e:4e:f4:c5:d8:
                    82:c5:55:fa:94:60:0d:cc:ce:2d:7e:8a:f9:37:5b:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D8:42:83:26:46:13:84:F0:73:FC:47:68:44:63:DA:C7:2B:8C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41a54699-3f88-3865-af71-cd5b17ae8333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:a6:f8:5c:cf:a6:75:1d:29:18:35:f8:75:8e:1e:1c:ca:
         51:94:bf:66:3b:48:c9:29:dd:67:95:7b:94:7e:cf:49:f9:f3:
         e2:f3:03:da:c0:0a:2f:8e:7b:35:53:f5:fe:f0:ae:33:8e:b2:
         fd:28:6c:3e:78:20:d1:e5:5e:a9:b1:44:3d:8a:ad:69:57:fc:
         07:a6:88:64:48:e0:01:a4:7f:08:79:3a:04:8b:ec:85:a0:84:
         72:05:9c:45:78:e8:2d:ff:7c:f8:b4:11:b9:26:63:c0:ea:83:
         3f:c8:9b:5b:84:7f:70:3d:61:59:7d:11:f2:44:74:e1:eb:64:
         9d:b7:6a:fb:b5:86:c5:b6:fb:82:72:e0:61:1c:88:05:e5:53:
         ff:c8:09:18:fa:d4:66:48:fb:e6:65:c0:68:85:9d:53:5b:0e:
         f6:9e:e1:02:8d:03:56:1a:2d:ac:cf:f8:15:70:e5:78:f7:be:
         13:7d:2c:d4:03:df:e8:dd:f7:9f:43:1c:5b:52:48:ee:db:90:
         09:ad:b4:97:d8:61:07:9e:0a:83:77:ec:8a:f0:5b:b0:63:ac:
         a7:a9:0c:4c:5b:93:2d:ac:31:20:87:ac:50:1b:40:3e:85:dc:
         d2:b0:d9:86:25:6f:eb:fd:09:e8:c5:93:3f:20:14:ae:37:03:
         4d:e6:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----