Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f852d-11e0-3a4b-8d2d-380c7f5bbf02.roa
File:                     4c5f852d-11e0-3a4b-8d2d-380c7f5bbf02.roa (raw, json)
Hash identifier:          Md+wZDmg1FX8spp3Un7mrLcWSkjC2E2AyTEra8eyaeQ=
Subject key identifier:   05:3F:A1:A0:08:7C:3A:C8:A3:F9:A7:E7:AB:49:6F:13:C7:9A:15:B7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551A3F6E9383E0DE78C08780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f852d-11e0-3a4b-8d2d-380c7f5bbf02.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     26717
IP address blocks:        72.4.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1a:3f:6e:93:83:e0:de:78:c0:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=3eef7082-2d6e-41d3-961b-d5f6861e802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:06:fd:c1:ff:ad:e2:74:17:59:c5:ca:8b:6f:
                    6f:62:7f:a7:96:02:23:f4:ee:dc:4f:d2:07:8a:b0:
                    b2:28:e3:83:47:32:f4:8c:1b:39:ed:75:4e:7e:f8:
                    37:d9:4d:02:30:22:82:1f:4a:60:71:b9:b7:39:41:
                    c8:7b:21:b9:ad:0d:89:0b:11:7e:44:3c:49:a6:14:
                    83:48:d1:4e:27:9e:e4:a2:c6:19:24:38:c6:3f:92:
                    5f:01:05:be:c9:16:27:11:27:64:56:61:be:a0:ba:
                    17:29:66:78:17:3a:91:1d:41:a1:56:cc:ef:00:dc:
                    75:89:d0:3c:ee:3b:68:9c:c0:ce:a0:3b:df:e8:3e:
                    8f:dd:28:15:59:e6:2c:ec:b7:bf:7d:53:f7:6b:4e:
                    35:de:0b:b4:f7:7f:aa:d8:68:54:f4:21:cb:5d:a9:
                    af:5f:a1:0f:4e:53:60:58:22:39:c9:0e:a7:d4:73:
                    27:1d:8c:98:ca:91:fd:73:43:47:c0:3f:c1:29:76:
                    7b:cc:bf:c9:cb:da:55:ed:b7:13:fb:3c:80:e6:72:
                    00:4b:6c:04:2d:94:44:ae:c3:2a:83:cc:e9:d3:a8:
                    e0:b0:5c:b3:73:ad:a2:f9:c1:0b:1d:e9:00:5a:f3:
                    e6:c3:2d:b6:b9:72:15:27:1e:95:b3:09:85:07:7d:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:A1:A0:08:7C:3A:C8:A3:F9:A7:E7:AB:49:6F:13:C7:9A:15:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f852d-11e0-3a4b-8d2d-380c7f5bbf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.4.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:6c:1a:d9:31:67:b2:9b:6f:99:60:f3:f8:59:69:d5:58:bb:
         31:3c:e1:2f:c0:a1:32:4a:98:5e:19:b9:46:92:1c:42:a8:df:
         ea:c8:0c:0c:b5:e9:e4:8e:13:31:0f:1c:4a:3f:ea:34:52:bf:
         2f:98:1b:c8:be:29:e6:06:f5:04:c7:33:e9:72:99:3d:2e:38:
         2b:a9:11:73:a4:78:26:81:4a:cf:8e:ca:0d:9a:75:fa:50:69:
         50:a2:93:a5:57:62:22:91:7a:06:0e:55:fe:98:74:3e:b0:b3:
         28:8a:3e:75:ac:72:13:4f:ef:bb:a6:6e:6e:b9:c7:80:d9:c1:
         8c:af:99:ad:b4:f5:12:55:03:9c:b8:ab:7b:33:51:a1:30:ed:
         99:88:58:79:64:e1:d1:9c:6e:e8:61:21:61:fa:28:b1:57:ba:
         7b:ff:c6:88:ce:47:53:98:c0:98:94:ab:21:3b:87:33:8c:b4:
         9a:31:d9:6b:4c:93:26:a1:b6:f7:e2:3c:40:af:cc:3c:bf:e4:
         70:a8:af:7f:3b:84:68:89:44:e3:18:16:c3:91:65:b8:05:a0:
         9b:71:c1:63:e6:75:5d:d0:26:15:ac:b9:2e:7a:11:d0:35:8c:
         c6:fd:2f:b0:9f:a2:d2:9a:ce:5c:b1:43:34:d9:50:7c:c7:62:
         5a:8c:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:58 2024 by rpki-client on console-fra.rpki-client.org