Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c96a28d-3703-3e6e-8bf9-bf5ac80167e6.roa
File:                     4c96a28d-3703-3e6e-8bf9-bf5ac80167e6.roa (raw, json)
Hash identifier:          K9SQE5Ld/XepxpZpytTuNmvQrFD9zInwEI0/qD37ICM=
Subject key identifier:   6E:10:17:B2:A8:0C:5D:3C:7C:2F:E2:52:62:AA:1A:B9:03:16:B2:E0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661C47986E01EE83A1A7BB50
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c96a28d-3703-3e6e-8bf9-bf5ac80167e6.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        75.117.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1c:47:98:6e:01:ee:83:a1:a7:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=81275811-2803-446a-8af7-de96d6719d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:5d:02:82:f1:ab:96:e5:89:1f:ef:17:f8:
                    89:b3:a4:e8:f7:e8:79:35:a0:f8:d1:5d:3b:d8:7b:
                    ca:e3:1e:09:d6:f7:af:7c:a2:8d:c4:6a:e3:cb:cd:
                    1d:5d:5d:51:27:42:16:e5:df:46:57:30:8d:41:1c:
                    92:88:58:99:6d:af:47:8b:aa:1e:27:35:0d:04:3d:
                    dc:3d:04:89:3c:9f:a8:a0:fd:d8:88:24:ed:2e:7c:
                    5f:f7:79:87:d9:3f:19:46:71:5a:b2:10:7e:46:70:
                    bb:40:9e:46:37:25:63:19:8d:44:9b:10:f5:55:6a:
                    b9:6a:15:74:d3:03:a7:6d:28:98:2e:8b:a1:4d:2d:
                    b1:57:ad:29:60:e7:de:a4:e6:f1:2a:f4:86:af:b6:
                    dd:f0:fb:d0:2d:3f:26:ec:d8:f9:56:74:cd:43:ee:
                    36:4a:3d:d5:62:3f:f2:45:f9:4c:91:ec:28:70:4a:
                    41:0e:50:c6:06:4e:52:ba:b9:95:86:44:3c:21:8d:
                    0f:96:a9:62:ad:0e:3a:82:f1:ab:61:66:2b:6f:6c:
                    24:2d:1e:02:ef:2e:a4:02:ed:ce:7b:d2:e5:b9:1f:
                    8a:f1:b3:d9:99:a1:94:1c:bb:fc:19:77:33:aa:7c:
                    0e:9b:e6:77:05:88:2b:eb:95:b6:fa:13:bd:18:1b:
                    0c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:17:B2:A8:0C:5D:3C:7C:2F:E2:52:62:AA:1A:B9:03:16:B2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c96a28d-3703-3e6e-8bf9-bf5ac80167e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:50:5b:ba:42:f2:a4:e3:80:7d:6b:8a:a6:3f:cb:87:6e:
         b6:9e:1d:46:ef:10:ae:39:87:d4:d1:df:d0:d5:f8:04:5b:b7:
         3a:21:90:53:1d:6b:d4:50:0b:d9:e2:84:68:7e:80:74:85:3a:
         6c:c2:77:38:e2:bf:07:8a:a2:d9:86:cb:30:e3:a5:6f:8f:df:
         81:48:10:b8:9c:1c:1b:90:81:85:1e:9e:57:fb:bd:94:7b:2e:
         8e:6f:14:62:05:c4:90:c5:84:15:f2:97:08:27:93:3a:b0:3f:
         6e:9b:7d:5c:40:ad:ea:cf:b7:25:1e:00:82:8f:20:3d:b8:1f:
         fc:fb:04:38:35:19:f6:50:a4:3b:9e:84:24:46:97:df:a0:4d:
         8c:e7:b8:fc:b0:3c:4a:f6:97:6e:82:86:a3:66:25:ac:b5:20:
         c0:51:3e:38:72:80:b2:8b:3e:f2:ab:50:57:db:be:34:34:b0:
         77:77:e2:02:04:2d:ae:21:1b:a9:be:a1:5c:ff:0b:40:af:77:
         c7:1d:ea:0e:aa:c1:eb:dd:87:4b:41:25:84:2a:e3:c9:19:65:
         c9:93:8c:1b:8f:30:5f:0b:8b:fc:81:f6:65:fe:77:d7:64:42:
         f7:a1:52:f6:ad:d4:dd:40:48:9a:fd:b1:ec:15:fc:ba:66:54:
         0a:18:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----