Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68cacee2-820b-3e4b-80d1-8ab727517f90.roa
File:                     68cacee2-820b-3e4b-80d1-8ab727517f90.roa (raw, json)
Hash identifier:          eDruR7ruBnIyQQY2UtgiAOuwWe1b1Dcmx7R7kRd7YOM=
Subject key identifier:   11:69:EE:98:EC:24:19:F0:EE:38:A6:C8:F0:36:CD:64:31:A7:05:1E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA9084B2E06BBFE47215280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68cacee2-820b-3e4b-80d1-8ab727517f90.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.29.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:08:4b:2e:06:bb:fe:47:21:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=6a17bd2d-e16f-42cf-84b4-bb5229430b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:ef:b6:da:2c:a7:a7:2c:71:0f:df:dd:9c:
                    08:f3:7c:5c:f6:bb:f1:38:da:b5:e6:2e:72:96:10:
                    6c:17:06:68:61:b9:d9:d3:bb:28:af:2e:fe:f5:6a:
                    bd:60:dd:99:6e:31:a6:f7:c9:3a:11:7b:5e:c3:1e:
                    ba:b0:09:76:fd:37:d0:75:b7:bf:31:9f:e0:9c:62:
                    62:4a:89:e2:15:ef:67:54:5e:f7:65:81:43:2a:30:
                    6b:bf:5c:d7:ed:22:e5:ed:88:57:91:2c:44:b8:6f:
                    72:73:52:25:97:e8:ac:b1:69:91:68:4d:8c:b6:0d:
                    5b:7a:d2:d4:e6:87:81:22:28:bb:85:d8:7a:98:dd:
                    c4:a6:b6:45:ec:1b:90:29:da:8b:43:ad:31:0a:6e:
                    5c:68:b0:49:17:42:d0:03:ef:20:40:c4:96:bd:5d:
                    da:71:0a:2f:5f:e1:83:cc:15:3d:51:ae:44:c2:2f:
                    3c:10:b0:b1:22:03:04:a1:ed:9c:9a:bc:33:9a:9c:
                    7c:98:e4:97:85:5e:f8:72:32:49:f7:2f:82:1d:ac:
                    af:59:14:0c:1e:77:35:f8:62:74:90:48:5e:62:8c:
                    57:59:b9:a4:e4:01:84:8f:6b:1e:08:ab:2b:54:46:
                    c4:b4:6f:75:16:11:ca:ae:ca:bf:d9:db:5d:63:13:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:EE:98:EC:24:19:F0:EE:38:A6:C8:F0:36:CD:64:31:A7:05:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68cacee2-820b-3e4b-80d1-8ab727517f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.29.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:1e:67:9f:24:93:a3:e4:0a:84:21:8c:96:09:26:18:98:
         6f:bd:bd:5e:06:60:d4:91:12:46:68:88:1f:ca:52:81:bd:a8:
         e4:34:7c:86:92:59:3c:64:28:57:c1:22:64:cb:7f:65:9e:ba:
         49:71:dd:7c:98:26:51:24:db:bf:1a:38:b2:6d:10:3a:e5:48:
         a8:9c:1c:00:e0:27:9e:fe:2b:94:0f:04:be:59:fc:f5:5f:4f:
         94:bb:b0:72:8e:67:ef:41:a0:3f:70:f6:f7:d2:d4:db:85:cb:
         71:d0:40:bd:85:89:de:66:c5:7c:2c:b2:3c:3a:d3:06:57:08:
         46:92:8d:8e:44:b5:2c:c0:74:8b:76:ce:44:df:70:e1:c5:85:
         a0:bf:7d:6d:08:55:a9:43:3a:0e:76:b5:9d:13:5b:cc:d1:1f:
         d0:24:05:f2:60:dc:c1:3d:27:6f:70:2b:d6:60:14:95:8d:5f:
         d6:8e:14:a0:15:ea:79:56:79:86:f6:7b:86:2d:c6:ce:58:73:
         49:92:84:47:58:c5:eb:fa:e5:f7:31:4e:2c:8b:42:a9:aa:3a:
         1b:b1:f3:86:a3:de:82:0d:04:77:19:d1:93:09:84:8a:59:8d:
         67:8f:21:1c:b9:3f:68:41:36:71:37:52:06:c3:26:9b:2b:a1:
         69:93:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:02 2024 by rpki-client on console-fra.rpki-client.org