Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bd7d410-e423-3d21-aa42-1bec7ae33513.roa
File:                     8bd7d410-e423-3d21-aa42-1bec7ae33513.roa (raw, json)
Hash identifier:          QiZQ/VwnVctw6f39qBXEDkXCKoCAqRNshW27NS3zJds=
Subject key identifier:   E8:10:A7:8F:E3:6B:2C:5F:F9:A2:43:72:B7:D3:2C:7C:A4:75:C9:76
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA901F41AA752706F984040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bd7d410-e423-3d21-aa42-1bec7ae33513.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.7.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:01:f4:1a:a7:52:70:6f:98:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=04e752b2-de2e-4065-8091-894413a14514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:69:dd:ec:87:ae:e5:7d:6f:1e:03:d5:41:
                    2a:67:7d:0c:68:e6:d8:8a:e1:d2:42:26:53:a0:44:
                    05:a7:76:a0:fd:01:c5:e1:c9:fa:5a:b4:54:73:d4:
                    3e:5d:e2:e4:4b:31:5e:eb:0c:81:60:aa:2b:1a:79:
                    cd:66:99:78:07:12:77:31:ab:85:04:9a:0a:e0:62:
                    ad:e6:e9:db:d2:66:92:06:d4:ef:53:e6:59:39:da:
                    9c:11:38:75:15:98:78:51:87:36:9b:06:e5:8b:b5:
                    01:45:7e:91:cb:9b:8b:d9:41:62:1d:4d:37:41:e3:
                    e5:75:59:67:7b:11:e4:cf:3c:86:55:23:11:72:fd:
                    d4:22:19:68:fe:fd:38:d1:7b:2b:67:e4:bc:b9:00:
                    d8:34:b7:4b:2d:80:e9:90:13:e3:ec:23:d7:e3:bd:
                    ba:ea:62:e2:9e:31:4e:22:87:d7:34:6a:63:fb:cd:
                    47:4b:f6:5a:e4:07:70:cb:ba:78:f1:6d:f1:2b:ae:
                    a7:4d:5b:03:0a:af:e5:2e:2d:ec:8a:2b:ef:85:23:
                    1d:7a:bd:65:df:d5:7b:c1:04:e8:01:18:f4:81:d7:
                    7b:9a:3c:00:aa:e0:c2:ce:00:54:ca:89:d2:8d:ce:
                    d7:21:72:88:80:46:d6:75:22:c7:27:51:b4:f8:14:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:10:A7:8F:E3:6B:2C:5F:F9:A2:43:72:B7:D3:2C:7C:A4:75:C9:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bd7d410-e423-3d21-aa42-1bec7ae33513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.7.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3c:bb:8b:67:24:85:82:64:f5:b9:5d:09:bf:e3:e4:d8:cc:
         d3:42:ba:e6:86:45:1a:77:77:8a:26:fe:79:80:6f:15:64:c4:
         51:e4:0d:88:c7:65:20:b8:27:ec:56:af:4d:8f:24:6e:93:c6:
         3c:ea:bd:da:b8:96:73:ba:2e:6f:a9:35:8b:1b:f2:a7:e1:df:
         ea:d4:a2:2d:73:34:48:40:c5:60:b1:ba:0a:b9:eb:02:fe:4f:
         68:38:a8:e2:ec:71:aa:4e:ff:68:fc:7c:43:fc:e4:ec:ad:eb:
         d6:5d:88:28:25:1d:fb:b8:33:25:8b:52:03:f0:94:4c:68:ad:
         79:c8:e0:61:79:95:4e:98:c8:0e:9a:78:4c:7c:8b:48:ca:95:
         02:38:ca:ae:23:6a:d5:6f:df:73:71:a1:d5:43:1e:4a:c5:dd:
         6e:87:52:20:21:2b:84:fb:73:eb:df:37:b7:2f:4c:19:aa:da:
         db:33:11:03:13:2d:3d:5f:74:a8:9a:17:6e:48:11:20:07:33:
         ea:88:79:ab:2d:18:d2:97:ee:bd:dd:aa:ed:c6:53:05:25:ea:
         0f:fc:a2:23:0a:b5:0c:37:7b:c2:2c:34:9b:d0:38:59:f4:a4:
         f9:36:1d:15:eb:f8:92:c4:0b:75:0f:52:e2:fa:62:95:5e:aa:
         e8:1d:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----