Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9016907e-aa40-3187-b954-5cbb490b2510.roa
File:                     9016907e-aa40-3187-b954-5cbb490b2510.roa (raw, json)
Hash identifier:          P4RF7JQv5Vj0xp714oXFspnkcHCaZ2fA4hofTprebRs=
Subject key identifier:   5B:CC:46:E6:4D:D4:2F:AD:91:78:12:0B:A7:94:76:3B:5F:67:D4:98
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66203AF61EB4318ADC6AA000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9016907e-aa40-3187-b954-5cbb490b2510.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.189.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:20:3a:f6:1e:b4:31:8a:dc:6a:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=2c77e683-8ae6-45a4-9cf6-9a74c6e920e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:8e:78:36:86:5b:40:11:de:74:d1:23:12:
                    3a:26:8d:7a:f4:b3:2c:ef:91:8b:37:14:08:1b:d6:
                    a7:8b:e7:d1:34:3a:32:d0:42:95:9f:d5:40:cc:8b:
                    14:a2:fb:35:51:f7:03:6f:42:76:23:42:93:3e:4a:
                    d4:f7:6b:3e:10:3d:88:fb:9d:34:e8:6d:da:f7:cd:
                    c4:79:ba:69:b7:30:44:62:17:f6:36:91:e5:34:6e:
                    e7:2e:d5:65:d4:d7:80:88:b2:8e:42:5d:41:3e:c5:
                    e7:af:1d:f5:07:64:dd:ac:84:4a:18:1e:02:f6:46:
                    ff:b9:20:3e:f7:34:de:cc:16:2f:0a:7b:7b:1f:d2:
                    33:b2:55:c6:f9:9c:81:a4:ce:f0:3d:a5:93:f2:ec:
                    f9:d2:c5:f4:82:32:a2:38:b4:fe:34:b3:99:29:13:
                    1b:c6:f2:e8:e5:31:34:95:27:97:e1:02:65:76:0a:
                    be:73:40:a1:23:a4:b8:83:74:13:2a:d6:ca:46:f4:
                    e0:ed:1e:c1:98:c7:31:e3:9c:b3:78:22:2c:f9:33:
                    15:9b:12:26:dd:83:b2:ed:7d:a0:ce:59:b1:3d:23:
                    13:25:a3:45:c3:4d:b3:d1:e2:a1:eb:4a:af:6a:05:
                    04:1d:0d:21:f5:73:af:91:92:37:a8:45:d4:87:bf:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CC:46:E6:4D:D4:2F:AD:91:78:12:0B:A7:94:76:3B:5F:67:D4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9016907e-aa40-3187-b954-5cbb490b2510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:5b:12:6d:d1:a5:a6:64:0c:79:e6:e0:e8:b7:e4:7d:32:
         09:47:d6:a9:9e:63:7d:b6:d9:1d:a3:c8:6c:d2:b3:9e:9a:cc:
         f0:c2:97:f1:0d:8b:37:67:f2:9f:99:42:11:20:d0:14:6e:13:
         c4:05:2c:90:39:b2:3b:79:5f:98:2b:f5:ee:f5:1e:42:e0:80:
         af:5e:2b:c3:63:a8:9a:24:02:50:29:db:48:2d:ac:d4:b6:8b:
         fe:99:a1:1f:18:0b:81:0c:8c:5d:fa:cf:aa:70:80:5e:bd:94:
         02:c8:1c:ae:23:98:71:f6:78:29:a8:da:f9:19:85:ec:4d:33:
         51:41:77:25:06:f5:80:cb:77:be:89:14:52:6f:1e:2b:bf:ef:
         0a:8e:d9:97:16:df:c8:ad:16:91:56:16:8d:16:fe:85:70:5d:
         95:12:3b:b4:6d:54:3e:f1:43:d6:2a:7b:38:13:53:ad:a3:97:
         14:2f:62:1b:65:8a:0c:7f:bb:34:99:3c:d4:56:01:67:1e:07:
         4a:bf:b2:64:74:70:3f:d0:de:1f:0f:f2:26:d8:25:f1:12:76:
         40:41:c2:b7:36:8e:64:91:a9:ae:c8:fc:4e:29:74:3f:9d:bc:
         d9:81:d2:6f:9d:76:b6:b3:bd:83:69:83:22:90:a6:a2:09:f0:
         9a:ba:8f:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mIDr2HrQxitxqoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmM3N2U2ODMtOGFlNi00NWE0LTljZjYtOWE3NGM2ZTkyMGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZKOeDaGW0AR3nTRIxI6Jo169LMs75GLNxQI
G9ani+fRNDoy0EKVn9VAzIsUovs1UfcDb0J2I0KTPkrU92s+ED2I+5006G3a983E
ebpptzBEYhf2NpHlNG7nLtVl1NeAiLKOQl1BPsXnrx31B2TdrIRKGB4C9kb/uSA+
9zTezBYvCnt7H9IzslXG+ZyBpM7wPaWT8uz50sX0gjKiOLT+NLOZKRMbxvLo5TE0
lSeX4QJldgq+c0ChI6S4g3QTKtbKRvTg7R7BmMcx45yzeCIs+TMVmxIm3YOy7X2g
zlmxPSMTJaNFw02z0eKh60qvagUEHQ0h9XOvkZI3qEXUh78R1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFvMRuZN1C+tkXgSC6eUdjtfZ9SYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTAxNjkwN2UtYWE0MC0z
MTg3LWI5NTQtNWNiYjQ5MGIyNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzYWxJt0aWmZAx55uDot+R9MglH1qmeY3222R2jyGzSs56azPDCl/EN
izdn8p+ZQhEg0BRuE8QFLJA5sjt5X5gr9e71HkLggK9eK8NjqJokAlAp20gtrNS2
i/6ZoR8YC4EMjF36z6pwgF69lALIHK4jmHH2eCmo2vkZhexNM1FBdyUG9YDLd76J
FFJvHiu/7wqO2ZcW38itFpFWFo0W/oVwXZUSO7RtVD7xQ9YqezgTU62jlxQvYhtl
igx/uzSZPNRWAWceB0q/smR0cD/Q3h8P8ibYJfESdkBBwrc2jmSRqa7I/E4pdD+d
vNmB0m+ddrazvYNpgyKQpqIJ8Jq6j50=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:05 2024 by rpki-client on console-fra.rpki-client.org