Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/973d27a3-0f3c-39bb-9a56-357e3f106fbb.roa
File:                     973d27a3-0f3c-39bb-9a56-357e3f106fbb.roa (raw, json)
Hash identifier:          hO98RnxwwbDUQUu4GX6KG/AP+Ii8gJOwxkNntT9PxtM=
Subject key identifier:   68:F9:87:7A:75:99:AB:D5:1E:8F:0A:8E:A8:36:95:97:9F:D6:8F:80
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66169B7F537748D6BF0C4A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/973d27a3-0f3c-39bb-9a56-357e3f106fbb.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        50.96.240.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:16:9b:7f:53:77:48:d6:bf:0c:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=0eeed8c3-313d-4ece-8533-24c57d7cdb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:ec:e5:a8:93:84:a1:b8:50:88:57:e8:3e:
                    36:8f:fb:e4:65:63:6a:72:0c:f8:45:98:4e:9b:d1:
                    17:71:9a:23:63:45:10:5a:1b:b5:d4:9c:47:41:d1:
                    23:72:96:3a:45:97:9f:36:a5:62:34:9d:55:43:32:
                    b8:f0:29:bf:21:6f:c9:98:25:c0:b0:2d:7a:7b:9e:
                    a4:0d:dc:62:07:97:9e:f1:5d:2d:37:68:3b:fd:c1:
                    46:db:e0:4b:27:80:3f:88:a0:eb:80:60:ec:4f:d0:
                    8a:2b:d4:f8:40:27:5e:00:17:22:1f:6e:ca:e3:c7:
                    d6:fa:ea:09:ac:1c:f7:7b:0d:ba:a8:58:d3:2c:5b:
                    5d:c7:6b:3e:2e:fa:c7:11:45:65:88:a3:5f:69:86:
                    a4:0c:e0:11:37:3f:04:2f:fc:09:3b:6e:32:a2:39:
                    ea:a5:16:d3:4f:c9:9f:57:e5:0b:3b:9d:45:10:72:
                    68:5a:11:6e:2b:4f:f5:df:d2:5b:29:be:f9:82:9e:
                    f3:81:bd:e2:b8:0e:fb:e7:1b:d7:6a:93:89:2f:ed:
                    b9:e0:06:ed:88:e1:d0:67:d5:cf:3a:c3:76:41:eb:
                    fd:73:ff:7f:30:4c:82:66:0c:e8:97:f7:2b:f4:b9:
                    c2:3e:ab:41:f8:3b:35:0f:92:56:ac:3d:53:2b:db:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F9:87:7A:75:99:AB:D5:1E:8F:0A:8E:A8:36:95:97:9F:D6:8F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/973d27a3-0f3c-39bb-9a56-357e3f106fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:d5:9f:b9:40:da:a0:0d:31:db:e1:65:ad:23:13:8e:8a:
         9f:c4:dd:8f:74:43:00:fc:be:2f:8d:1c:19:34:cc:86:88:9c:
         b6:6e:1c:cd:90:08:58:b5:3b:5c:1c:6b:9f:0c:da:1a:fd:49:
         4f:59:7d:8b:09:42:4f:80:8b:0d:92:f4:18:c8:55:33:79:c2:
         4b:88:ad:13:33:74:f2:87:f2:11:d1:80:bd:62:53:cd:76:42:
         a9:02:62:1b:c9:7a:3e:c6:17:65:55:21:74:6f:0c:3f:e1:6c:
         6e:27:ed:17:c6:b4:12:91:21:f3:11:6e:23:1f:4b:b4:c2:31:
         f5:ac:b6:16:7a:29:1d:f5:32:33:06:d8:21:cf:ae:bb:92:73:
         dd:23:30:fa:76:be:9d:4d:da:c3:60:47:55:c5:01:f5:38:90:
         8d:42:e1:b7:db:5e:52:c7:6f:42:51:22:8c:a7:eb:e3:74:48:
         38:69:7a:30:3b:b7:d3:45:70:1c:d0:67:46:11:73:aa:88:c7:
         ef:17:87:71:06:e7:c7:de:18:06:4c:32:52:79:a2:23:bd:0f:
         72:6f:a7:f1:b0:c7:72:dd:7e:82:35:d6:69:45:7f:5f:51:36:
         d9:56:81:03:af:73:4d:80:ad:3f:c1:04:88:9d:67:f5:c7:cb:
         c0:e4:70:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFpt/U3dI1r8MSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
MGVlZWQ4YzMtMzEzZC00ZWNlLTg1MzMtMjRjNTdkN2NkYjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjzs5aiThKG4UIhX6D42j/vkZWNqcgz4RZhO
m9EXcZojY0UQWhu11JxHQdEjcpY6RZefNqViNJ1VQzK48Cm/IW/JmCXAsC16e56k
DdxiB5ee8V0tN2g7/cFG2+BLJ4A/iKDrgGDsT9CKK9T4QCdeABciH27K48fW+uoJ
rBz3ew26qFjTLFtdx2s+LvrHEUVliKNfaYakDOARNz8EL/wJO24yojnqpRbTT8mf
V+ULO51FEHJoWhFuK0/139JbKb75gp7zgb3iuA775xvXapOJL+254AbtiOHQZ9XP
OsN2Qev9c/9/MEyCZgzol/cr9LnCPqtB+Ds1D5JWrD1TK9sUgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGj5h3p1mavVHo8Kjqg2lZef1o+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTczZDI3YTMtMGYzYy0z
OWJiLTlhNTYtMzU3ZTNmMTA2ZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqP1Z+5QNqgDTHb4WWtIxOOip/E3Y90QwD8vi+NHBk0zIaInLZuHM2Q
CFi1O1wca58M2hr9SU9ZfYsJQk+Aiw2S9BjIVTN5wkuIrRMzdPKH8hHRgL1iU812
QqkCYhvJej7GF2VVIXRvDD/hbG4n7RfGtBKRIfMRbiMfS7TCMfWsthZ6KR31MjMG
2CHPrruSc90jMPp2vp1N2sNgR1XFAfU4kI1C4bfbXlLHb0JRIoyn6+N0SDhpejA7
t9NFcBzQZ0YRc6qIx+8Xh3EG58feGAZMMlJ5oiO9D3Jvp/Gwx3LdfoI11mlFf19R
NtlWgQOvc02ArT/BBIidZ/XHy8DkcO8=
-----END CERTIFICATE-----
Generated at Fri Jan 5 06:12:50 2024 by rpki-client on console-fra.rpki-client.org