Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99130d8e-fae3-382f-9a56-511a51e90450.roa
File:                     99130d8e-fae3-382f-9a56-511a51e90450.roa (raw, json)
Hash identifier:          JjjioBnXN2uN0C8IKFBcxkZXYdtXaBAhS7ctk9qDGyQ=
Subject key identifier:   AB:A4:D9:97:2E:78:39:D1:00:A4:E7:B6:76:87:25:63:28:1A:9D:0E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA9D40D31AE9D028009A824
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99130d8e-fae3-382f-9a56-511a51e90450.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.223.128.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:d4:0d:31:ae:9d:02:80:09:a8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=d8530e56-32f7-4603-b937-deab26f5408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:c5:db:98:b3:a6:f2:97:fb:40:49:38:8c:
                    3d:63:01:6f:60:b6:94:cb:a6:6a:2c:67:7d:88:bb:
                    c1:40:cb:78:ee:5f:2a:0f:fe:f0:e4:eb:60:89:63:
                    dc:89:c4:41:20:bb:3d:9b:c1:e9:22:0e:c8:a0:96:
                    03:3b:49:20:31:5c:12:64:6d:96:07:d4:e5:5a:4e:
                    b2:7c:e8:34:67:81:0d:69:ee:eb:ee:81:b6:a5:4a:
                    42:04:55:91:94:09:00:88:ee:01:51:79:78:28:ef:
                    f6:02:f7:4c:0f:0e:c7:17:be:45:9b:7a:1e:b4:e7:
                    77:d3:36:af:69:50:a8:1c:a9:7d:b5:ac:0d:9c:2c:
                    ae:77:e1:ba:2c:d8:e8:94:a3:1b:60:fd:74:d7:b3:
                    0d:0f:08:a2:bd:25:d5:94:2a:42:b3:b7:02:73:61:
                    bb:0d:34:3b:af:c1:68:5d:5e:76:c4:a5:59:df:a0:
                    22:28:9a:07:cc:e8:55:c7:62:88:80:83:4e:c1:7e:
                    5c:cc:04:e5:67:70:50:fc:93:7e:a8:c4:48:4f:73:
                    64:de:d3:f9:df:5f:aa:05:a3:22:76:59:b7:15:19:
                    17:d8:fd:0c:e8:7e:ab:e2:ec:82:31:6a:ab:47:16:
                    2f:af:d7:e4:d0:bd:8d:07:0d:bb:7d:14:67:81:ca:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A4:D9:97:2E:78:39:D1:00:A4:E7:B6:76:87:25:63:28:1A:9D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99130d8e-fae3-382f-9a56-511a51e90450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a7:6d:a8:cf:59:a7:c3:ed:1b:f6:db:89:1b:17:9f:75:e2:
         8b:af:2b:3b:14:ab:ea:de:e5:df:9b:b3:d0:3c:45:fc:06:a4:
         b6:6b:58:9e:ee:ef:b1:8f:5e:46:61:f3:bd:68:37:b6:6a:46:
         1b:0f:28:3a:1e:0c:73:1a:42:98:94:bf:e9:38:e8:e1:1b:5c:
         82:57:89:ad:3e:89:02:ab:39:a7:dd:ed:de:bd:b5:37:22:3d:
         dd:2c:46:fb:f9:06:c6:ad:5c:46:88:70:75:65:14:74:39:51:
         9f:63:8e:f1:a4:d5:f4:90:93:1a:1c:fa:07:44:03:ae:d8:ab:
         54:21:1a:41:a9:53:49:33:fa:07:a2:ac:93:76:b2:00:f5:14:
         28:aa:2d:45:03:b6:7f:b8:19:13:4f:02:18:1e:95:04:09:16:
         f0:29:28:54:9a:1f:5a:ce:32:4e:3e:e4:1e:22:39:79:d8:88:
         fa:27:df:a1:ea:ba:20:09:cb:2c:f7:c1:ca:93:41:a5:6f:12:
         c6:19:36:97:73:bf:49:1d:2e:bd:5b:cf:80:3c:6b:3f:f4:be:
         98:d9:04:d4:44:ad:55:bb:29:b9:80:b2:8b:27:58:b1:16:2e:
         32:c4:bf:99:be:71:2f:c3:07:5f:7d:6f:a2:58:0a:1f:b6:53:
         87:58:ac:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:28 2024 by rpki-client on console-ams.rpki-client.org