Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af8ee13c-5696-30d0-8aa8-f155b99b6d54.roa
File:                     af8ee13c-5696-30d0-8aa8-f155b99b6d54.roa (raw, json)
Hash identifier:          Okp0m5vTxfMc3CbMYPbuOat68T5WItLK1RjAxFx6CeE=
Subject key identifier:   0A:BF:46:4B:7F:74:3B:58:93:74:7C:E0:17:DF:55:02:37:52:4D:8B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D6616952C0A695DD25CD53140
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af8ee13c-5696-30d0-8aa8-f155b99b6d54.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        50.96.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:16:95:2c:0a:69:5d:d2:5c:d5:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=11980566-6720-41f3-b440-9019cdaa0ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:33:4f:7f:be:b8:e3:0b:77:48:9e:c1:d0:
                    cb:34:83:4d:57:75:83:1c:79:ec:96:8e:d6:c9:8f:
                    c9:8a:96:2a:47:78:6a:cc:35:e4:c2:73:5c:61:6b:
                    25:b0:20:62:99:12:9e:20:73:fb:44:85:bd:a0:19:
                    23:e7:6e:9a:84:46:87:30:f2:e0:db:04:b4:23:b2:
                    b9:30:65:d3:71:6b:87:bd:27:79:e9:12:f1:1d:62:
                    52:be:c5:aa:20:8a:e5:87:27:a6:8d:18:39:b3:6e:
                    1e:8b:3d:65:0a:ae:dd:a3:12:6b:47:55:3c:6b:8c:
                    2d:f3:8f:40:92:3c:c2:b0:01:db:5a:73:12:77:b4:
                    c4:45:bb:6f:c2:c6:1b:72:47:0d:13:60:0a:cd:fe:
                    52:b7:c1:0c:c9:38:71:c3:95:7a:fa:ed:ac:66:8c:
                    51:f8:ba:1f:a6:db:3e:5b:99:60:18:75:49:b4:74:
                    bc:83:99:1d:94:0a:61:0b:28:f4:4e:f3:8e:5c:2f:
                    3a:90:c5:1a:da:3b:d4:d6:80:b7:e7:74:0d:ec:6c:
                    9f:2b:4f:6d:16:94:27:87:bc:9e:a6:cf:1b:34:3f:
                    1b:bc:60:2d:c6:7e:43:b1:47:5f:9e:26:4c:0e:ed:
                    e9:b1:73:17:79:7c:42:68:1c:65:15:aa:4f:75:10:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:46:4B:7F:74:3B:58:93:74:7C:E0:17:DF:55:02:37:52:4D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af8ee13c-5696-30d0-8aa8-f155b99b6d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:31:7d:4b:6d:78:cf:2b:f6:b4:31:63:e3:4c:29:64:ff:
         d0:60:41:39:78:64:1d:59:8c:2a:81:5b:e2:20:5c:d3:56:03:
         79:e1:89:d9:c3:1b:93:d9:43:53:58:2e:3b:67:26:f8:f4:f2:
         ff:63:47:5a:1c:1a:a7:de:db:b2:f0:93:04:1e:41:79:76:51:
         0f:d8:a2:94:51:52:9b:06:93:73:bb:7c:6e:e6:7a:af:ad:c7:
         d3:ea:e3:ca:3d:db:cf:6e:c5:94:21:57:d2:db:7b:db:7d:76:
         98:11:fb:14:94:79:c6:d7:18:4b:59:f6:af:2c:62:ec:1a:71:
         9c:8d:81:51:a9:d7:85:fa:64:a7:f2:2d:b8:10:c6:de:b5:e6:
         81:51:32:4c:37:c4:80:cf:3b:42:f9:54:fd:aa:b8:79:95:be:
         6c:97:29:83:40:e6:93:d6:96:d2:15:d3:a3:ba:4d:cb:f0:c0:
         55:71:a1:8a:cc:f8:bf:14:0b:38:ea:70:e8:41:b4:40:5c:eb:
         77:58:27:f0:e0:49:73:98:32:fd:be:fd:59:c8:3c:68:b1:e4:
         56:ac:74:de:ac:e8:06:1f:1f:4e:e2:60:57:6f:cd:6d:27:75:
         b9:5a:58:d3:ad:c8:3d:d7:bd:13:27:8d:05:78:8c:83:5b:7a:
         cd:0a:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:30 2024 by rpki-client on console-ams.rpki-client.org