Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c509affb-64cd-3b07-a86a-03d28d8b1174.roa
File:                     c509affb-64cd-3b07-a86a-03d28d8b1174.roa (raw, json)
Hash identifier:          DzOaGI5OC9uEcDD5lyeFCOBCFslCHT4LX70NQLmR1tc=
Subject key identifier:   96:E1:0F:C9:A6:3D:28:77:D7:00:D5:0B:B8:6E:07:B2:2F:B8:3A:03
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA99448679F85EBD0C36400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c509affb-64cd-3b07-a86a-03d28d8b1174.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.188.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:94:48:67:9f:85:eb:d0:c3:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=b9bc8c94-81ae-42c7-881b-3e6f8b5e2839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:a5:4e:c5:53:88:8f:44:ea:ef:83:09:6f:
                    45:27:9b:38:bc:89:15:36:55:82:1f:5c:08:47:8b:
                    1d:c9:44:f7:e1:5c:76:9d:dd:13:d3:a7:16:85:1f:
                    3f:71:7b:57:0a:70:4f:fd:e6:7a:b3:bf:b0:28:41:
                    ce:69:d7:c9:4b:c3:08:99:7c:45:3b:2d:ea:db:92:
                    16:58:ba:47:43:2e:8a:a1:90:6a:13:54:1d:aa:a9:
                    dc:01:15:34:fa:81:3e:dc:fb:7e:64:ac:c4:3b:89:
                    14:b3:a1:44:bb:46:85:cc:25:40:d4:c4:db:1f:12:
                    a4:ce:00:03:99:d2:d3:6e:79:f4:30:43:34:45:4f:
                    9b:ce:ba:3f:72:ab:8d:f6:0c:f8:1f:b7:1b:d6:35:
                    7f:9a:18:cf:51:98:f9:d7:0e:48:2c:83:6a:95:e3:
                    44:8a:bd:11:af:92:c0:c6:5f:68:70:c4:b7:70:34:
                    0b:65:05:d6:1a:1a:ca:dc:3f:1d:17:6b:fb:8c:79:
                    b7:db:94:ef:6c:ef:f7:a3:37:9c:a9:1f:bf:94:37:
                    94:49:2e:06:60:cd:b7:46:b2:1e:2a:e0:69:3e:3f:
                    36:5d:de:95:f8:fd:1d:66:f8:54:3b:87:01:af:0a:
                    3b:d8:9f:78:47:4c:c3:89:36:3d:00:84:d8:1f:86:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E1:0F:C9:A6:3D:28:77:D7:00:D5:0B:B8:6E:07:B2:2F:B8:3A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c509affb-64cd-3b07-a86a-03d28d8b1174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.188.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bd:1f:ea:83:d3:3e:49:bf:c3:5e:31:7a:0d:4f:9a:02:f2:
         5c:1f:00:70:09:ff:1f:d7:b7:03:ff:67:1d:22:8d:33:bb:5d:
         82:50:35:b6:a4:39:e2:eb:43:fc:57:73:7d:f5:44:fb:cc:b2:
         25:92:d9:9b:47:bb:87:ee:eb:f5:89:a0:7f:ac:be:92:ea:0f:
         f7:b3:ff:aa:bd:43:bf:3f:ce:6a:89:9c:04:e7:43:4c:e2:80:
         2a:f4:19:8e:47:89:ba:7e:36:93:dc:a0:51:75:85:1e:40:88:
         ab:91:c0:c2:48:25:fd:37:70:77:95:7f:3b:93:e6:f1:20:f5:
         ed:0d:1c:19:17:c9:36:40:74:d7:40:3f:d6:40:82:3c:0d:19:
         07:67:5b:a4:8c:6f:ec:09:cf:0a:d1:87:e8:bd:bb:86:4e:71:
         8d:23:13:60:bb:70:c2:34:b6:0a:29:40:77:c2:e6:8b:65:a2:
         a4:4f:51:c8:81:66:91:75:6e:9f:53:16:57:99:e6:71:cf:57:
         b2:c3:e2:57:d7:38:77:a1:3c:d7:98:f4:12:ab:0b:b0:a5:9c:
         06:b3:74:d9:db:ba:08:81:75:30:aa:17:45:15:ea:67:ba:65:
         ea:9a:eb:e8:a4:f2:65:b6:62:2d:22:b1:fd:0f:20:5a:d7:b1:
         89:d0:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:11 2024 by rpki-client on console-fra.rpki-client.org