Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc2cac28-37d4-3272-8bb2-c2065008bc31.roa
File:                     dc2cac28-37d4-3272-8bb2-c2065008bc31.roa (raw, json)
Hash identifier:          kmB9Via1Cxm02BKAQJJABjsQyGO69s8b3XSsy+kxXyg=
Subject key identifier:   7A:F4:2B:8C:E4:AF:A7:23:5D:08:B0:7F:08:0E:7F:B6:75:0B:BB:0F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661FF50C1558A60159D5D440
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc2cac28-37d4-3272-8bb2-c2065008bc31.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.187.144.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1f:f5:0c:15:58:a6:01:59:d5:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=79b91b8b-d029-4daf-9358-a34ec7f9fa56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:27:ab:db:de:5d:35:08:03:c6:cb:61:5b:84:
                    11:19:c4:ce:ac:7d:48:75:dd:37:28:30:f5:a1:62:
                    d3:10:06:46:96:15:4d:ea:3c:47:5c:f6:f4:da:e8:
                    6a:57:a7:07:4d:65:6a:24:35:3e:dd:1a:53:b2:cc:
                    9d:f8:ed:35:ed:6a:af:ee:d9:46:44:48:af:ab:27:
                    fd:17:fb:db:a5:a6:60:06:83:56:ba:8f:16:cf:2f:
                    d5:91:fd:64:ba:3e:5e:fd:44:5b:fe:7a:ce:3f:ab:
                    76:92:e1:0f:a2:a3:ca:63:c9:97:37:77:d5:49:6a:
                    ed:af:a2:17:d7:cc:63:02:a9:f3:5a:37:4e:92:21:
                    d4:66:64:f0:af:d5:d8:47:45:73:85:15:e3:66:7d:
                    0f:85:42:38:0d:99:d4:ae:17:4b:7a:61:85:cc:d8:
                    4e:cb:6c:51:2c:59:58:7a:61:dc:ee:c7:20:e5:b7:
                    f5:99:c2:8c:21:0e:1d:84:09:b9:82:93:43:b7:66:
                    55:02:ac:68:ab:ec:f5:ac:f0:20:37:1a:01:9e:93:
                    ee:5a:46:10:3e:0b:28:95:53:a9:7e:74:7b:11:3d:
                    e4:43:d7:15:e2:f2:1c:3a:9d:b1:9c:e8:f7:db:38:
                    96:1e:a7:44:12:67:92:80:83:a6:c3:4a:9a:6d:e1:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F4:2B:8C:E4:AF:A7:23:5D:08:B0:7F:08:0E:7F:B6:75:0B:BB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc2cac28-37d4-3272-8bb2-c2065008bc31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:12:a9:91:09:e3:31:49:34:b4:b9:3c:df:03:01:10:ff:
         a1:c5:a5:80:b6:d2:e7:43:06:a1:9a:60:fe:ae:60:48:c4:67:
         bd:78:f8:35:e5:49:43:e4:35:db:ce:e5:b3:69:23:e6:a4:c0:
         c3:fd:25:da:2c:e6:02:21:b5:25:17:c7:d7:85:c1:30:0f:e4:
         93:87:8e:82:79:8c:b6:30:a0:9a:41:f1:35:be:20:c3:0a:2c:
         55:46:98:4a:af:d1:cd:76:d6:2c:81:1c:e5:51:00:46:31:02:
         06:18:c2:00:9c:33:fb:9c:98:9c:d5:af:d4:53:d2:6c:17:94:
         71:ad:a7:f0:f3:90:b6:af:2d:7e:7a:d9:a5:e2:7f:22:c7:48:
         57:8b:de:c1:1b:8b:75:af:fb:3a:b4:9e:d7:21:f2:16:3e:b4:
         1d:9d:27:91:52:25:ed:bb:8a:e8:96:fc:72:4a:15:81:be:a1:
         a3:91:5e:af:cd:db:66:12:ef:2f:d9:92:e1:eb:f8:b3:38:1d:
         3b:11:c4:77:2e:3b:2b:3d:b3:58:52:89:92:9c:4b:cf:9a:b9:
         e6:c5:3b:3f:49:78:f0:71:b7:a3:ce:36:bd:d6:a0:04:6f:d4:
         bc:32:64:99:66:61:c8:18:ff:e2:99:85:89:1f:66:26:60:33:
         52:58:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:13 2024 by rpki-client on console-fra.rpki-client.org