Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcfe10ce-f9ae-3dac-b160-ffec02491313.roa
File:                     fcfe10ce-f9ae-3dac-b160-ffec02491313.roa (raw, json)
Hash identifier:          cxIpusX5mZJMNInfeQBZhi1hF8ikgcTQolTC0ajsMz8=
Subject key identifier:   B8:E8:94:73:9C:B9:A0:CD:2D:A1:66:78:E9:37:16:66:A2:9F:2F:7A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E2CB7449F6C8BC893DAA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcfe10ce-f9ae-3dac-b160-ffec02491313.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        208.78.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e2:cb:74:49:f6:c8:bc:89:3d:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=76a5fbf3-8ad9-45ca-89cb-a21554a94ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:e2:31:43:97:46:87:70:a9:ba:fc:a7:84:
                    76:54:c8:64:5a:8b:e0:5d:84:d5:4d:11:0f:95:92:
                    bf:fa:54:2d:82:82:cf:31:23:b1:17:73:f6:29:67:
                    28:36:26:a5:08:1c:2d:94:50:a0:7b:82:89:3c:4f:
                    34:47:15:bb:74:4b:fb:b9:73:c4:8d:32:3c:5e:1f:
                    f5:b8:1c:f2:49:d0:28:af:a4:44:b3:de:ac:d5:fe:
                    ae:00:ba:5a:84:9d:e8:57:89:c3:5c:3e:43:80:d4:
                    a0:50:62:e6:49:96:68:e5:a3:42:43:a3:08:e0:e5:
                    0e:05:18:7e:9f:7e:7e:e1:74:a5:b4:a1:10:84:98:
                    63:9f:b0:bf:07:c4:cf:82:1c:01:6e:04:db:ab:ea:
                    b8:c3:05:e0:4b:94:fe:26:22:d3:69:80:21:14:1a:
                    1b:91:74:c2:1d:16:5f:18:f1:d7:2d:bb:bd:71:e2:
                    fd:99:68:b6:6d:e6:79:a9:74:11:4b:49:aa:98:3f:
                    d3:be:f2:2c:e9:1c:2b:20:78:2c:d0:9e:de:e4:41:
                    48:f4:c6:5b:12:7a:b0:41:88:bc:c3:a4:d5:3b:31:
                    4a:69:81:02:56:2f:ce:36:b9:78:c3:e7:fc:13:b3:
                    ae:01:a7:b5:92:5b:53:04:22:26:3b:51:21:a7:9c:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:94:73:9C:B9:A0:CD:2D:A1:66:78:E9:37:16:66:A2:9F:2F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcfe10ce-f9ae-3dac-b160-ffec02491313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:33:63:2d:57:a4:52:af:a9:06:79:5a:99:82:12:14:b5:f6:
         46:b4:e6:e1:32:56:11:b3:32:14:6c:c3:2f:fd:fe:b1:2e:06:
         20:01:56:67:2d:9e:ae:7c:c8:3e:d5:2e:38:89:93:83:a5:c5:
         64:32:62:e2:f4:df:cb:3e:79:78:c1:37:30:be:41:9f:9d:d9:
         34:ae:e9:49:e0:7f:29:03:9f:81:95:50:93:31:ba:b0:6a:66:
         92:e0:6b:ab:ad:79:00:fc:9b:1f:eb:f9:8d:6e:9c:a0:eb:60:
         47:85:d3:38:42:bf:4d:af:c5:fb:b6:1e:69:f5:4c:80:7c:86:
         e1:e8:ca:6c:17:5c:78:fa:6a:d0:55:95:27:5b:74:a4:97:84:
         75:34:8f:76:84:d9:37:95:59:0e:2a:53:8c:60:63:a2:df:3c:
         d9:ae:d5:6b:54:d2:a6:c2:c7:42:2b:4e:f1:49:9f:47:04:7a:
         4d:f5:42:90:b7:2c:d4:f8:f2:80:c9:06:7d:23:50:99:31:a6:
         cd:90:23:19:fa:d7:a3:56:d8:88:0e:77:09:93:a7:72:65:ae:
         31:6f:9a:b9:9b:85:f0:d2:be:16:f5:9a:8a:b7:34:87:40:cf:
         94:44:49:55:b5:99:31:c2:8c:af:d1:2b:0e:b5:f8:fe:f1:6e:
         57:4b:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:15 2024 by rpki-client on console-fra.rpki-client.org