Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0685f179-35e3-301f-add1-0056c7d2f91b.roa
File:                     0685f179-35e3-301f-add1-0056c7d2f91b.roa (raw, json)
Hash identifier:          rmiYzCAqjVBLfHicx9j5l8RyBAZ1NhEn1Ysj0OTPfJo=
Subject key identifier:   3B:D9:73:8C:82:FB:59:4F:52:E9:9F:DB:EB:B8:9D:40:55:BD:9F:DF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FAF2114C0D5845B9CBFE980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0685f179-35e3-301f-add1-0056c7d2f91b.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        209.114.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:af:21:14:c0:d5:84:5b:9c:bf:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=c213f41a-d7b9-4b0b-bbe2-0b3ad161f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:8b:0e:3c:a9:e0:7b:b8:b2:21:c4:4a:e1:
                    fe:0c:df:30:54:fc:6e:f0:cc:57:8d:65:ca:94:2e:
                    a2:83:18:d7:0a:05:b6:61:01:6c:26:eb:30:e2:07:
                    ea:9c:9c:e0:c2:49:f4:8a:35:5f:d3:aa:54:b9:01:
                    08:5a:6d:6a:90:dc:68:38:5d:32:21:24:41:f8:2a:
                    47:c9:52:e3:5b:66:0c:6c:b6:10:a3:ae:22:46:ae:
                    16:82:04:ba:53:28:03:c5:62:96:fb:1c:0f:9c:9a:
                    3e:f9:45:d7:5b:0d:80:bf:49:25:6f:0c:08:fa:86:
                    f1:a7:29:22:e8:19:9b:f2:89:27:2c:a8:ac:b5:21:
                    65:a0:78:85:90:0b:9e:9c:78:44:52:19:52:87:0f:
                    b8:5d:8b:e5:d8:31:a3:2e:08:4b:20:c2:2f:ec:aa:
                    53:0d:35:60:09:d8:a6:42:3c:bf:93:fe:8c:85:bb:
                    79:70:66:af:9c:6d:08:24:86:b9:44:d0:b3:e0:1f:
                    9d:cd:c8:06:2f:ce:2b:dd:5c:9c:eb:9d:a5:82:79:
                    2a:08:4b:72:92:6f:2f:7b:9e:ca:0c:0a:3d:5c:b9:
                    21:9a:08:da:ba:c8:e2:3d:b3:75:9e:42:80:e5:14:
                    3a:d4:0c:36:27:ed:81:b5:2c:e3:18:bb:b0:44:ac:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D9:73:8C:82:FB:59:4F:52:E9:9F:DB:EB:B8:9D:40:55:BD:9F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0685f179-35e3-301f-add1-0056c7d2f91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0d:65:b3:8a:64:5a:ac:f6:0f:be:16:84:e6:40:5c:13:69:
         7b:e5:be:8b:8c:90:a8:6f:f1:c6:30:77:70:82:04:f2:51:df:
         cf:12:33:f3:43:27:9a:ba:c1:d2:78:3b:e6:02:17:c2:fa:9d:
         ff:f7:b0:3c:f5:f0:7c:9d:09:92:cf:6e:46:2a:a8:e1:a2:76:
         0b:4a:3b:0b:ff:f2:a0:77:04:fd:83:21:2b:32:ac:eb:02:21:
         de:20:38:16:d3:55:9a:fd:1c:45:cf:af:db:6e:66:eb:e7:f0:
         65:a0:f8:50:0b:00:b5:2e:5a:f6:f4:1f:8c:68:48:c1:fc:c8:
         52:c0:9f:29:be:bc:85:17:3d:aa:a2:12:f4:ff:2c:0f:5b:6c:
         21:75:95:ac:83:33:65:08:84:51:3f:37:e9:48:f4:2a:50:fa:
         e2:52:06:63:db:ac:99:93:74:8c:eb:ea:7f:d8:be:68:d5:7a:
         48:34:15:2a:95:fd:d1:44:f1:75:aa:82:5e:1f:fc:8d:89:53:
         53:90:47:c2:35:1e:b2:81:ae:85:c9:7a:61:39:ca:ac:89:64:
         9a:d8:17:89:98:74:84:7d:b0:ff:44:a3:21:04:9d:50:36:d1:
         90:e9:2e:20:66:15:98:b3:7a:9e:78:29:b9:21:9a:6e:eb:71:
         69:45:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:52 2024 by rpki-client on console-fra.rpki-client.org