Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0da1fa81-8418-3b3e-ad06-d4ab01100109.roa
File:                     0da1fa81-8418-3b3e-ad06-d4ab01100109.roa (raw, json)
Hash identifier:          9Jhqd2kelEMmL6pUgEB3wff4UD89NTg1UbOg0fkt6w8=
Subject key identifier:   08:04:DA:F7:F4:F9:0D:BC:57:E6:68:67:81:B0:C4:D2:77:C4:D9:63
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66207AE05925944A4B23D000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0da1fa81-8418-3b3e-ad06-d4ab01100109.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.191.136.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:20:7a:e0:59:25:94:4a:4b:23:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=c8679372-c315-41c7-bb4d-551ac8bfb4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:70:12:a7:2e:6d:b7:88:57:18:eb:34:34:
                    ce:41:6c:d8:b4:e7:df:77:38:03:e9:8e:e4:30:f6:
                    dd:40:18:2a:65:60:3d:a5:5c:e1:38:af:7a:18:a0:
                    1c:b7:c1:0f:2a:6e:10:70:0b:53:39:34:7b:75:25:
                    9f:f7:7d:0a:2b:bc:8c:a3:ae:f1:3e:50:5b:b5:f3:
                    67:51:11:b2:f4:6a:5c:e8:ef:68:70:5f:f4:15:25:
                    21:c0:4a:9c:aa:09:5a:59:08:c5:c0:ca:ea:23:a7:
                    07:a7:c2:25:94:b7:29:51:b1:ad:6f:0e:33:7c:60:
                    42:63:b4:58:b1:1e:7c:3d:59:cb:e0:b7:98:68:6f:
                    80:3a:e3:bc:df:d9:6d:5b:96:cb:42:ba:64:48:17:
                    d6:34:9b:77:df:37:c0:d2:ee:a0:15:97:26:0e:4e:
                    61:c1:a3:e7:4b:38:56:fd:99:88:53:6f:19:26:68:
                    84:ab:9d:65:42:bb:3d:2b:cb:ef:f2:1c:1c:0f:e0:
                    c9:34:14:cf:41:49:c8:77:f3:2d:f5:84:41:d6:b1:
                    93:cc:7e:19:90:b1:73:97:c7:d0:d3:cd:59:c1:f8:
                    c9:5f:4c:bb:2a:99:87:90:0e:82:e2:0f:59:84:40:
                    bf:26:ac:5d:5a:b5:8c:60:01:bd:12:0a:ed:a4:ae:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:04:DA:F7:F4:F9:0D:BC:57:E6:68:67:81:B0:C4:D2:77:C4:D9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0da1fa81-8418-3b3e-ad06-d4ab01100109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.191.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:93:79:bc:23:34:20:7b:41:da:0d:dc:6e:61:4a:e2:72:
         3f:6b:91:67:1f:b3:14:7a:f7:ad:47:90:e4:e6:55:18:cd:72:
         08:ed:b7:3c:16:03:32:62:9b:b2:19:f8:de:60:40:3e:e1:fa:
         38:67:d3:1e:82:1b:4a:d6:4f:20:3c:63:e2:3c:20:92:38:12:
         99:fd:0c:28:3b:9b:16:7c:ab:ec:fd:1f:fe:54:2c:a7:2b:0b:
         f1:ce:9b:6e:5f:43:51:e1:ed:ce:17:b0:29:2b:4b:6c:74:5b:
         64:56:8d:dc:36:5a:d8:b4:f0:60:4d:01:6f:ee:e2:bb:ed:e9:
         68:c3:3b:ac:35:fb:5c:4b:f3:b4:a7:e1:ef:46:95:a5:98:f2:
         b2:8c:79:75:9b:00:a0:d3:e7:aa:e7:e1:b1:b8:01:5c:07:b0:
         2f:26:97:db:84:7f:ea:57:ad:ff:ad:54:52:6a:2c:98:36:87:
         f4:b0:6b:80:93:3c:d2:d8:1c:17:7a:38:66:54:77:83:48:e2:
         bd:d9:a0:3d:0c:f3:54:9d:77:7f:af:7c:40:2c:70:c9:38:b3:
         88:7b:39:70:7b:16:62:10:8b:5c:f4:62:45:f4:4e:9b:db:b0:
         78:ac:0e:05:dd:5b:d8:0c:be:be:16:a7:ed:d6:1f:15:88:52:
         ab:c2:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----