Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1145a198-4d2f-3c27-b6f2-62418a4f113d.roa
File:                     1145a198-4d2f-3c27-b6f2-62418a4f113d.roa (raw, json)
Hash identifier:          Fbxbf+NnzDQYOs/mGT0Yc432WWrfheFq3j45YMgOmJU=
Subject key identifier:   50:78:86:80:5A:B9:E2:2D:A1:CB:B1:67:C2:FF:1A:1E:BB:31:FC:1A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583EC34A43F338EA0E2E7BB51280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1145a198-4d2f-3c27-b6f2-62418a4f113d.roa
Signing time:             Sun 31 Jul 2022 12:00:00 +0000
ROA not before:           Sun 31 Jul 2022 12:00:00 +0000
ROA not after:            Mon 24 Jul 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        72.25.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c3:4a:43:f3:38:ea:0e:2e:7b:b5:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2028 GMT
        Subject: CN=abc1e6d9-396f-406f-a735-46ab72835378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:0d:09:72:28:1e:70:92:4d:32:cf:00:c0:
                    7d:ea:96:eb:f7:d1:b5:da:f0:8a:7c:c7:86:7b:d2:
                    2c:66:f6:11:52:85:e1:68:5e:80:f1:73:fb:e7:08:
                    2b:e1:47:84:a6:c6:b7:e8:e7:58:99:a2:82:80:65:
                    20:6f:18:ba:2c:0d:1f:ac:37:46:14:04:76:df:9a:
                    a5:95:f6:7c:8b:ab:ca:ac:f3:09:39:5c:5e:ba:fd:
                    ca:f4:83:61:ba:70:2a:3a:40:6e:55:2c:41:02:89:
                    34:61:96:1b:9a:0a:ca:c3:36:00:d6:2d:61:08:1a:
                    e2:2c:cd:fe:f2:41:44:f2:fc:eb:75:99:5e:8d:35:
                    e8:ed:50:65:f1:75:40:07:67:f5:b5:36:63:04:8a:
                    b5:ad:7f:5d:fc:94:2f:97:8e:a8:ab:2b:aa:fb:a0:
                    6e:b6:e6:e8:3d:71:30:fb:49:7f:fa:ec:50:6c:f3:
                    ba:d5:70:09:16:40:e5:25:9a:24:39:e0:f4:8c:83:
                    1b:7b:fc:0a:c1:ab:25:b4:d8:4a:36:01:ab:6b:53:
                    a9:e4:bc:77:48:aa:2f:28:41:cb:ff:85:6e:e7:9a:
                    6c:0d:39:c8:53:71:56:12:96:0c:6b:cc:64:ec:d5:
                    e5:d7:b0:95:82:f3:23:ef:63:a4:30:57:61:07:69:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:86:80:5A:B9:E2:2D:A1:CB:B1:67:C2:FF:1A:1E:BB:31:FC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1145a198-4d2f-3c27-b6f2-62418a4f113d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:7f:98:94:58:b7:7e:00:2a:16:aa:d2:ec:c6:6b:73:a0:
         71:81:09:4e:94:f8:3f:96:4f:c4:51:fd:d9:41:b0:a7:bb:8b:
         ee:8f:82:c9:54:13:30:0a:bf:66:f9:ee:36:3b:92:93:42:37:
         9c:c0:81:87:89:cb:93:ca:0d:36:b3:bc:6b:00:6e:12:10:f5:
         57:da:2e:69:d2:67:70:94:4e:8a:a2:bb:b4:b4:dd:97:46:25:
         f6:75:1d:a6:c2:99:cb:54:df:54:46:66:32:bc:ed:78:3d:30:
         ed:63:98:98:ea:cd:c4:4a:a0:c4:1c:6c:e5:2e:5b:68:12:a3:
         5d:56:16:be:a3:67:89:e7:5a:0a:6b:c1:f3:b2:8c:40:43:68:
         83:3e:e2:01:43:ec:ef:a3:1b:65:82:ac:e7:30:18:90:a6:e3:
         71:24:96:16:7b:e0:08:7c:ab:ec:c8:bb:d6:42:1f:5f:6e:de:
         dc:b0:ae:32:7f:25:e4:14:2f:c1:cd:8f:75:3c:50:7f:89:da:
         30:18:bd:73:cd:c5:b0:dc:46:e5:cd:70:da:97:d6:4c:ea:2b:
         8b:15:68:30:af:0b:ef:a4:df:d2:aa:7e:01:e5:7b:68:e9:b0:
         d2:7b:66:62:85:95:c2:4b:1e:7c:c4:59:6a:a7:45:44:3c:70:
         7f:9f:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----