Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16b858a0-0196-379d-93b4-2c7bec070411.roa
File:                     16b858a0-0196-379d-93b4-2c7bec070411.roa (raw, json)
Hash identifier:          oWLNOqd2evagoEdHE4U/Sa3tZtSjaLiksFPui1fuXeg=
Subject key identifier:   D5:95:1E:0F:30:6A:56:D4:08:F2:A7:D8:FC:AB:27:44:BF:5A:AE:56
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551C46B49A98109E897D3940
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16b858a0-0196-379d-93b4-2c7bec070411.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        151.213.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1c:46:b4:9a:98:10:9e:89:7d:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=6a6146b4-279d-4828-b969-17e3dd67d947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:dd:c8:9e:91:09:2d:ff:ce:5e:c6:eb:39:
                    f2:0a:87:5c:73:7d:ed:b7:08:94:ad:23:b1:8b:b8:
                    2f:b5:fd:ba:c5:45:5e:53:a0:eb:d1:c2:62:6f:c8:
                    22:ef:53:4c:9c:38:83:a7:ea:74:45:4e:e8:9d:e8:
                    a0:07:f2:28:3a:f8:a2:b5:dd:2e:9b:27:c0:c7:27:
                    24:2a:6f:ed:80:38:6e:3e:02:1e:53:b2:1e:a4:ee:
                    64:b6:c2:1d:c9:b9:60:69:63:0d:fd:8d:df:c5:5e:
                    d9:66:30:59:52:42:e3:f8:e3:bc:a0:cd:c3:ee:f7:
                    f3:02:16:59:d1:20:15:84:d8:57:ec:2b:6a:11:c5:
                    f6:d4:94:08:6c:dd:76:c4:2a:3d:d4:cb:26:aa:2b:
                    d7:dd:19:76:96:93:2e:d7:55:aa:0f:43:c2:47:ee:
                    55:e8:06:f9:23:28:e2:9f:48:99:0c:0e:f0:bd:07:
                    67:a6:7d:c9:9b:f9:ae:49:61:36:b4:be:ab:6b:94:
                    1b:d5:1d:02:5a:d7:72:0d:e1:52:f7:d2:44:cd:6f:
                    b4:3e:b2:de:ff:b1:d9:68:90:17:72:b0:5c:d8:26:
                    39:d2:21:46:a7:20:34:53:a0:17:9c:8c:b0:3b:e9:
                    b0:c4:dc:3f:ab:1b:4b:ff:31:88:8e:8b:3f:5e:ef:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:1E:0F:30:6A:56:D4:08:F2:A7:D8:FC:AB:27:44:BF:5A:AE:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16b858a0-0196-379d-93b4-2c7bec070411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:75:0c:a4:89:0e:b3:25:af:4e:22:e4:dd:6a:f2:1b:0c:
         e3:04:85:38:a2:66:38:7e:bf:e6:cd:6e:38:f2:8f:f5:36:49:
         a8:08:83:51:14:4c:a6:9e:08:e7:ee:96:ea:23:58:cd:4f:0d:
         e1:5f:a8:9e:bf:16:83:ff:db:b8:83:65:b1:86:2f:ea:5c:fa:
         fd:fb:2f:39:3a:3f:25:0b:f0:e9:14:17:5a:6a:be:28:30:4d:
         8c:21:c0:5b:09:5c:b3:9e:9a:b0:34:66:30:25:46:1e:35:5d:
         cb:8b:1c:21:b1:d2:8a:d6:91:da:f5:68:15:7b:83:ae:3f:a7:
         25:a3:73:4c:e6:00:38:8c:e2:7d:87:44:61:39:a4:c5:09:da:
         a9:53:9b:d3:26:2c:66:c6:f3:73:b9:f8:bf:12:2c:db:80:c8:
         c5:81:82:bc:e4:e9:ee:28:43:1e:9e:2d:dd:ad:14:e8:c2:88:
         be:d9:fa:0a:c7:81:2a:78:ab:7d:0a:3d:3d:09:8f:83:a4:78:
         fd:57:ab:bf:16:d1:3e:eb:4c:ec:ef:b1:35:65:dc:63:83:1e:
         26:81:d5:62:80:8c:51:35:92:ca:3d:7c:fa:d1:ce:60:c7:c0:
         ff:a2:71:25:e6:ec:fa:ba:28:9c:07:ff:93:a1:96:97:6f:63:
         26:ec:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:53 2024 by rpki-client on console-fra.rpki-client.org