Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d937d59-6b32-3920-a078-b81d9795310d.roa
File:                     1d937d59-6b32-3920-a078-b81d9795310d.roa (raw, json)
Hash identifier:          Ib4g0Gqw3T5vkHngVzcg1USUn/LwSOAgmY9wB9xL0OY=
Subject key identifier:   9F:F0:54:C0:DB:71:FB:8C:8C:EE:61:F8:D4:1B:D5:CE:21:F3:76:B5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA14A34BE456A463DFF73F380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d937d59-6b32-3920-a078-b81d9795310d.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:600::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:4a:34:be:45:6a:46:3d:ff:73:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=0d058951-c18a-4ec9-acbc-8237113bf6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:24:c2:03:6e:a1:46:92:96:34:67:14:ae:
                    39:da:39:e0:89:33:02:5d:ba:2d:7c:c5:66:59:30:
                    df:7b:6e:5d:17:40:e7:06:33:79:c0:d7:0f:1c:93:
                    35:02:c4:3b:4a:75:03:af:f5:99:e0:f1:cd:7b:48:
                    9e:4d:c0:57:3e:71:d2:13:29:36:2d:d2:d8:b2:48:
                    e2:68:0c:67:36:2f:10:44:bf:d8:13:4b:14:d7:0e:
                    df:7a:e9:df:bc:34:73:54:9d:78:96:e4:4a:6c:f2:
                    5b:36:09:19:f0:58:4b:88:03:16:98:7f:9f:e6:8c:
                    15:61:3c:3c:1e:5f:5e:18:7e:44:82:63:3c:25:01:
                    1b:bd:0d:e0:bb:98:e6:be:86:57:97:5a:2e:08:d1:
                    ac:e4:d9:f5:79:37:5d:72:1e:38:ad:ab:39:dc:5f:
                    22:b1:ff:cc:78:a4:3e:c6:66:70:91:7e:a0:f3:fa:
                    bd:95:ab:f2:f5:74:90:25:aa:25:33:54:8f:da:15:
                    b8:4f:55:30:3a:69:ca:1b:bd:12:23:b8:8a:fe:8e:
                    e8:35:25:be:8f:2f:4a:1d:f2:5b:b9:3c:62:09:60:
                    56:97:c7:53:23:a2:2a:b7:49:43:31:f8:26:cd:0a:
                    c7:24:ac:4b:29:22:8a:92:db:77:9c:68:7c:67:4d:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:54:C0:DB:71:FB:8C:8C:EE:61:F8:D4:1B:D5:CE:21:F3:76:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1d937d59-6b32-3920-a078-b81d9795310d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:77:52:d6:b0:ac:98:8a:22:0c:15:4f:54:70:fb:41:23:
         51:91:ff:af:74:97:92:74:76:4c:bb:9c:dc:7d:aa:24:a1:ab:
         9d:70:e2:48:01:36:9f:ab:be:1a:93:49:85:1a:04:9c:cc:30:
         18:b0:2d:5e:b9:11:05:26:d6:3e:bf:f5:0f:94:d5:92:c7:e9:
         f0:69:5e:43:87:76:aa:62:a5:28:c1:2d:6e:c0:57:2e:4c:52:
         6b:83:08:5d:bf:bf:45:53:db:5d:4e:fd:bb:01:87:20:74:20:
         93:7e:e4:48:dc:5a:1e:b5:59:0d:32:a8:24:cf:a5:ba:c4:55:
         5d:67:9e:20:42:f5:ac:a1:78:35:0b:89:8d:cd:90:dd:22:ea:
         17:c6:48:67:68:e3:69:84:bc:56:5b:f7:ae:8a:d7:d2:87:97:
         d5:17:6a:d1:15:1e:f7:00:7b:4f:e3:30:27:b1:77:49:57:57:
         55:10:b4:71:62:a5:9c:56:8b:58:66:c5:8e:dc:06:aa:e6:ad:
         d2:db:af:55:9a:9d:44:11:be:09:23:0f:f6:ee:7f:33:17:da:
         09:b0:06:e5:17:53:41:de:3a:98:10:fe:f0:da:54:3d:8d:20:
         6b:3f:5a:08:7b:47:5e:29:cb:40:93:7b:c7:db:03:27:ac:97:
         5f:fe:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:54 2024 by rpki-client on console-fra.rpki-client.org