Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/227c7153-3ca9-31d0-955b-aef6fb1e2bb3.roa
File:                     227c7153-3ca9-31d0-955b-aef6fb1e2bb3.roa (raw, json)
Hash identifier:          Gu6Evz9nLbMwAqS+M1zaWph5QeLvPRU2eY0gYpNPIZQ=
Subject key identifier:   D2:38:ED:E0:43:7F:A8:32:B5:15:54:39:8F:3A:91:4D:3A:DD:4D:0E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA14A2845D9C155FBED177980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/227c7153-3ca9-31d0-955b-aef6fb1e2bb3.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:4a:28:45:d9:c1:55:fb:ed:17:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=c3da5052-f01e-4999-a21d-877f59f47808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:21:81:13:d2:ab:a6:f3:ee:02:53:af:1f:
                    66:f1:8d:99:2c:af:b4:3c:1c:d1:65:f7:9c:3b:1c:
                    8d:a4:5a:b7:4a:df:bc:df:99:a5:c7:bf:52:84:04:
                    87:8d:c3:2b:11:5d:ab:d9:21:cc:7a:33:ea:ec:8b:
                    d1:8e:8d:15:66:be:95:84:73:98:8d:7e:73:d4:5f:
                    5e:20:99:70:eb:7d:7e:8e:53:36:b9:0d:dd:85:96:
                    9d:e2:d9:bb:e8:a1:ef:5a:a6:c5:f1:db:e2:40:f0:
                    33:e5:98:22:2b:28:e7:5e:83:7f:3e:ae:9f:dc:95:
                    14:67:e8:c3:05:4a:79:ba:95:c0:fb:94:65:cd:ed:
                    0a:a9:3a:62:9f:53:12:e4:3e:03:35:cf:b8:46:b4:
                    3d:4e:83:e4:9a:ce:fe:3e:67:2c:a3:9a:43:ce:b7:
                    05:57:4e:94:19:7a:62:8e:35:94:72:e6:d1:92:a8:
                    0e:9c:cf:70:e7:da:e0:18:ae:6c:7c:3d:1a:d4:03:
                    87:65:2a:4f:e9:44:96:f2:a1:81:19:88:08:88:35:
                    5b:44:cb:9f:62:5f:71:97:17:51:6f:af:4f:3a:da:
                    3f:50:5c:03:1c:de:8c:14:d3:ff:12:9c:28:ca:84:
                    c9:67:8f:8b:30:51:bd:80:2c:72:64:a1:98:08:ed:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:ED:E0:43:7F:A8:32:B5:15:54:39:8F:3A:91:4D:3A:DD:4D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/227c7153-3ca9-31d0-955b-aef6fb1e2bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:30:ea:f2:fe:75:41:a7:ac:6c:74:ff:ee:be:51:d1:f0:9b:
         93:92:67:ec:c3:f7:02:4a:3c:34:5b:91:f1:03:6e:15:8d:58:
         05:5d:9b:4a:4e:b2:38:ce:32:60:7a:a9:1a:64:81:13:69:ed:
         12:b8:e3:b4:fd:ea:63:8f:c8:ad:bc:07:a7:48:c5:00:63:30:
         2d:3f:b5:04:58:f9:a8:29:14:d5:ec:2f:5a:2f:f7:d1:c5:d0:
         ce:f8:62:36:ea:cf:ce:1f:04:f8:26:f6:25:35:b5:8f:36:4a:
         11:74:b9:45:bf:67:00:24:bb:04:f7:36:1b:f2:44:c7:97:6d:
         20:1d:47:8c:fd:6c:9f:6a:6a:df:83:a3:e4:84:70:61:c1:e2:
         8c:6d:90:76:26:1f:e2:30:e4:3e:3f:43:9e:36:a4:61:db:76:
         d3:2b:9a:56:01:8d:e3:ff:c3:1a:3f:2e:85:dc:f8:6f:e4:ab:
         17:20:cb:c0:5d:b4:0e:0f:63:88:ee:df:e5:de:91:c9:98:be:
         f4:f7:10:37:f3:b5:cd:df:fa:45:a5:5a:af:69:fb:7e:08:74:
         bd:c2:c4:2a:58:99:99:f1:dc:45:fe:e9:3f:81:2d:42:df:a8:
         84:63:1d:b0:b0:1e:17:bc:8a:02:bb:bc:80:8d:d3:85:b7:4a:
         e5:e7:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----