Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b72c119-941e-328e-b316-35833cb5fb10.roa
File:                     2b72c119-941e-328e-b316-35833cb5fb10.roa (raw, json)
Hash identifier:          g1MMHcXnrzlC/w6FrIJQWNzvQoIVNiLVdw4OvB1B3Y8=
Subject key identifier:   82:16:76:CA:90:B1:F7:03:30:EB:5E:9B:E7:34:5D:2C:BF:8C:3C:4F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D1D77EA132B5321F61A5AE920
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b72c119-941e-328e-b316-35833cb5fb10.roa
Signing time:             Thu 03 Mar 2022 05:00:00 +0000
ROA not before:           Thu 03 Mar 2022 05:00:00 +0000
ROA not after:            Thu 24 Feb 2028 05:00:00 +0000
asID:                     7029
IP address blocks:        2607:f560::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1d:77:ea:13:2b:53:21:f6:1a:5a:e9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  3 05:00:00 2022 GMT
            Not After : Feb 24 05:00:00 2028 GMT
        Subject: CN=0a2ecfd3-7b01-405b-9fba-dabc33b35678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:93:93:83:81:fe:50:04:5d:46:9d:dc:14:
                    1b:d3:b8:26:ae:65:12:e9:33:c8:d7:2c:06:2d:c2:
                    be:4d:a9:dd:54:35:e2:22:13:53:bf:8e:49:6e:aa:
                    84:06:a8:50:60:19:12:9b:4c:5e:c0:ad:77:f6:97:
                    62:ad:5c:a2:be:8a:f7:87:b0:6c:a2:c9:51:95:eb:
                    7a:da:9c:0e:ba:ad:68:64:84:58:e8:60:99:7d:3b:
                    23:47:9e:29:41:23:19:94:f3:9c:eb:ff:38:8c:01:
                    4c:10:d7:2a:3d:01:70:dc:21:5b:55:6e:a1:10:5b:
                    67:ca:e0:4e:97:ba:c9:84:1b:d1:39:73:9b:4d:cf:
                    9f:02:4f:c8:2c:15:1f:e8:11:cc:19:97:5c:b8:c5:
                    0c:b2:3e:52:0d:b2:69:37:34:03:1b:5c:7e:69:fb:
                    b3:b0:5d:7a:26:ec:10:83:8d:36:ee:a8:1e:f4:27:
                    99:de:18:3b:71:0b:f0:8f:b6:65:86:8f:78:21:3f:
                    f1:da:6b:84:0a:e1:d2:27:26:50:39:73:7f:71:b0:
                    39:53:55:50:05:9c:66:59:82:38:9e:8c:f0:3a:c3:
                    2b:73:73:69:99:c9:81:8e:fc:7a:bd:7e:88:a5:1e:
                    fa:9a:51:a7:17:6f:a8:09:a3:6e:27:5c:c3:98:5a:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:76:CA:90:B1:F7:03:30:EB:5E:9B:E7:34:5D:2C:BF:8C:3C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b72c119-941e-328e-b316-35833cb5fb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f560::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:f4:9a:ca:b3:5b:aa:c7:ee:4c:bf:50:ae:24:2b:91:c9:
         c2:e0:c0:20:3a:55:62:5a:c7:a9:36:51:21:b7:0f:2b:50:b7:
         34:02:73:b7:ee:6e:1a:1b:60:98:db:de:2b:a3:87:d2:6e:99:
         fd:ad:50:e6:4e:60:ff:69:89:9f:28:01:0b:2b:4b:a8:ab:34:
         fe:9f:48:8e:93:a5:0f:e0:d0:28:71:28:93:b0:09:ad:86:98:
         6f:e1:5e:19:d2:0c:c4:e5:8a:94:a7:45:f8:8d:d2:ae:2c:ac:
         79:86:74:36:73:ee:46:64:fa:b2:41:b3:8c:6f:76:f0:7a:ed:
         a5:36:9f:73:9d:fa:1c:da:c9:68:4c:e5:3d:e7:13:22:4f:4b:
         37:31:62:72:46:08:c9:54:7f:0f:7e:75:e1:b2:e5:f6:7a:14:
         7c:a7:40:9e:1a:44:2f:e2:26:14:a1:26:1e:2e:8c:f5:a5:f7:
         68:3c:52:8a:31:68:79:1b:ee:7d:f4:d7:ff:a4:be:78:c0:08:
         e8:b1:e5:cc:6e:3b:1e:3b:e6:51:0c:52:66:fb:c4:b9:4f:97:
         8e:28:56:ab:2d:1b:38:e2:a1:cf:97:1d:c3:eb:a2:d0:b1:89:
         8f:fb:7d:4a:99:65:e7:b6:cf:e0:99:3d:db:fd:12:36:01:66:
         41:79:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----