Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fb53efc-e647-3967-b8d0-4fa06c8a125b.roa
File:                     2fb53efc-e647-3967-b8d0-4fa06c8a125b.roa (raw, json)
Hash identifier:          Qz06SCZUEq+HZ69RkFeeNX086KcdfH6ulQaaSJZ4okg=
Subject key identifier:   68:FF:FB:15:5F:61:29:8B:FE:70:15:6E:A6:3D:D9:6B:67:02:5A:C0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551AF54551CC02AF9B79FFE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fb53efc-e647-3967-b8d0-4fa06c8a125b.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        74.11.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1a:f5:45:51:cc:02:af:9b:79:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=f3b4153c-6275-443b-9b40-dae635c7615d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:ec:13:51:94:67:68:c7:ae:cb:7b:cb:d9:
                    70:67:81:da:13:ca:e0:95:54:30:11:32:b7:9b:95:
                    ff:11:f1:20:20:ca:ab:45:6f:08:7a:cc:ee:58:9a:
                    f4:ce:75:38:3d:2f:d1:3d:6c:c2:ce:51:e0:ab:be:
                    d3:80:9c:36:e8:91:d0:e2:fa:ee:31:12:53:8f:94:
                    9d:a1:db:ca:8e:9b:4f:6e:61:11:73:50:3a:4a:5f:
                    e4:97:c7:20:37:0d:2c:3f:75:b5:c2:0e:a4:d0:cc:
                    3a:c4:5a:4b:d8:29:ca:a2:45:cf:38:1b:f8:84:61:
                    76:fc:07:80:2a:3c:39:0f:83:4a:08:0d:9c:da:48:
                    27:ab:02:98:06:8b:a0:e3:cf:3d:68:0b:c9:18:26:
                    19:ea:b1:b9:d6:44:e4:32:e6:07:3c:c0:a8:5b:1a:
                    38:34:90:c8:33:c0:8a:be:fa:81:d4:89:be:38:fd:
                    c1:ec:0b:31:3e:ec:3c:79:6b:1a:44:96:d4:76:e8:
                    ed:cf:0c:e2:53:59:2b:16:9f:9d:11:65:85:74:7a:
                    97:fc:4a:74:4c:8d:1a:c1:1d:b9:8e:a8:9c:be:c2:
                    62:66:60:9b:40:3b:c5:ea:af:3e:fc:55:ed:36:d6:
                    da:ae:a5:0c:d3:99:cf:1b:d3:19:35:b9:0b:2b:a0:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FF:FB:15:5F:61:29:8B:FE:70:15:6E:A6:3D:D9:6B:67:02:5A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fb53efc-e647-3967-b8d0-4fa06c8a125b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.11.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:9b:dc:26:94:47:ec:eb:80:94:f3:bf:5d:e8:c5:0a:e5:
         2e:33:76:b3:20:f3:fc:a5:59:98:c8:d9:39:76:84:2c:07:7d:
         c6:17:f4:f7:35:fc:74:52:7b:dc:a3:1f:87:15:9a:d7:3a:b8:
         c5:0a:ec:ba:e8:1b:33:41:e2:e0:66:41:de:f3:36:1c:78:96:
         dd:ab:30:76:8d:d1:e3:65:d3:b2:be:fa:64:18:a8:0c:c4:89:
         e2:12:40:a0:d3:1d:0a:d6:10:c9:84:25:00:27:0b:bc:0f:da:
         cd:60:50:b7:29:a7:78:85:a3:6d:11:7f:34:21:61:da:0e:00:
         43:58:63:64:74:8a:43:30:a7:c3:69:4a:24:f7:79:9e:29:54:
         b7:ef:6b:0c:2e:86:42:69:7d:33:e9:96:20:40:f1:48:06:52:
         70:01:0c:d0:f5:9d:75:96:34:c8:20:d3:93:73:80:f9:a1:e9:
         01:27:7b:9b:0d:85:ef:cd:9f:87:b7:77:e5:c0:e7:7f:ee:e7:
         c7:06:25:d0:f6:56:96:ee:b0:88:48:ae:21:c1:f7:78:c9:da:
         89:74:ca:6a:19:62:4e:27:ea:cd:f6:c5:a3:8f:36:c4:54:06:
         16:17:a4:61:47:ee:a6:09:40:35:79:85:32:6b:04:8f:bd:24:
         c0:29:0b:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1VGvVFUcwCr5t5/+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMzA0MDAwMFoXDTI4MDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjNiNDE1M2MtNjI3NS00NDNiLTliNDAtZGFlNjM1Yzc2MTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8bsE1GUZ2jHrst7y9lwZ4HaE8rglVQwETK3
m5X/EfEgIMqrRW8IeszuWJr0znU4PS/RPWzCzlHgq77TgJw26JHQ4vruMRJTj5Sd
odvKjptPbmERc1A6Sl/kl8cgNw0sP3W1wg6k0Mw6xFpL2CnKokXPOBv4hGF2/AeA
Kjw5D4NKCA2c2kgnqwKYBoug4889aAvJGCYZ6rG51kTkMuYHPMCoWxo4NJDIM8CK
vvqB1Im+OP3B7AsxPuw8eWsaRJbUdujtzwziU1krFp+dEWWFdHqX/Ep0TI0awR25
jqicvsJiZmCbQDvF6q8+/FXtNtbarqUM05nPG9MZNbkLK6BhOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGj/+xVfYSmL/nAVbqY92WtnAlrAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZiNTNlZmMtZTY0Ny0z
OTY3LWI4ZDAtNGZhMDZjOGExMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgvRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEflm9wmlEfs64CU879d6MUK5S4zdrMg8/ylWZjI2Tl2hCwHfcYX9Pc1
/HRSe9yjH4cVmtc6uMUK7LroGzNB4uBmQd7zNhx4lt2rMHaN0eNl07K++mQYqAzE
ieISQKDTHQrWEMmEJQAnC7wP2s1gULcpp3iFo20RfzQhYdoOAENYY2R0ikMwp8Np
SiT3eZ4pVLfvawwuhkJpfTPpliBA8UgGUnABDND1nXWWNMgg05NzgPmh6QEne5sN
he/Nn4e3d+XA53/u58cGJdD2VpbusIhIriHB93jJ2ol0ymoZYk4n6s32xaOPNsRU
BhYXpGFH7qYJQDV5hTJrBI+9JMApC0s=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:55 2024 by rpki-client on console-fra.rpki-client.org