Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32459829-4a66-3121-b090-ab28022fd69d.roa
File:                     32459829-4a66-3121-b090-ab28022fd69d.roa (raw, json)
Hash identifier:          p6iWMIEUsCAGpbM5w0B4YBaZXBV2ea18ul6DxpwoEMY=
Subject key identifier:   C6:D6:EE:F5:6C:13:4A:73:F4:0A:0B:4C:B4:64:F6:93:DF:9D:DF:C4
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661E8A975E486F9B65F9A800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32459829-4a66-3121-b090-ab28022fd69d.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.23.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1e:8a:97:5e:48:6f:9b:65:f9:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=6cfd7788-cfab-478d-88d0-fe59f75a16ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:11:c2:29:16:65:b2:34:7d:8e:f9:55:2a:
                    02:cf:ad:f9:b0:70:74:18:6c:5e:6e:ac:ff:6c:58:
                    03:2c:cb:61:b2:d3:88:67:ab:2f:23:ee:40:15:14:
                    55:22:be:3a:a8:ba:22:a9:5e:91:07:dd:cd:b5:6f:
                    7a:44:ae:e7:f8:77:72:f2:1a:23:4c:5d:d9:52:14:
                    d7:e4:13:63:96:88:de:49:13:7d:b7:f1:65:0c:64:
                    d8:b8:75:24:a8:2b:cf:90:a4:75:0c:8f:60:b5:e0:
                    96:94:c7:19:7e:97:ed:10:10:2d:ac:d9:33:84:e4:
                    e4:e4:ef:ed:7c:45:df:35:c7:a3:10:a0:28:2a:ef:
                    00:8b:47:e9:33:d8:32:26:d3:e4:ad:de:8d:aa:de:
                    a1:ce:f5:05:83:17:f0:4b:3c:43:35:00:6f:36:f6:
                    c2:07:1c:e5:04:a1:38:45:55:22:90:51:56:8c:6f:
                    fc:89:24:09:3f:f6:8b:12:a5:a8:2e:3a:95:02:8d:
                    4b:af:9e:57:4a:06:34:d5:41:7a:16:d4:ab:83:33:
                    e2:c7:75:ed:82:ec:ea:df:ba:be:4d:41:84:fe:62:
                    b8:e6:b5:be:44:5c:6a:c7:cc:e6:52:5f:d7:32:13:
                    92:bb:0f:ce:5e:54:fe:e6:6c:1a:36:cd:2b:f9:c2:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:EE:F5:6C:13:4A:73:F4:0A:0B:4C:B4:64:F6:93:DF:9D:DF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32459829-4a66-3121-b090-ab28022fd69d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.23.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:c2:b9:be:18:12:52:3a:c7:b5:a1:91:03:97:34:b4:f6:
         84:83:78:9a:1f:e2:88:8f:ab:d4:96:68:9f:13:0e:ce:05:fa:
         ee:04:34:07:b3:11:00:b9:44:34:f8:39:f9:fe:78:78:2c:0b:
         85:68:0d:a6:de:0e:5d:4b:54:49:ec:45:1e:4b:65:33:db:79:
         90:18:1e:60:1c:1e:bb:0c:a8:a5:45:f7:7e:c3:5b:8d:b0:1a:
         9e:f0:d5:74:35:3f:03:b8:55:ce:e0:91:5e:8c:98:9d:a0:ac:
         ed:9e:e8:ff:c2:1f:bb:2f:43:b7:0d:9b:93:d6:fa:55:9d:ac:
         3a:13:ae:7c:07:16:18:53:fd:55:44:2e:70:78:d2:02:67:a1:
         92:cc:12:db:ca:ce:d3:cf:4d:1d:76:47:52:af:0f:e2:d0:8b:
         9b:b1:2a:67:fa:7a:a2:c1:1c:8f:99:dd:c2:81:60:3a:2f:34:
         68:23:b9:0a:80:36:5c:38:ee:25:43:5c:5a:73:da:25:45:3f:
         7f:2a:1c:a0:6f:6f:bb:71:48:16:52:fb:46:0c:1c:c7:49:c3:
         84:a5:92:13:81:a0:c2:41:40:de:02:6d:f7:22:cb:7b:16:23:
         48:6f:b8:4f:2a:34:4e:07:a7:ff:f5:a2:7c:ae:a8:1e:5f:ea:
         8d:e1:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:19 2024 by rpki-client on console-ams.rpki-client.org