Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35ede592-4b52-30fa-be94-d3b851c0d0e6.roa
File:                     35ede592-4b52-30fa-be94-d3b851c0d0e6.roa (raw, json)
Hash identifier:          dL5eIt8s1Q+MKZHcqZQCChHDt1odjt5DxwIuw1MfdMI=
Subject key identifier:   47:75:27:29:04:17:09:55:27:B2:52:DC:05:6B:89:B1:E5:9A:4A:23
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661F5C89FDFA92A52E359400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35ede592-4b52-30fa-be94-d3b851c0d0e6.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.184.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1f:5c:89:fd:fa:92:a5:2e:35:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=c5d957ce-d592-40e9-909a-0e3a823ee040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:e5:3c:25:48:e8:d9:93:fc:d5:23:0b:a1:
                    0e:a2:2f:6c:ad:9b:19:1e:29:c1:8d:64:a5:da:52:
                    a6:52:49:7a:43:d4:fa:94:2f:65:e1:15:28:86:44:
                    46:7a:06:ef:78:39:32:07:08:3d:13:c4:86:32:0d:
                    f8:cc:4b:97:5f:dc:45:dc:c1:6c:cc:3f:da:66:40:
                    a5:81:22:bc:5c:24:a6:82:03:71:41:be:5d:8a:1f:
                    c1:f5:6b:41:13:4a:60:99:16:fe:44:7e:63:3e:e1:
                    75:3c:8e:cc:ce:eb:96:0d:37:bd:e1:93:4f:04:f4:
                    23:3d:15:5a:58:b7:89:d0:a8:80:64:b6:9b:dc:8c:
                    74:01:4d:73:b8:a9:bf:95:fa:3a:c2:3a:e9:b3:a1:
                    d9:39:10:d1:3f:a6:f2:7b:b1:bb:da:19:aa:aa:4e:
                    ca:ce:d5:72:25:4b:e9:2e:8e:fb:d7:dd:f2:6c:63:
                    c2:4c:f2:0b:1e:d8:2d:cd:d8:2f:e1:d5:75:3e:d0:
                    ff:8b:b6:48:42:28:27:c6:bc:1f:3c:42:23:d2:29:
                    de:b0:8a:d8:84:47:cb:a2:9c:0b:b4:e5:0f:88:b4:
                    72:5e:59:ac:ef:5a:b4:17:8a:b2:7e:39:68:6c:dd:
                    c8:fa:dd:8d:c0:17:7a:8c:62:46:e1:e5:ae:99:e8:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:75:27:29:04:17:09:55:27:B2:52:DC:05:6B:89:B1:E5:9A:4A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35ede592-4b52-30fa-be94-d3b851c0d0e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.184.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:57:0f:92:d3:c6:76:a9:79:b7:53:d2:6f:89:9b:21:0e:42:
         46:23:74:fd:20:62:9a:aa:7b:1f:22:80:05:66:6e:00:03:38:
         65:59:8e:03:cf:51:60:f3:59:14:4e:5b:39:8c:d8:ed:31:77:
         09:a0:d3:05:07:b1:94:7b:cf:89:49:bb:d8:cb:5e:a6:5c:f3:
         86:9e:98:fa:36:8f:86:fb:c7:0d:62:a8:fa:4b:10:b9:7b:97:
         f9:60:58:40:53:27:77:84:d9:ab:49:3d:4d:85:fe:49:3b:93:
         88:e2:a3:71:1b:e2:72:ec:24:97:f1:d9:16:06:5e:2d:69:82:
         c8:27:2b:53:6e:29:4c:ce:94:a9:dd:63:14:32:20:13:94:3f:
         a4:47:df:19:cf:b1:a2:65:70:fe:fe:86:d4:4c:af:4c:fc:6b:
         79:55:dd:fe:11:a8:c3:69:bf:79:b3:54:2f:5c:c5:c3:b1:c4:
         d4:f1:ff:b7:54:92:46:39:a7:d8:20:ee:04:89:e5:d5:64:a4:
         f5:58:a3:b0:a8:bc:7d:2b:6c:ba:40:c7:62:85:a0:12:35:3d:
         5e:b2:c3:c1:00:a8:b3:af:ed:41:b1:98:66:87:ad:e8:e8:ec:
         99:fa:c9:87:ff:92:d2:d8:f4:4b:ab:40:70:0e:17:a7:02:a6:
         54:43:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:56 2024 by rpki-client on console-fra.rpki-client.org