Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d40142b-f718-3a37-979a-a50585435fa1.roa
File:                     5d40142b-f718-3a37-979a-a50585435fa1.roa (raw, json)
Hash identifier:          HV5GK0PhSToeEJZL13BcK4XgUpjnHrHxWgmRJTSkhrg=
Subject key identifier:   F7:37:E1:62:3B:9B:C1:D8:AD:48:2C:BF:5B:9C:F4:DC:FE:EF:E4:2B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583EC33F05C2775E531E46CA9A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d40142b-f718-3a37-979a-a50585435fa1.roa
Signing time:             Sun 31 Jul 2022 12:00:00 +0000
ROA not before:           Sun 31 Jul 2022 12:00:00 +0000
ROA not after:            Mon 24 Jul 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        50.96.36.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c3:3f:05:c2:77:5e:53:1e:46:ca:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 31 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2028 GMT
        Subject: CN=e6d73b36-ad71-4a21-bb65-682b6f13406b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:da:35:d7:45:ee:11:42:c3:44:ee:ea:1c:
                    0e:82:6d:e1:59:84:bb:1b:d0:56:f5:c9:48:71:7c:
                    18:f3:8f:f2:cd:69:db:d9:39:4a:3e:32:2a:e4:57:
                    81:96:74:7f:d1:f2:f4:2f:be:75:58:51:e5:e0:49:
                    10:ca:52:e8:9f:f2:cb:e1:6c:da:15:f2:c0:36:6e:
                    8b:41:d4:37:68:5b:02:53:3c:c3:6a:00:af:c0:5b:
                    45:9a:c4:a5:b9:75:14:ab:cd:86:64:43:33:02:9d:
                    3a:1d:68:4f:58:bf:76:56:fb:eb:56:28:fc:0a:f2:
                    1a:64:40:3e:dc:a3:08:15:da:2d:c7:79:24:1d:f4:
                    3d:74:35:f0:20:1f:56:3c:60:1c:9c:4e:5e:63:24:
                    75:a9:c3:b9:77:5b:bb:45:78:3a:b4:26:da:10:90:
                    fc:e7:b0:63:c9:7e:41:d0:96:ef:b7:f8:5c:98:fd:
                    fb:9c:ea:58:58:3b:a5:e4:2c:7c:f1:57:14:3f:fe:
                    f4:c9:79:f8:7f:b8:87:2a:3b:52:32:68:63:bf:c9:
                    c1:e7:4c:12:8c:f6:1c:61:fd:13:ad:de:a1:dd:c6:
                    7f:6f:53:ea:bb:e0:cc:7c:a8:1f:3b:08:5f:74:e3:
                    33:b8:d0:84:f2:f7:5d:d6:f9:2c:f7:2e:57:2e:fb:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:37:E1:62:3B:9B:C1:D8:AD:48:2C:BF:5B:9C:F4:DC:FE:EF:E4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d40142b-f718-3a37-979a-a50585435fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:6a:f9:12:cd:d7:1d:ab:0a:5a:ce:7c:69:56:9c:ad:f9:
         11:df:d2:12:de:56:5a:69:20:c3:ba:8c:13:66:36:a7:f4:5a:
         a4:34:88:f3:99:9c:95:35:09:c7:83:ad:08:59:f3:73:11:ec:
         ec:09:26:91:42:06:dd:e2:a5:c0:53:bd:4b:b5:ef:00:3a:d4:
         73:e0:d7:c2:38:0a:48:0c:77:77:63:65:34:ad:84:e5:54:df:
         5f:36:bf:26:50:70:59:cd:09:02:d7:9a:98:3d:bc:66:3f:5a:
         d4:4a:d8:2f:a2:f7:9f:b8:2f:c6:b4:fc:85:5b:86:84:5e:30:
         c6:b0:61:22:2b:e9:4a:c7:4c:2d:9d:1e:cc:a5:5c:d6:9f:f7:
         0b:8f:05:57:db:62:06:ae:93:5f:8b:74:07:2a:aa:b6:ba:99:
         47:f5:98:f6:5a:66:14:c8:c9:5b:60:61:1f:d9:bf:b7:24:04:
         d6:c6:1e:6e:26:c9:bc:ce:28:bb:2c:1e:10:6d:e7:bf:ae:ca:
         3d:3e:f3:2e:d5:cb:23:8e:0b:1c:5f:55:6b:cf:48:62:f6:f5:
         ef:a0:70:df:3f:d2:e5:1a:88:f3:cb:35:f3:a5:3a:b1:02:86:
         24:0a:13:66:76:a9:e9:6f:db:a9:a2:90:08:eb:b9:b4:63:77:
         b1:24:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----