Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa
File:                     65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa (raw, json)
Hash identifier:          YqclccOLNqieiGbc942joy1c1ug4qCMo7Ai8pgWkE0A=
Subject key identifier:   87:92:E4:4E:6B:A3:23:04:B0:5B:0C:A3:D1:D0:9A:70:C1:67:36:D3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66212677521F7B24C1978340
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        174.131.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:21:26:77:52:1f:7b:24:c1:97:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=3676235d-fa3e-40d5-a02d-c7633dab8c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:1f:1f:d3:48:2e:1e:fe:f6:6e:b0:c4:bd:
                    5d:ab:57:70:51:79:55:2b:04:a4:c8:1c:25:c6:59:
                    99:c1:fa:2a:d5:86:05:05:e3:15:ae:97:b2:f3:31:
                    86:56:b3:13:f1:c1:fa:fb:8a:27:83:31:18:95:d3:
                    6f:e2:f5:b8:a6:2c:25:1d:0d:68:7a:6a:01:f1:3c:
                    b3:4d:e8:3d:2b:53:8e:a6:2f:45:c2:3d:a8:85:a6:
                    45:46:97:1d:09:ed:79:58:f6:0d:22:45:76:5c:30:
                    34:37:c1:57:54:33:81:3f:b7:4b:1c:ca:82:c4:2b:
                    10:7f:83:c9:69:65:bf:b1:cd:c8:33:03:d8:40:22:
                    da:f6:f7:4f:90:96:09:d5:08:bf:63:ff:9f:4f:6a:
                    54:27:2f:0b:b0:f6:82:a0:f4:3c:e4:8c:b0:39:92:
                    0a:e2:de:bf:ef:ab:17:69:29:ac:7f:ca:f8:da:58:
                    14:07:5f:b9:32:74:63:33:4d:f9:87:f5:b2:60:26:
                    25:6b:3a:58:d6:ab:0c:33:60:8f:52:18:d5:aa:c3:
                    91:fc:56:a4:76:50:16:41:f9:08:00:d5:fe:15:a9:
                    6d:4e:b7:cb:5a:df:5b:1f:f0:b4:d7:cb:f6:e0:24:
                    c5:6c:8b:ad:3c:20:86:55:c1:dc:b4:0e:fc:5c:d6:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:E4:4E:6B:A3:23:04:B0:5B:0C:A3:D1:D0:9A:70:C1:67:36:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.131.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:da:0e:5b:53:bd:29:4b:10:ef:60:14:c7:c4:ba:e5:9a:8b:
         57:49:f9:a3:73:b3:31:11:41:ed:3c:56:ab:75:78:96:db:8d:
         33:bf:0b:4f:1c:d6:3b:dd:51:00:9a:a7:97:ab:78:2d:ca:e7:
         2c:40:37:8f:63:17:05:06:31:09:dc:48:f5:99:1c:04:43:bf:
         2e:47:7a:30:dc:4a:4d:78:c3:fd:ec:65:4c:b4:03:3b:e8:ea:
         7b:db:4e:99:7a:95:03:a8:34:6d:32:fd:d4:65:fa:94:77:3d:
         29:ad:34:b8:1a:00:85:61:aa:88:64:83:95:e2:34:07:c1:0b:
         a7:2f:bf:12:2e:3a:05:a2:d2:48:ef:7a:b5:18:ab:9e:df:69:
         10:a4:e2:e4:b3:85:95:d0:a9:f3:04:ab:f3:c5:5b:e3:d2:94:
         72:98:88:54:24:c4:4a:c6:7d:e6:f7:1a:3d:f7:29:0e:3d:3e:
         85:f9:cf:a7:2a:19:38:52:c7:81:48:03:64:b2:df:85:7e:f9:
         b5:cb:05:65:be:b2:8c:db:c8:bc:b2:5f:f2:a0:1b:74:91:92:
         d7:6b:9a:d5:1e:fb:4d:87:5d:69:12:a8:e4:8e:49:4e:c6:96:
         71:77:09:01:4d:12:e4:bc:0f:b2:a5:fa:ad:61:06:d8:17:cf:
         d7:c1:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----