Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a2472f0-a810-311a-96d0-279fefd59288.roa
File:                     6a2472f0-a810-311a-96d0-279fefd59288.roa (raw, json)
Hash identifier:          wCqohMSE+VRBdDOnAvPBgjpIXG8Mwmqa+w5AY+ckYZs=
Subject key identifier:   C0:73:7F:E4:F7:E8:CB:17:C7:D3:91:C7:9E:0E:BB:9D:DF:C5:C9:A1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E2CB3FAE40A49B5F6E4E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a2472f0-a810-311a-96d0-279fefd59288.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.222.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e2:cb:3f:ae:40:a4:9b:5f:6e:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=6b519875-e682-4dce-a77e-301d2ef2c60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:48:eb:9d:3e:0f:63:4a:b1:bc:bf:dd:dc:
                    8c:65:17:fd:fd:00:2e:05:d8:4d:1e:3c:e2:f2:db:
                    e0:fe:6c:22:0c:01:d6:ff:51:4b:84:75:46:a0:dd:
                    6e:d9:47:93:ae:76:83:ea:75:d1:5e:cc:a7:62:7a:
                    6f:c0:aa:df:fb:f8:b5:0c:bd:1d:96:17:2e:4b:3a:
                    4f:11:81:dd:ae:4c:7d:6f:ef:d0:8f:4a:c4:e8:06:
                    b9:ff:63:3f:49:91:7b:da:1a:8d:ec:e8:b0:d8:3c:
                    2b:dc:f5:27:92:99:f4:59:dc:7d:52:79:99:d8:5b:
                    e1:1e:43:97:38:3c:42:e5:33:73:26:b7:68:04:a7:
                    2d:c4:17:19:cf:1a:fb:6a:4b:fd:78:48:41:8b:0d:
                    19:09:18:58:f4:a4:eb:38:a2:02:8d:15:b1:a4:fb:
                    c1:b3:61:30:7c:c1:51:16:5f:28:1c:42:52:3e:cb:
                    38:40:3e:c7:63:21:53:fd:4f:67:3d:9e:41:a4:1c:
                    70:d4:7a:e1:63:40:73:a1:d3:d7:24:cc:5e:50:ff:
                    95:c8:31:f1:9d:b7:9e:be:33:52:d0:ee:ab:46:2f:
                    02:f4:a3:8b:4b:1f:db:ae:d0:3c:cf:15:5d:2f:2e:
                    a6:be:6d:c6:60:7b:c3:09:ee:d5:94:a3:e0:d6:63:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:7F:E4:F7:E8:CB:17:C7:D3:91:C7:9E:0E:BB:9D:DF:C5:C9:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a2472f0-a810-311a-96d0-279fefd59288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.222.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1c:40:bb:bc:9a:db:55:6f:37:a0:a7:7d:c3:85:08:56:18:
         e1:71:9e:53:8f:a6:e1:13:61:22:c9:a0:bd:82:65:4f:4c:12:
         ac:b4:94:fd:af:bf:9d:e7:03:34:2f:96:c8:18:a3:6e:ea:c2:
         09:2e:01:db:04:22:34:f1:5c:67:4b:c5:45:ce:61:0f:77:8d:
         0e:78:b6:2c:7b:56:d4:53:c5:c1:da:50:e4:80:77:66:a8:b9:
         c6:1b:d4:62:3f:a9:f1:ed:72:4a:8b:65:62:d7:82:d5:40:73:
         85:3a:c1:18:c1:0e:be:72:38:1d:fe:1d:04:60:a0:2f:02:cd:
         30:97:17:22:92:8c:39:b3:55:f4:58:b3:30:83:46:60:04:1f:
         75:93:d6:58:1f:37:7a:d8:fb:c5:c9:e9:25:71:f7:64:33:23:
         76:66:f4:4e:26:47:d1:1f:d3:3e:63:55:69:2d:0f:ee:e9:a4:
         78:53:5f:de:82:24:12:66:8b:1e:3d:4c:57:20:74:08:d6:c4:
         82:9f:32:cb:b3:f5:de:36:38:49:9f:26:db:12:b1:15:15:a6:
         92:08:e5:04:b8:af:16:8e:d1:26:dc:eb:89:7b:7e:5c:ac:03:
         7e:6a:93:ac:38:44:0b:a4:fa:76:a2:61:17:8b:a1:f2:1d:46:
         7a:b0:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----