Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ec2ff6a-a92f-368d-939f-a3fd16e29bf9.roa
File:                     6ec2ff6a-a92f-368d-939f-a3fd16e29bf9.roa (raw, json)
Hash identifier:          CGBS5yYewjHAnDsuEeUaWnhf8iY8L9RHeMCl6CCVx7U=
Subject key identifier:   85:73:F2:E9:EA:AA:91:5A:26:8D:8C:34:64:A2:65:96:5E:B6:C9:CE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66192584D19F64966D652340
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ec2ff6a-a92f-368d-939f-a3fd16e29bf9.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        71.31.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:19:25:84:d1:9f:64:96:6d:65:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=4a527e62-886b-4db5-9413-9e0988abc685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:72:1a:84:84:1f:5e:79:4c:12:66:09:58:
                    9f:f6:83:97:7c:2d:33:ee:9c:2e:49:21:e6:a1:20:
                    0a:68:45:5e:35:58:a5:19:57:0a:22:88:ad:a3:aa:
                    0d:37:f4:46:25:e8:3d:90:00:10:24:01:e0:96:af:
                    d2:5b:be:8e:58:5e:b4:97:5a:3b:35:7f:b1:9d:05:
                    b8:c1:34:44:60:aa:bc:1b:9a:07:80:4f:79:28:35:
                    a1:f7:7c:ab:a3:0f:54:b7:cf:cf:45:cd:d7:10:52:
                    81:9e:cb:f0:55:7f:96:33:e9:71:fc:72:fd:15:95:
                    2c:09:da:3d:35:c1:ec:3c:c5:35:6d:df:36:01:94:
                    c3:91:56:56:18:15:4c:f9:61:a8:6d:7d:85:b1:2e:
                    3c:1f:f3:2a:d2:c2:0a:2c:c7:fc:52:2d:d2:20:5e:
                    74:c6:5c:4b:35:7d:a0:32:2e:3b:fc:da:28:14:c8:
                    17:0b:a0:1d:f5:c2:5f:4a:6b:be:a9:75:3c:da:c9:
                    cd:74:36:79:f2:50:b6:65:e0:85:2f:fa:e2:d3:24:
                    e8:eb:2a:b9:a9:18:11:19:5f:b4:c8:68:33:b8:3e:
                    d5:a8:af:d4:f6:8f:1c:4c:9b:93:45:4c:95:a5:fc:
                    c8:32:c1:7d:26:b7:56:5d:24:97:e5:86:36:28:84:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:73:F2:E9:EA:AA:91:5A:26:8D:8C:34:64:A2:65:96:5E:B6:C9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6ec2ff6a-a92f-368d-939f-a3fd16e29bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2c:f5:9f:2a:f1:7c:f0:de:de:f7:82:5f:0a:18:9c:82:22:
         cd:9e:20:72:59:91:76:43:70:3f:f0:06:36:26:7b:20:e0:c5:
         5b:65:f6:21:cd:55:ad:8a:3a:f0:88:66:cb:62:e1:35:72:85:
         ac:84:d7:f5:d0:46:5a:2e:9e:66:b2:de:29:4e:0a:36:7b:d2:
         51:31:b2:df:18:7f:a6:5a:d5:f8:5f:a8:5f:0a:04:84:ba:dd:
         a7:cd:79:ec:00:62:fd:8e:e8:06:c4:36:7f:2d:2c:91:d6:77:
         57:88:40:bd:36:29:7f:fe:b7:63:d7:c1:a1:16:da:7d:8d:a9:
         5b:7a:8e:eb:af:31:dd:60:ec:1d:d5:4b:7c:2b:c4:e4:b2:d5:
         6b:d1:2e:f1:e7:61:b6:90:8a:26:2f:a5:c2:af:06:3a:b1:56:
         0d:25:e1:d3:7e:6d:f5:2f:b0:e7:23:0c:f2:5b:8f:89:ba:7f:
         1a:02:81:3a:9b:b7:11:df:45:1f:72:cd:f1:f9:53:f8:ac:e5:
         8b:d0:b4:fb:77:15:45:2f:40:cd:98:bc:32:54:88:ee:84:be:
         4d:63:d9:47:ea:31:12:3a:06:7e:10:5f:6d:8e:65:e2:30:8f:
         0f:71:be:cb:a6:01:ff:68:de:be:3e:59:09:1f:3e:d6:93:42:
         dc:41:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:25 2024 by rpki-client on console-ams.rpki-client.org