Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831e83d4-4872-3728-a73e-63572de8eb59.roa
File:                     831e83d4-4872-3728-a73e-63572de8eb59.roa (raw, json)
Hash identifier:          8ganERR9oDTsMgtfIq7i4geG287hyWYMNAPA8Emn/b4=
Subject key identifier:   67:04:3F:AB:6B:5D:41:BB:6D:20:BB:05:51:4B:D4:9F:B2:74:32:2F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E2528E17C1EC6EF12B0D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831e83d4-4872-3728-a73e-63572de8eb59.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     20458
IP address blocks:        207.106.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e2:52:8e:17:c1:ec:6e:f1:2b:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=84eef448-ec0d-4b0c-a54c-0929c19865a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:e6:f3:1a:da:b2:ea:dd:e9:3f:01:94:92:
                    0e:23:9e:69:1b:ee:e3:74:78:94:7e:49:05:98:d8:
                    67:5f:91:42:0f:60:5d:9c:41:9a:b7:3c:60:4a:d4:
                    76:2f:69:2d:99:a5:3c:1b:76:02:54:ab:41:81:17:
                    59:f7:eb:95:95:77:69:bb:44:e2:2c:e6:62:ec:4d:
                    7e:f9:25:b6:6e:2c:a0:6e:fd:a5:4c:00:bc:27:5c:
                    c7:d0:73:76:21:a1:0b:1e:29:f1:4d:e7:58:39:6a:
                    86:e4:99:c3:f1:59:2d:19:69:07:60:0e:64:43:4e:
                    df:10:ca:1d:96:fb:fe:a7:7d:e6:fe:bd:57:70:0a:
                    e7:74:d1:ea:67:8e:61:e1:94:d1:6f:ba:da:25:60:
                    f5:04:ad:43:9c:e6:76:66:f5:8d:89:92:35:ec:c6:
                    4f:be:6c:9d:13:9a:0b:60:b3:35:92:f9:46:83:22:
                    ac:87:0b:a7:aa:82:c6:04:ff:dc:e6:1b:f7:5e:41:
                    6c:1a:35:5e:37:9b:e5:d0:ea:25:6f:45:f9:3f:f9:
                    7f:c9:cf:d7:38:28:cc:8d:cc:86:cc:04:9a:52:78:
                    33:35:ce:ee:d1:43:d7:90:e2:2e:9c:a1:bf:f9:bc:
                    2d:76:9f:4a:54:66:d9:26:de:21:54:6f:e9:4a:0b:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:04:3F:AB:6B:5D:41:BB:6D:20:BB:05:51:4B:D4:9F:B2:74:32:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831e83d4-4872-3728-a73e-63572de8eb59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.106.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:b1:48:4b:ad:27:8f:d8:ac:ee:a6:0e:6f:98:8d:c9:d0:
         de:27:cf:d1:b0:fa:13:47:fa:7a:f7:79:9e:f5:d7:66:1f:ef:
         db:2c:8e:dd:27:b6:bd:cf:35:07:a0:3e:57:81:ef:60:87:fe:
         fb:e7:12:dc:db:7f:b7:c0:3e:92:9d:06:a0:f5:4a:af:ba:95:
         07:7d:4b:7b:bd:20:48:3c:af:13:b4:3a:ec:71:8f:ac:50:8c:
         b0:24:dc:20:3a:5b:af:72:87:45:9c:52:29:5f:6c:30:68:1f:
         90:6d:b1:75:c4:5c:81:be:ac:7f:09:22:4c:da:fa:20:72:a6:
         1a:4c:e7:ef:79:54:e0:c3:f9:38:95:89:31:60:4e:df:9a:ee:
         29:31:13:e1:4a:92:79:75:b0:0a:95:10:a1:30:8a:b8:e8:67:
         0c:23:83:d8:dd:64:20:33:7d:66:89:f1:ef:52:bb:17:ec:22:
         d7:9a:d4:3b:54:02:17:fc:f2:70:6f:f4:30:62:17:bb:9f:26:
         12:7c:37:59:e9:fe:b7:d6:56:8a:3c:49:8e:a1:ae:6b:b1:44:
         fe:7d:97:19:fd:68:02:20:27:18:88:cf:db:ec:f4:fa:86:c8:
         60:6f:b8:ce:85:ee:8f:e7:ce:1a:f4:10:bd:de:01:4b:d4:b7:
         82:2f:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:04 2024 by rpki-client on console-fra.rpki-client.org