Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a93ad04-76d9-3b3b-af9d-4c4f5da0433d.roa
File:                     8a93ad04-76d9-3b3b-af9d-4c4f5da0433d.roa (raw, json)
Hash identifier:          vC4OG+lBXF1rV72kx/mMgVn+aqOMo/CBBpinbqPCTJY=
Subject key identifier:   AA:D0:56:AE:04:C8:4C:76:2B:24:05:31:49:80:58:AD:35:68:24:9B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661B8EF7B7873EE029D660C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a93ad04-76d9-3b3b-af9d-4c4f5da0433d.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        75.91.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1b:8e:f7:b7:87:3e:e0:29:d6:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=3a473995-78f8-4832-9494-e8d7de27b5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:bc:a5:2e:77:fb:64:42:8d:d2:67:58:b1:
                    56:46:60:2c:f0:58:6b:8f:fa:90:dd:92:de:22:2a:
                    b8:c7:9f:bd:d5:8f:34:f0:d9:7a:b0:09:57:6e:3e:
                    cb:72:b9:36:0f:42:72:5a:86:c3:37:90:66:44:e2:
                    8a:61:1c:3e:73:15:ae:a7:d6:fb:65:14:08:b8:6a:
                    65:cb:7d:58:60:29:98:ae:4d:33:c3:cd:c5:9e:e8:
                    65:f9:fd:3b:25:8c:bc:cd:97:56:63:e4:b4:63:fa:
                    8d:57:07:1f:eb:cf:b9:42:98:ce:54:cd:36:e4:4c:
                    dc:94:ff:60:9a:34:a1:9b:be:e4:41:fd:71:34:b6:
                    43:1f:41:f0:e6:7c:3b:2b:a3:d1:7e:21:51:73:42:
                    ab:e8:3a:cc:47:c0:44:18:03:26:14:d8:8b:e2:ae:
                    73:f7:31:6a:2f:03:28:c1:a6:1d:d3:e3:51:f2:2c:
                    6e:52:2f:bb:f3:d0:d8:3a:e0:25:12:66:a7:d2:04:
                    e6:e4:e1:db:e5:1a:d9:7a:9a:fb:b3:e6:b4:d6:c0:
                    b4:af:e2:64:ad:48:3d:f1:14:cd:ab:57:0d:b7:d4:
                    db:b4:ac:32:71:d9:79:e6:19:5d:97:e7:44:53:bc:
                    55:f9:ec:17:d6:92:5e:42:a0:8a:37:15:ce:54:1b:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:56:AE:04:C8:4C:76:2B:24:05:31:49:80:58:AD:35:68:24:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a93ad04-76d9-3b3b-af9d-4c4f5da0433d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.91.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:6e:1a:5d:42:57:cb:fa:bb:16:59:00:75:c2:40:09:2e:
         fb:09:ba:2e:c6:7b:66:0f:de:3c:e0:65:5b:66:42:b2:79:3f:
         1f:f8:c1:c3:b1:da:65:ff:09:7d:52:71:ed:9f:8b:a9:bf:b6:
         77:a4:e2:27:bc:cb:8b:b3:4a:a9:20:11:02:20:f0:15:f6:60:
         02:1c:79:03:25:9b:73:2a:44:4e:6c:f0:fe:7b:f6:9f:57:b8:
         eb:bc:2b:28:5a:1c:7c:b0:bd:3d:80:ec:66:22:fc:2d:98:30:
         43:5a:6b:65:74:78:31:56:c2:23:91:47:46:ec:05:8a:b7:05:
         c3:53:48:47:46:27:69:b9:93:2b:e5:43:e9:f1:9b:79:17:d5:
         5c:0a:13:3e:e0:be:19:d0:ef:0d:b9:80:60:20:0f:5d:7f:34:
         78:28:70:06:aa:d5:fe:27:ef:4d:1b:0e:e3:3a:a8:59:72:6d:
         57:71:87:c0:30:5c:30:ed:22:d5:d1:59:e0:26:63:1e:41:9a:
         ea:5d:47:33:48:23:5d:57:23:10:f8:2a:bf:00:5f:54:9a:51:
         18:5c:f3:18:66:23:2d:d5:a5:16:0c:a1:38:5f:8e:50:7e:ba:
         c9:1d:54:5d:70:65:8f:b0:db:71:fd:27:99:d7:3e:57:50:a3:
         84:ee:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:05 2024 by rpki-client on console-fra.rpki-client.org