Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8cfcf7d-7119-303a-8714-69cfdb746d5b.roa
File:                     a8cfcf7d-7119-303a-8714-69cfdb746d5b.roa (raw, json)
Hash identifier:          lDwBwirzww5iwM4glbQWpDsEbY+fd2DQbp+xvwNEX9I=
Subject key identifier:   C4:B0:AD:6C:9C:1D:34:D0:38:BD:9B:40:7C:62:AC:A6:C5:9A:A2:41
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661F6F9400E43256BD94DF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8cfcf7d-7119-303a-8714-69cfdb746d5b.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.185.40.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1f:6f:94:00:e4:32:56:bd:94:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=db94e328-cafe-4acb-91b8-8fccb425905f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:8e:88:3c:a6:85:cb:53:26:5a:a1:76:56:
                    d3:2f:72:1d:4b:76:d7:bb:bd:a7:83:de:6e:83:c7:
                    15:33:84:41:54:f8:f6:bd:f1:66:90:35:2a:9d:83:
                    73:af:0f:94:f0:46:0a:ce:50:23:93:b4:b0:50:fa:
                    b0:ec:50:20:45:80:3f:e8:cd:95:d7:4d:50:87:bd:
                    17:6f:82:8a:89:34:86:96:2b:32:38:ac:86:b9:c1:
                    8d:45:7e:14:b8:fa:9b:ab:b7:cb:97:7d:27:23:80:
                    7f:9b:7c:2b:d8:9e:a9:4c:a2:94:15:e6:ca:7e:71:
                    73:ff:b2:57:5c:38:10:dc:a8:ae:6e:37:8a:a9:cc:
                    5f:ab:d8:4b:a5:d7:75:cf:f7:a5:0e:31:8f:3b:43:
                    04:6e:70:c3:93:36:61:f5:05:b6:6e:3e:46:7e:25:
                    a7:39:c9:ab:66:ae:1a:e8:5a:73:3f:65:ff:cf:81:
                    e8:03:b9:68:2b:5e:df:a7:19:9a:35:1a:89:c9:83:
                    e8:aa:e6:17:6d:fc:d5:86:c8:d6:f5:56:58:68:be:
                    34:9f:d8:9b:2e:a6:42:a8:2a:e7:35:df:02:f6:cb:
                    e3:fd:c0:38:e2:57:6a:6a:73:14:7b:f5:91:23:c6:
                    32:eb:64:0d:36:a1:e3:6a:62:7a:36:99:57:78:a2:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B0:AD:6C:9C:1D:34:D0:38:BD:9B:40:7C:62:AC:A6:C5:9A:A2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8cfcf7d-7119-303a-8714-69cfdb746d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.185.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:44:27:0f:e2:79:fa:70:e7:09:5a:22:80:14:53:25:81:64:
         72:2f:5d:21:78:7b:8c:75:22:c2:02:88:a6:0b:13:0e:4b:70:
         12:d1:b6:2c:c9:af:c5:f5:21:31:98:f0:65:98:69:71:c6:68:
         b2:7f:8f:87:b0:4f:7d:2c:93:8c:ab:fb:c8:6e:26:4a:37:a5:
         1b:88:ee:48:ba:a8:53:ec:d5:6f:e0:e3:d2:7a:9f:f6:30:a6:
         49:78:e3:cd:63:59:52:4b:c2:b9:2c:1c:70:90:77:9c:21:85:
         3b:09:e0:47:ad:4c:d2:83:94:99:87:97:e6:ad:b2:97:c5:54:
         ad:65:ab:41:a2:ca:87:e5:9c:1d:a9:da:49:51:a7:c5:f9:0b:
         dc:1f:fa:5a:71:51:42:59:de:ad:0d:4e:da:99:e3:6e:a7:3a:
         5c:b8:38:03:6e:4a:02:93:94:47:73:64:f8:91:ed:de:42:99:
         48:5d:78:f8:da:2c:f3:2f:e1:5d:e4:e1:10:b7:10:9b:a9:cc:
         2f:6b:0b:32:8b:74:27:ef:22:9f:a0:f4:30:4b:f3:43:5f:52:
         36:19:20:d5:74:44:b6:fe:1c:40:f6:3d:80:fe:ba:c7:3c:ba:
         6a:79:2b:7d:f6:8d:6e:6f:b6:b8:05:71:42:cf:63:3d:5a:3b:
         f1:2d:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----