Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a94d7b78-66fa-3c9a-b378-208f18cad415.roa
File:                     a94d7b78-66fa-3c9a-b378-208f18cad415.roa (raw, json)
Hash identifier:          V/F7kZ1zVtoKanm24Sq57O+9lwY1Z5fzNteepiT6lW4=
Subject key identifier:   24:C8:A2:B4:83:A9:BB:64:9F:86:EE:47:7B:BF:FE:76:CF:B5:55:EE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66206F3ACA16F3A139E67F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a94d7b78-66fa-3c9a-b378-208f18cad415.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.190.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:20:6f:3a:ca:16:f3:a1:39:e6:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=7f355f82-0b45-47e3-a73c-6b59c6393296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7d:d5:df:36:c8:50:b4:9d:d3:d4:21:4d:82:
                    56:3a:af:0a:f4:b3:66:57:be:cb:bc:8b:f9:42:fa:
                    4e:65:4d:9e:21:a9:50:e3:14:b3:37:22:1e:22:3d:
                    b4:3c:c4:3d:12:a5:0d:e0:40:e3:b9:fe:86:ca:a4:
                    29:a6:ac:d5:be:37:ab:46:6c:a1:3b:f2:f8:39:07:
                    fe:a6:b4:1e:77:6c:3a:02:d3:b3:e1:e2:47:85:60:
                    0c:17:d5:65:7c:52:a4:5c:d8:ff:ee:92:1b:59:39:
                    6d:14:1f:c6:e9:7c:79:3a:7c:41:74:b0:e0:3f:da:
                    0a:b0:45:57:0b:90:ff:db:71:34:6e:48:dc:05:95:
                    85:c0:3a:ef:1b:07:5f:ef:c0:19:ed:e2:26:15:fd:
                    cd:76:c2:44:72:e0:ef:f5:90:b0:f3:36:d0:7b:e4:
                    a8:85:a5:f4:12:ea:f8:7b:35:8a:c0:86:8f:85:63:
                    c3:c2:10:72:a5:90:b0:42:87:67:80:da:44:63:0b:
                    10:90:ec:5c:79:27:b3:d1:c0:93:a5:86:16:9e:68:
                    43:02:d8:1c:19:53:f0:ae:f6:0d:22:7f:ea:19:de:
                    23:c9:c5:a5:aa:c7:53:bc:58:9a:3b:1a:20:1b:f8:
                    2c:05:75:f3:94:63:f1:7c:b7:65:0b:db:58:b1:f1:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:A2:B4:83:A9:BB:64:9F:86:EE:47:7B:BF:FE:76:CF:B5:55:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a94d7b78-66fa-3c9a-b378-208f18cad415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.190.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:e4:32:0c:ed:89:78:7f:4a:4f:89:bc:d1:c2:91:5b:eb:
         8a:89:56:f4:20:40:7b:ff:b4:66:83:de:d6:38:4d:fd:15:e8:
         ef:63:67:5a:63:7e:47:3f:39:f2:61:d9:15:59:e1:bc:72:02:
         a2:da:2b:86:30:0e:22:77:84:2b:d3:58:df:a4:ba:da:c3:d2:
         80:d8:53:86:71:6b:f5:ed:d1:88:17:b2:6c:0e:f8:d0:3d:e1:
         8a:a2:32:92:4a:ae:ed:06:26:76:c9:63:be:25:db:d9:bb:03:
         b2:7c:70:15:1b:5e:ed:50:4e:df:71:52:3d:5f:7a:ea:9b:63:
         1b:66:cc:86:7c:10:f7:70:e4:c0:04:03:ad:66:aa:a7:e5:9c:
         36:0b:25:15:4e:94:b4:67:53:62:f9:05:0c:83:5b:6a:cd:5b:
         82:5d:48:47:fb:0b:3b:74:3a:ce:89:57:61:65:0d:9b:d8:83:
         db:6a:5b:a8:d4:f7:a3:60:03:ef:27:22:66:0c:23:68:60:e7:
         2f:2d:44:8d:e6:1b:0f:ca:09:37:c1:cc:00:71:a5:f6:fc:60:
         c6:55:96:41:76:27:b3:5a:9f:42:71:c1:f7:d1:37:56:4a:a5:
         38:46:af:9d:0d:70:0b:d1:1e:5f:c3:fe:8f:f8:11:a4:21:af:
         13:29:a4:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mIG86yhbzoTnmf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2YzNTVmODItMGI0NS00N2UzLWE3M2MtNmI1OWM2MzkzMjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8n3V3zbIULSd09QhTYJWOq8K9LNmV77LvIv5
QvpOZU2eIalQ4xSzNyIeIj20PMQ9EqUN4EDjuf6GyqQppqzVvjerRmyhO/L4OQf+
prQed2w6AtOz4eJHhWAMF9VlfFKkXNj/7pIbWTltFB/G6Xx5OnxBdLDgP9oKsEVX
C5D/23E0bkjcBZWFwDrvGwdf78AZ7eImFf3NdsJEcuDv9ZCw8zbQe+SohaX0Eur4
ezWKwIaPhWPDwhBypZCwQodngNpEYwsQkOxceSez0cCTpYYWnmhDAtgcGVPwrvYN
In/qGd4jycWlqsdTvFiaOxogG/gsBXXzlGPxfLdlC9tYsfH/0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTIorSDqbtkn4buR3u//nbPtVXuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk0ZDdiNzgtNjZmYS0z
YzlhLWIzNzgtMjA4ZjE4Y2FkNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb6wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuq5DIM7Yl4f0pPibzRwpFb64qJVvQgQHv/tGaD3tY4Tf0V6O9jZ1pj
fkc/OfJh2RVZ4bxyAqLaK4YwDiJ3hCvTWN+kutrD0oDYU4Zxa/Xt0YgXsmwO+NA9
4YqiMpJKru0GJnbJY74l29m7A7J8cBUbXu1QTt9xUj1feuqbYxtmzIZ8EPdw5MAE
A61mqqflnDYLJRVOlLRnU2L5BQyDW2rNW4JdSEf7Czt0Os6JV2FlDZvYg9tqW6jU
96NgA+8nImYMI2hg5y8tRI3mGw/KCTfBzABxpfb8YMZVlkF2J7Nan0JxwffRN1ZK
pThGr50NcAvRHl/D/o/4EaQhrxMppB4=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:30 2024 by rpki-client on console-ams.rpki-client.org