Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae02fc2-884f-3717-b166-f14d9f37f989.roa
File:                     aae02fc2-884f-3717-b166-f14d9f37f989.roa (raw, json)
Hash identifier:          DVWbANmatWIin3B7JuIdlOqIgvtk3LURgJ8/caUkwp8=
Subject key identifier:   58:3B:D6:D8:68:59:9F:7A:03:F9:11:FC:CA:46:1F:30:33:69:23:37
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661FF52AFC941D4C0B69E880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae02fc2-884f-3717-b166-f14d9f37f989.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        173.187.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1f:f5:2a:fc:94:1d:4c:0b:69:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=934282a6-50c5-43af-ba11-fbfe047d3dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:f0:67:0b:15:5e:e3:ce:b7:83:78:ed:c9:
                    6d:09:5f:47:78:60:36:a8:4f:ce:a9:b6:e1:e5:78:
                    8f:71:e8:18:b6:6c:ae:b5:b9:c6:2e:25:f3:38:c1:
                    60:56:6b:8a:94:63:b4:4a:02:cf:86:27:81:62:cf:
                    e0:c1:79:fb:5f:27:b3:cb:fe:0f:f4:32:72:51:3d:
                    39:90:7a:fc:f9:e4:2d:79:69:40:f4:d2:e0:a4:ed:
                    12:cd:15:34:67:ab:10:eb:48:9a:81:86:12:a1:cd:
                    ec:f8:6c:e5:d2:b2:3b:10:e7:73:53:6c:fc:24:96:
                    d2:46:1d:47:66:73:7f:dd:56:ff:9c:5a:8c:05:df:
                    92:85:fd:23:d2:a3:ec:7b:ac:3b:8d:fe:a7:04:90:
                    14:62:81:ad:ef:6a:9e:ef:6e:49:db:ff:c7:fc:12:
                    54:50:5f:8c:0a:91:c6:39:26:2d:ef:1b:93:54:c9:
                    fc:1d:a8:ce:58:ae:b3:8d:94:ad:8c:fc:8d:25:9a:
                    94:04:06:ca:73:7b:e6:13:df:fa:1f:46:19:e6:d3:
                    89:4e:6f:48:7e:4e:79:62:0f:d2:62:e4:69:3c:73:
                    85:83:ae:90:27:ea:1b:7c:0d:66:67:8e:48:79:fe:
                    2f:a0:e4:ab:97:e4:61:78:eb:ce:70:61:f6:07:27:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:D6:D8:68:59:9F:7A:03:F9:11:FC:CA:46:1F:30:33:69:23:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aae02fc2-884f-3717-b166-f14d9f37f989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:53:e4:7f:47:a7:91:88:aa:96:a8:c8:3b:bc:9d:fe:2f:30:
         4b:c1:63:9f:21:70:63:29:64:af:77:26:cf:72:b6:03:83:ba:
         4a:6f:7a:46:d8:8c:8d:56:4f:ef:ec:6c:d5:bc:88:f6:1e:66:
         ec:77:f0:f8:8d:57:d2:5f:fc:f6:12:a3:28:60:a4:0f:b8:a2:
         a9:33:90:11:ec:84:1e:96:10:91:da:d8:9f:c2:d8:fe:ac:1a:
         2f:a6:1d:37:eb:1d:b0:65:ee:fe:6d:85:54:7a:18:74:9c:38:
         f3:9e:43:41:f3:48:d8:78:67:a6:26:b6:85:6b:0b:65:4f:83:
         b3:a8:53:38:f6:4f:ec:3b:84:49:98:ac:b8:04:6b:dd:68:78:
         4f:83:b7:be:22:5f:58:c7:67:20:eb:fc:4d:68:3a:7d:10:a4:
         6d:eb:30:68:1e:c9:aa:d8:ad:2d:13:05:31:2e:88:ab:4a:3b:
         84:a6:b0:87:d8:ff:37:4c:68:72:de:6a:34:02:2c:66:63:34:
         e9:e8:f1:ce:b1:e2:21:9c:5d:55:ea:59:1d:b3:a9:64:47:57:
         2d:85:00:5b:7c:40:46:97:cf:07:1e:bb:e8:37:24:b4:bb:b0:
         03:3d:aa:7b:70:d0:48:fb:d0:5a:e2:29:7e:de:a9:e9:55:6f:
         bc:77:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:30 2024 by rpki-client on console-ams.rpki-client.org