Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae8703aa-af69-3ce2-b749-a88f0b945bff.roa
File:                     ae8703aa-af69-3ce2-b749-a88f0b945bff.roa (raw, json)
Hash identifier:          jyzz0HDE0UmQ6JUvc8DsX4AdPZN1l5pzKGLaqteGnOg=
Subject key identifier:   8D:84:19:A9:14:0A:82:0A:80:9D:76:7C:F0:B1:D8:48:4B:35:68:DF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551BF3F45B35BD5998880A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae8703aa-af69-3ce2-b749-a88f0b945bff.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     36124
IP address blocks:        107.7.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1b:f3:f4:5b:35:bd:59:98:88:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=8f9308cb-db91-4148-af5f-faf7e976e9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:41:6a:5f:43:0b:42:45:d2:f5:af:12:54:
                    76:8b:d1:8d:96:d7:4f:25:4f:87:de:8b:a2:d9:f0:
                    67:4f:b9:7e:2f:fd:c6:51:da:b3:6e:8f:33:05:25:
                    0b:a8:90:26:82:94:e0:ea:eb:6b:ba:4d:07:33:f2:
                    ba:85:79:38:81:ab:36:48:aa:96:03:91:ef:c4:28:
                    3a:7b:b5:23:ef:f7:b0:a6:29:9f:f0:da:67:c1:75:
                    10:92:d4:7e:fd:ee:90:e5:49:2d:ca:e4:71:c1:ef:
                    7e:4b:bd:f0:40:43:9c:08:9e:1e:4e:fa:27:24:d8:
                    1c:c9:cf:4c:db:0c:ee:dc:53:4b:af:98:69:20:44:
                    17:35:f6:43:90:f2:f8:92:c9:89:5d:5c:88:f3:3a:
                    69:de:81:b9:40:5a:8b:f7:e0:e8:6f:9d:92:85:c9:
                    52:d8:34:81:07:d9:bf:4f:85:39:02:36:2f:79:1e:
                    34:8f:af:6e:d9:6c:23:c8:ec:67:da:0b:ec:7a:40:
                    25:a3:76:a6:97:82:23:c8:52:83:2a:e4:e1:b3:3f:
                    69:55:56:ba:be:f7:13:64:3f:70:5c:98:b3:58:e7:
                    1e:28:a0:0d:89:c6:a6:79:cf:38:21:a6:04:03:96:
                    3c:90:8f:53:2d:a7:cf:1d:64:d1:0e:0e:a2:62:72:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:84:19:A9:14:0A:82:0A:80:9D:76:7C:F0:B1:D8:48:4B:35:68:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae8703aa-af69-3ce2-b749-a88f0b945bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.7.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:b0:da:0b:f1:4b:78:88:92:94:fe:de:dc:ec:92:7e:22:
         24:32:6e:1f:a1:d9:56:e5:88:8f:9e:a5:af:18:4e:78:92:35:
         f5:a0:5a:ad:5f:61:cb:15:c0:37:27:79:51:4d:3e:35:4f:25:
         3e:90:19:9b:2e:91:66:3b:c9:ef:85:e0:b6:74:85:2a:79:c5:
         de:0a:b8:b7:a0:0c:61:e6:ab:45:7e:d5:8e:45:15:5d:57:4b:
         ae:c9:b7:9a:ae:2a:24:21:b8:b3:74:c5:2d:c7:ca:b0:b9:a8:
         20:40:d5:c7:c6:fb:93:22:5c:ef:82:8d:08:12:7b:a4:31:e4:
         2b:0c:f0:ba:32:56:e7:38:a8:1f:6d:73:92:c5:bd:13:b6:2b:
         4c:15:08:dd:37:df:19:99:8b:8d:aa:1b:58:f9:5a:e7:7a:fd:
         3e:24:24:2a:37:b2:6b:f0:28:df:e9:1d:31:c7:a1:4b:51:c9:
         33:02:24:61:dd:9f:0f:53:fc:86:c1:ba:ad:21:b2:56:e8:b7:
         c9:7a:2f:c6:b4:5b:ff:0c:69:de:d7:93:34:01:35:a7:90:d9:
         c0:75:ed:d9:fb:08:9d:27:53:af:f5:24:d1:d5:54:d6:f1:a3:
         d8:af:3f:a9:40:8d:c4:b3:63:a1:00:80:60:00:83:fe:70:ea:
         1b:f6:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----