Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b56b2fcb-359b-3cb2-81a7-70da5ab6826b.roa
File:                     b56b2fcb-359b-3cb2-81a7-70da5ab6826b.roa (raw, json)
Hash identifier:          w+cT8po3jSbTIBxxOgpUQRGK93GytJtW2urvj+3bo7U=
Subject key identifier:   B8:F1:68:6A:D7:D8:E7:66:CB:06:72:0D:CB:F1:41:AF:CC:9E:75:CD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D57E4A865B526771E5AF5A100
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b56b2fcb-359b-3cb2-81a7-70da5ab6826b.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 16 Mar 2028 04:00:00 +0000
asID:                     27338
IP address blocks:        209.192.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:57:e4:a8:65:b5:26:77:1e:5a:f5:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2028 GMT
        Subject: CN=21263e6b-18f0-4cd2-b04c-13a5f8f12721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:08:1b:66:ec:0c:60:ba:a7:ea:ca:a1:cc:
                    49:d4:73:aa:8d:59:38:ae:c2:0a:0a:40:7b:fb:b4:
                    c0:bb:14:c5:fd:4f:0d:21:a6:29:ac:95:c1:9e:b2:
                    56:02:49:c9:72:01:f2:ce:1b:44:22:a3:5b:7a:5c:
                    1d:7b:6a:26:78:ff:5a:c7:d4:cb:4a:eb:42:1d:4b:
                    b8:5b:99:f3:a2:aa:90:82:5f:43:c1:48:76:b5:39:
                    7b:ca:aa:d1:fd:01:2f:d0:8d:c0:1e:48:28:92:9b:
                    37:2f:db:d4:3f:66:c5:e2:8b:6f:46:da:41:e9:09:
                    1a:40:e9:53:04:33:c9:39:81:62:2e:00:42:68:b1:
                    ab:c6:a9:c3:39:d0:97:58:8f:59:6b:33:e6:00:97:
                    c5:25:f9:87:96:5f:1d:32:77:dd:4f:83:a1:cf:29:
                    43:ed:b2:fa:75:72:54:7b:7e:3e:d6:df:79:b7:9a:
                    a4:01:28:5b:13:de:e9:e0:ce:f8:a6:a0:3c:72:30:
                    2f:4f:5e:fb:d0:57:27:20:59:80:35:b0:83:00:5b:
                    07:c9:b5:4a:f7:3c:76:d4:b5:ea:cd:56:4c:4b:4e:
                    da:1c:5c:3a:a9:b9:55:fc:51:2c:1c:4b:e7:83:3d:
                    87:e4:ff:7c:ff:6a:f1:70:e1:6e:f5:62:ae:4b:b0:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:68:6A:D7:D8:E7:66:CB:06:72:0D:CB:F1:41:AF:CC:9E:75:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b56b2fcb-359b-3cb2-81a7-70da5ab6826b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.192.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:39:97:8c:0d:a1:7d:d3:0f:8e:a3:55:62:35:75:5a:2f:fe:
         c8:37:d6:ea:82:ea:a1:37:50:fc:bd:a1:4a:94:01:48:aa:60:
         1c:32:6d:52:dd:d1:ee:93:fd:f4:6c:56:88:46:e0:1c:01:ec:
         1d:83:4a:01:b4:4b:9a:61:2e:c5:da:d6:9f:cc:4f:c6:8f:a4:
         7c:37:7c:69:e1:1a:7f:dc:6d:47:a7:43:08:1e:ce:3e:92:7b:
         38:0a:8a:62:97:6d:8f:3f:56:60:79:0f:55:79:a9:fe:ad:67:
         83:f0:f0:71:a1:fe:a8:f7:32:5e:71:a5:18:3f:27:08:5e:0e:
         de:d9:63:c3:22:36:35:38:5d:0d:7f:8c:80:c4:4b:18:fb:d1:
         5f:5f:64:67:50:c9:26:a5:c3:db:14:43:e8:86:ff:1c:b9:12:
         66:f9:3c:11:2e:70:45:70:fb:b4:52:63:12:28:a7:49:7b:6f:
         89:93:98:5a:3c:48:43:d2:f9:81:7d:8b:ba:4b:f7:41:46:b4:
         97:da:93:50:06:47:50:82:c8:e2:fa:cb:5f:03:9d:e8:9d:2d:
         41:fc:98:67:8a:a2:e6:87:4e:00:bd:7a:3c:3e:3d:ed:78:99:
         d4:c5:92:99:97:6a:f6:4d:55:88:c6:1a:bf:16:69:e7:cd:1f:
         4f:10:df:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:09 2024 by rpki-client on console-fra.rpki-client.org