Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b594b792-17a2-3119-983e-fca0a4c21078.roa
File:                     b594b792-17a2-3119-983e-fca0a4c21078.roa (raw, json)
Hash identifier:          dutrWl9PvRKgr0/dU+ACQFEslWTY+pGpYxSB21zVM58=
Subject key identifier:   B5:16:BB:59:90:DD:B5:16:CC:9F:13:71:37:B8:D2:F8:F1:51:E8:BC
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D662167CCC009BEEAAA807AA8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b594b792-17a2-3119-983e-fca0a4c21078.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        198.14.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:21:67:cc:c0:09:be:ea:aa:80:7a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=86759feb-cfca-4e99-80db-14f2997fb207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:35:a3:36:96:00:93:e2:e0:6b:9d:1e:ab:
                    48:fe:a6:13:d0:0b:e2:55:a7:8b:1f:c9:10:e7:af:
                    54:23:77:f3:a3:96:34:aa:46:53:8a:43:ef:6f:e6:
                    9b:1a:71:0b:23:c4:e0:8e:27:6c:35:60:d3:c6:0a:
                    07:61:b6:53:fb:0c:91:b0:33:5b:26:fe:de:1f:71:
                    ff:b5:d5:65:75:a6:01:f8:0a:73:86:41:2e:94:e9:
                    80:8b:d0:36:8e:36:76:4f:32:bb:2d:67:6c:cc:e6:
                    d6:df:80:8a:e4:b1:f8:5a:03:17:d6:ce:d7:74:57:
                    fc:0c:9d:1b:ae:90:82:2a:0c:c2:77:bb:37:4b:4e:
                    63:d3:09:29:75:86:fc:e2:06:94:4c:66:d9:bb:1b:
                    5c:26:e4:73:12:56:d2:8b:e1:d4:6d:54:a6:1f:f6:
                    0e:68:53:99:63:45:47:0c:73:8d:89:b3:f1:39:5a:
                    fc:39:53:11:69:b6:7b:b1:55:9e:cc:3f:54:16:f7:
                    2e:06:14:ae:02:8e:9c:4d:98:4c:74:f5:02:68:d3:
                    42:d3:10:83:15:fa:4c:df:03:16:3c:07:77:d5:9e:
                    e3:0f:5e:bb:e8:52:39:f6:65:c3:9b:dc:87:a6:11:
                    6f:ac:3d:0f:b2:b5:c3:de:e8:91:52:43:24:8f:23:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:16:BB:59:90:DD:B5:16:CC:9F:13:71:37:B8:D2:F8:F1:51:E8:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b594b792-17a2-3119-983e-fca0a4c21078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:b1:11:a1:f6:ed:b5:21:85:a6:71:b0:37:0d:01:43:3a:
         97:00:7b:cd:36:ae:75:1d:8e:1f:31:76:58:af:35:61:4f:81:
         7b:0d:d5:bb:12:24:ae:98:15:0e:2b:71:6d:18:16:c9:1c:95:
         27:6c:b9:a3:41:1d:b3:94:7d:ab:d1:bc:55:cc:b6:c8:eb:ac:
         e9:91:51:64:1c:62:49:d0:42:4c:44:33:27:c1:75:22:ae:dc:
         64:dc:1b:69:f2:a2:8e:da:b3:b2:8c:e0:b6:45:e5:6f:f4:92:
         8b:de:7b:bc:15:a4:2e:08:84:a8:c9:eb:3d:d2:74:09:72:ae:
         3e:db:72:8e:25:bf:c3:87:38:a3:20:80:d1:c2:9f:4f:58:4d:
         f2:82:5a:a8:29:0c:cd:f6:5d:13:39:23:be:ba:b6:29:60:d3:
         cd:4e:c1:34:87:05:14:71:42:58:05:e4:af:79:de:88:9c:c0:
         81:d1:f6:33:a6:39:0b:4f:be:bf:fd:5d:ea:2c:22:96:8a:98:
         76:9c:56:27:4f:29:63:d3:53:20:7c:e4:d2:f8:28:7b:1b:8b:
         ae:5f:f8:e8:4c:1b:f3:09:fa:f3:5a:e9:59:76:dd:db:4e:07:
         5a:d8:00:4e:f5:6d:4d:86:81:ed:81:a4:58:23:68:59:db:b8:
         5c:cb:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:09 2024 by rpki-client on console-fra.rpki-client.org