Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6664f57-e773-3bc4-905b-599697c65b94.roa
File:                     b6664f57-e773-3bc4-905b-599697c65b94.roa (raw, json)
Hash identifier:          21fill13BT4eSH7GGPVToUJ3VVT0kZzfkWzF7Mo5K38=
Subject key identifier:   6A:D4:63:2D:9E:97:16:7F:76:7A:CA:9B:36:F3:76:42:D1:11:C9:E3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA149DC0920708587FBD4FAC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6664f57-e773-3bc4-905b-599697c65b94.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00:2c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:49:dc:09:20:70:85:87:fb:d4:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=42be4462-9a36-4cf5-9bfa-5146e18a1eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:df:dd:c4:f0:cd:83:25:99:53:a8:3c:10:
                    f9:88:05:d4:06:6f:18:b0:82:61:1e:39:ba:fa:31:
                    7f:9a:3c:b5:46:dc:d8:da:4e:ba:5f:5e:f0:56:2f:
                    92:ec:aa:6e:49:bf:03:7b:b6:4b:cd:f5:d5:cb:66:
                    b1:8d:ee:58:57:e5:99:e7:a2:3d:46:e1:ce:9f:13:
                    28:f4:33:8e:c2:b1:7b:89:e7:fe:e4:a1:31:bb:e8:
                    15:7c:e9:ce:6d:8a:18:3d:7a:1d:8b:e9:8e:1b:43:
                    24:e8:65:3c:82:f2:b7:62:91:38:a6:a9:fc:86:0f:
                    50:79:77:f5:c3:9f:52:ac:39:8e:ec:7f:7a:ed:69:
                    58:63:72:9f:9e:f2:df:9b:64:48:29:bf:1a:1e:58:
                    66:d2:00:10:a3:f5:ae:a4:94:6d:21:a7:c9:71:bc:
                    0a:a3:a3:b8:39:41:fc:e8:55:69:62:63:e6:bb:ec:
                    bc:e8:38:fc:63:e7:77:83:c4:f7:5e:41:f7:c0:30:
                    b6:9e:21:b0:57:a3:e5:4b:c9:a8:6e:1b:08:b1:54:
                    a1:74:ce:4d:c7:a7:26:dd:52:69:d6:d2:d9:84:65:
                    3b:17:cf:67:1b:18:5d:f4:2f:7c:6e:77:66:81:cd:
                    8e:31:f9:64:7d:4e:9a:8f:5e:f4:0e:b6:37:02:3a:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D4:63:2D:9E:97:16:7F:76:7A:CA:9B:36:F3:76:42:D1:11:C9:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6664f57-e773-3bc4-905b-599697c65b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:30:f9:6f:bd:b0:1b:78:65:4b:d6:71:8b:cc:02:13:bf:d4:
         1b:e8:c7:cc:19:27:d8:c1:6c:0c:5a:a1:11:bc:9e:0e:a9:c4:
         3a:9d:96:78:4f:b5:03:ba:cc:f1:0c:57:15:f1:94:47:e6:ee:
         b4:45:db:9a:a0:96:7a:e9:22:28:84:f6:16:28:89:11:d6:30:
         3c:a9:69:19:b4:a3:1b:e7:c4:d1:3e:e5:1d:64:eb:65:89:78:
         ff:23:d6:f6:e4:90:95:f0:37:8e:e2:e7:d5:f7:c9:d7:2a:bd:
         bc:e9:70:0e:df:f8:ce:1f:39:a4:70:d8:18:66:1e:4a:a8:91:
         dc:2a:00:b1:2a:27:b4:cf:ac:9b:2a:ca:ef:81:8f:b6:4c:d9:
         3b:ea:a4:0b:f2:1a:d2:59:37:0d:cc:fa:18:01:eb:49:ee:e1:
         3e:23:fe:fb:30:78:dc:79:e5:0e:c7:79:f1:42:b1:27:2f:7a:
         f4:c2:05:00:d0:0b:aa:c9:d3:76:65:ad:f1:80:b2:32:58:55:
         64:3f:81:33:f9:4f:ff:27:1a:e1:1f:6b:1c:24:1f:bc:94:46:
         9a:66:22:2f:a9:0c:96:0e:d6:f3:b5:ce:a5:6e:7b:4f:30:3c:
         c7:e9:e2:45:a4:65:a7:3d:df:9f:c5:5c:2f:4a:42:06:77:c4:
         53:ce:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----