Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb6b07f8-1867-3010-a537-4163a857f4f5.roa
File:                     bb6b07f8-1867-3010-a537-4163a857f4f5.roa (raw, json)
Hash identifier:          pRQLyRc13M6qRXq8cFCymVnm1IfksDpKlwPVomUV4e0=
Subject key identifier:   3F:82:A8:5E:A4:53:CA:F5:5D:33:57:85:6E:85:D0:E6:B4:50:03:17
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D661E37BEBFDB2A43CCE8E580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb6b07f8-1867-3010-a537-4163a857f4f5.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        98.22.96.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:1e:37:be:bf:db:2a:43:cc:e8:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=8a1a0936-d77e-4e43-ac7b-88f15783d12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:98:7a:a9:ac:3d:81:7f:aa:57:ae:80:5e:
                    ed:87:35:28:f3:2b:3f:8a:00:53:96:aa:e3:f2:ed:
                    73:e1:97:bd:a3:27:51:39:28:cd:2f:05:ba:7c:0f:
                    f3:ac:3d:41:ea:c8:f3:5c:da:7a:47:65:79:f8:d2:
                    f7:55:f5:ca:fe:a2:c9:21:92:23:60:13:87:50:6b:
                    f2:16:68:9f:4d:fd:8b:01:04:dd:83:74:44:aa:82:
                    e0:33:1c:9d:93:8d:bb:da:13:8e:54:e3:b4:80:dc:
                    13:5f:29:7d:9c:4b:f4:14:70:42:63:8f:6c:cf:71:
                    64:34:a8:51:08:97:da:fb:d2:33:47:9e:27:e7:3f:
                    bd:89:8b:dc:6c:31:29:39:9a:36:c5:87:81:83:e0:
                    ad:ce:3c:eb:32:81:6c:3e:eb:71:1e:9b:c2:c2:eb:
                    b2:72:41:8c:8c:98:86:54:dd:ff:85:85:6a:61:5b:
                    47:64:b5:3d:25:b6:8a:17:ac:3d:ed:02:c2:da:a7:
                    3a:ae:12:56:77:b0:43:db:69:92:19:0f:80:14:47:
                    ce:f5:0f:cc:97:30:be:e3:fd:f1:24:b0:12:a5:b2:
                    b4:76:dd:5d:2f:1d:3b:cc:7d:c4:4a:5b:86:fb:64:
                    c5:cc:42:78:cc:f4:83:f9:62:e8:50:0f:50:e0:a8:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:82:A8:5E:A4:53:CA:F5:5D:33:57:85:6E:85:D0:E6:B4:50:03:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb6b07f8-1867-3010-a537-4163a857f4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:20:28:80:fa:34:d2:93:9b:5e:80:9b:e2:13:7c:01:8b:3b:
         de:ca:5f:68:8d:a0:0b:58:63:62:a4:f7:5c:82:1f:9a:03:3f:
         ee:f4:a6:f1:a7:eb:c2:0e:94:5d:e8:bd:14:fd:3a:10:68:ab:
         55:2e:97:bf:a6:e9:8a:6c:7e:46:21:07:ff:ac:10:43:f1:08:
         00:b0:63:9b:59:11:46:a4:15:8f:64:a4:de:29:62:26:f1:e9:
         92:86:1e:9c:09:cc:ac:4e:2d:50:c0:16:c9:55:f3:db:c2:9f:
         07:9f:e4:63:d8:30:d7:2d:cc:fa:66:9f:a9:0e:68:82:11:57:
         b9:84:ae:ec:99:15:08:7a:cd:0d:c6:cb:df:12:c4:79:5f:97:
         32:4d:bb:99:99:ba:54:ee:f1:b4:b2:59:18:cf:5a:4a:00:3d:
         33:c7:9d:73:b0:3c:6b:ae:96:61:3d:1e:ad:a9:3a:5a:2d:08:
         76:38:d1:c1:28:82:11:45:ce:53:2c:01:da:da:03:1e:c7:9b:
         2f:82:82:44:3c:16:c9:92:73:d8:a2:5e:6e:22:01:4f:ac:9b:
         b6:a8:3e:cb:b2:7a:50:ec:7a:02:fe:f9:3a:1b:77:44:06:aa:
         69:a0:37:29:49:ee:e7:48:65:59:5e:e0:cb:ae:b8:9b:a2:b9:
         44:26:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:31 2024 by rpki-client on console-ams.rpki-client.org