Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0a8a63a-7c09-3899-ba26-bfe29ea52277.roa
File:                     c0a8a63a-7c09-3899-ba26-bfe29ea52277.roa (raw, json)
Hash identifier:          nprBnFSeN/uoDXS/RHrnFMPl8/L/2E9uX3G1yYnkxAc=
Subject key identifier:   18:1B:7A:AA:02:22:73:97:6E:D2:E1:32:A0:F6:D0:16:31:18:5F:01
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FABFD4EDCFD2C7FB2FDDD10
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0a8a63a-7c09-3899-ba26-bfe29ea52277.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        208.101.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:ab:fd:4e:dc:fd:2c:7f:b2:fd:dd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=ff279cef-cc47-4d29-b77f-214c7a809521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:da:ae:4b:44:26:8c:f8:0e:35:2d:a2:a3:
                    fa:ea:7a:cd:f1:e2:da:da:c2:24:a6:cb:03:fc:96:
                    db:ca:01:a5:c7:23:fa:34:00:27:eb:d8:50:9f:87:
                    82:6a:e0:32:76:e0:3c:5b:6f:ec:0e:15:f3:5b:95:
                    dc:4f:45:28:ec:cb:48:19:a6:7e:19:a1:33:60:91:
                    1f:93:c3:6a:d9:3d:9c:ac:c4:25:0c:16:68:dd:cf:
                    65:c9:22:f8:4c:ef:11:0e:54:c3:97:05:6e:33:ff:
                    f3:dd:d1:21:bf:e8:3a:23:f5:df:1f:62:2e:a2:e4:
                    48:a7:bd:86:ec:ad:d1:f7:29:e1:9b:56:10:eb:7f:
                    69:d7:ed:9b:d5:fb:70:cd:3b:0a:20:9b:0a:42:8a:
                    1b:96:56:67:58:6e:4b:cc:3a:4d:1a:af:e7:33:8e:
                    65:ca:63:54:96:f8:db:47:ab:e1:2a:16:7a:9a:8a:
                    b5:77:78:6d:6e:79:86:40:17:71:f9:fd:cd:e4:22:
                    72:02:34:e2:78:a6:1c:f1:12:f1:61:30:e0:6b:51:
                    1e:e7:f5:ac:44:17:9a:24:c4:ab:87:86:c1:03:29:
                    68:32:7d:da:d6:b8:18:ff:82:65:2f:62:e3:9a:ec:
                    06:57:6e:07:23:e2:e2:08:2b:7f:84:99:a4:d4:14:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:7A:AA:02:22:73:97:6E:D2:E1:32:A0:F6:D0:16:31:18:5F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0a8a63a-7c09-3899-ba26-bfe29ea52277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a5:aa:22:3a:7d:a2:83:ee:1f:c7:84:c6:a6:e6:22:4e:0c:
         74:b2:84:db:07:9a:9c:f9:d0:5c:75:74:c8:b1:54:a9:12:15:
         18:da:bc:17:d0:59:67:01:6c:45:38:c9:2d:be:ad:5c:1a:a1:
         27:32:7e:d3:d4:f3:dd:1d:29:d2:8c:3b:bc:6e:38:a5:b3:49:
         a0:f3:c9:c7:ee:4c:8a:0f:0b:eb:4e:82:ac:c5:07:7e:28:ca:
         5f:cb:50:a0:6c:e6:12:bd:95:e3:00:77:23:fa:a8:1e:81:3c:
         9a:98:38:60:f2:94:12:6e:a9:dd:18:c3:21:90:c2:28:c5:fe:
         5d:f6:93:31:04:bb:8d:74:7f:4c:38:63:a7:a7:2e:64:66:44:
         54:01:25:7a:ad:83:7a:5d:b5:69:dd:d2:27:2b:50:7b:48:db:
         05:f2:c3:be:a7:b2:e1:7c:5c:fe:99:8d:7f:a0:a9:68:d0:37:
         7b:07:b4:76:c6:91:da:a3:92:40:f2:93:78:ab:f5:e1:de:b0:
         ff:fb:37:b8:e8:7f:4b:3a:29:0f:b3:a0:2c:7b:b3:ed:5b:f6:
         48:76:70:c1:3b:b8:c0:ec:86:ba:3d:c1:f0:b0:29:5a:1d:66:
         20:25:ac:68:6c:15:e5:dd:0c:b8:d1:b4:7a:ce:d4:e0:7a:ea:
         7c:21:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----