Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2ab0d89-7825-3535-a92f-94c48f0f554c.roa
File:                     e2ab0d89-7825-3535-a92f-94c48f0f554c.roa (raw, json)
Hash identifier:          qzyMaa49bHXF2SNYbcol7DUesSQov1bgrSP5vt36kpg=
Subject key identifier:   4B:33:11:F3:39:D0:ED:47:D5:90:E4:8E:49:1D:3C:3F:50:BA:7A:E7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D4FA9747C38E2106113F8E480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2ab0d89-7825-3535-a92f-94c48f0f554c.roa
Signing time:             Mon 21 Mar 2022 04:00:00 +0000
ROA not before:           Mon 21 Mar 2022 04:00:00 +0000
ROA not after:            Mon 13 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        207.94.160.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4f:a9:74:7c:38:e2:10:61:13:f8:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 21 04:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2028 GMT
        Subject: CN=7475ea0a-583f-499a-9639-12034e546919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:62:ee:dc:ea:da:43:f5:f2:24:51:18:53:
                    b7:72:dd:8d:f0:e3:25:da:fb:d7:db:38:3e:b0:75:
                    45:1d:3c:89:26:a8:60:de:76:7f:1e:c6:f7:5f:a2:
                    ad:0d:a4:24:23:0a:85:e4:51:e9:1f:e5:64:54:f1:
                    08:0a:60:31:08:9b:72:3a:1e:a9:b0:5d:44:6b:17:
                    2c:00:33:5b:70:2f:e4:90:20:77:62:a3:45:f4:6e:
                    5e:ae:ff:31:46:0c:3e:15:8a:d7:8e:80:dd:25:12:
                    d9:f6:f6:a7:0f:a2:79:6c:63:6a:e6:c5:bd:4f:31:
                    17:1e:8d:9b:2f:65:ba:33:c7:11:17:58:83:91:44:
                    c2:1a:81:96:31:0d:06:94:c3:61:3a:80:65:6d:d7:
                    da:6c:6e:bc:a7:50:79:c7:ab:e1:3b:a5:35:ac:9b:
                    a1:ba:aa:72:86:f5:79:55:b4:20:3f:01:b3:e9:62:
                    eb:06:3b:33:01:a4:9b:7a:9c:70:c8:e9:38:e1:35:
                    c7:91:e0:f5:c7:34:ee:58:84:1f:91:6f:73:68:5b:
                    99:2e:ad:30:28:3b:cd:ce:ff:3f:eb:cd:77:80:81:
                    f5:d3:b6:e8:ab:88:9d:ad:83:e0:4d:c0:90:3d:44:
                    00:97:ac:b0:89:87:11:f7:e4:32:fa:f3:75:6d:24:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:11:F3:39:D0:ED:47:D5:90:E4:8E:49:1D:3C:3F:50:BA:7A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2ab0d89-7825-3535-a92f-94c48f0f554c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.94.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c5:38:6b:35:4f:22:75:bd:25:26:af:ed:69:e0:f4:cf:d8:
         cf:a9:b3:7b:7c:ea:15:56:09:96:88:3c:11:00:33:ae:ed:94:
         c3:97:45:50:2f:07:a4:8d:19:d4:cd:52:57:3f:89:79:56:de:
         eb:94:bd:71:06:b1:e3:3e:db:e2:b2:cd:a2:da:aa:e2:a7:c6:
         a7:e0:cb:c1:72:43:92:db:7c:b1:ff:6e:86:ea:df:02:8d:ce:
         b2:50:cc:12:58:66:d5:bf:ce:a6:bc:91:8b:e8:4c:90:20:52:
         b5:77:5a:fe:71:39:db:76:f3:83:34:f7:cc:d2:51:ae:fb:69:
         85:84:84:96:52:fb:7f:5e:5b:4f:24:f7:d3:20:0d:96:b7:48:
         ab:46:d3:a8:4d:45:60:84:f2:c5:7e:38:7b:54:4b:fb:1b:02:
         df:bc:ab:92:e1:22:07:de:7a:9c:26:61:d1:52:0d:47:db:94:
         39:7d:5d:f5:65:4b:8b:3b:ed:2c:e9:47:bf:89:84:28:65:88:
         29:37:f5:8f:b6:dc:ea:9b:bc:26:61:88:b0:d5:62:25:ea:51:
         bf:81:ab:01:20:ed:ec:f0:fe:8c:3d:81:60:87:92:a5:8b:2a:
         5a:f2:f7:90:b5:11:20:33:4e:23:24:fd:e8:fa:4c:62:2f:1c:
         ce:67:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----